CLOUD-what? Yes, what do we really mean. What are the things to watch out for?
What we are referring to is a US law called the CLOUD Act, which affects Swedish companies and their information if they use US cloud services to store data. The law means that US authorities must be given access to data stored on US cloud services, even if it is stored abroad, and that US cloud services cannot refuse to disclose such data.
But what if the US company offers storage in the EU? Yes, it is not uncommon for US companies to offer storage in the EU to Swedish companies in order to comply with the GDPR. With the CLOUD Act, this means that US legislation applies to data stored in a US cloud service, even if it takes place in the EU, and it can be very expensive for a Swedish company to ignore these risks. Similar legislation exists in Russia, India and China, among others.
We believe that Swedish data should be stored in Swedish clouds with Swedish privacy and under Swedish law.
