This article is more than 1 year old

Does the US CLOUD Act hang darkly over your data privacy?

How to combat the threat and comply with GDPR

Webcast Here’s something that you may not know, something the cloud companies are not keen to shout about too loudly.

The recently enacted Clarifying Lawful Overseas Use of Data (CLOUD) Act in the US allows federal law enforcement to access electronic communications data stored on the servers of all the major American cloud companies in the pursuit of information relevant to a criminal investigation.

That applies even if those servers are anywhere in the world, not just in the States. What’s more, if the FBI decides to nose through your data, they don’t even need to tell you.

You may think none of this matters because you are shielded by Europe's General Data Protection Regulation (GDPR). In force since May 2018, the GDPR aims to unify the EU’s regulatory environment, and also gives control to individuals over their personal data. It means any cloud provider that complies with US law and allows the FBI to nose around in your data risks breaching the GDPR. And in that case, will your cloud provider side with you or with the US government?

If this is news to you and setting off alarm bells, you can find out where you stand by tuning in to this webcast, brought to you by web hosting company Ionos, starting at 1100 BST on 15 April.

In conversation with The Reg’s Tim Phillips, Sab Knight, head of sales UK at Ionos, and Robert Healey, founder of Relentless Data Privacy, will help you discover:

  • Whether your data and that of your customers is really as safe as you thought it was
  • Why the CLOUD Act means you may not be GDPR compliant after all
  • What you can you can do about it

Find out more and sign up for the webcast right here.

More about

TIP US OFF

Send us news