Facebook warned it may stop operating its core app and Instagram in Europe
businessinsider.com
businessinsider.com
> "In the event that the Applicant [Facebook] were subject to a complete suspension of the transfer of users' data to the US, as appears to be what the DPC proposes, it is not clear to the Applicant how, in those circumstances, it could continue to provide the Facebook and Instagram services in the EU,"
Lame threat that hopefully the EU will call upon.
1. If you want seamless auth, how do you want to handle this? Do they go to eu.facebook.com and authenticate that way?
If you geo locate the user to give them the proper authentication, what happens to a US based traveler who is in the EU?
2. Shared data. Lets say an EU person (whos data isn't allowed to go to the US) is friends with a US based person. We'd like to generate a feed of data for all that person's friends. Do we now have to query a DB in the EU? Is it ok to return that data to the US?
3. What about all the rest of the infrastructure around running an application:
* monitoring
* logging
* error alerts
* backups
* operations access controls
Its a hard problem to solve if you are starting with a clean slate. Its a harder problem to solve when you're trying to retrofit a set of technology that may not have been designed for geolocated data.