Hacker News Reader

I don't think that matters - what matters is where the processing servers are. And if they are using CloudFront etc, they are sending data to the US.

View on HN

But those 3 US companies all signed the safe heaven agreement, AFAIK.

Agreements mean nothing because the problem is with US law, which these companies cannot countermand.

The Safe Harbor Agreement was invalidated by the Schrems I case in 2015. The Schrems II case from 2020 invalidated the EU-US Privacy Shield Agreement.

In addition, the physical location of the servers do not change anything when the company operating those servers is American. They still need to comply with the CLOUD Act, even to the point of pulling data and encryption keys from servers based in the EU.

Reply on news.ycombinator.com