Not if Mozilla itself doesn't have the data.

A major part of the purpose of persona is to build a system that designs out the capability to engage in surveillance against the users.

I know. That's why I wrote in the article that they will need to move "both the legal entity behind [Persona] and the servers involved" to another country :)

They don't necessarily need to move the Mozilla organization, but then they'd need to make Persona an organization in itself and move that organization.

Just a bump to support this comment. Too many people do not realize that the privacy breaching laws (public and secret, if they are even adhered to by the govt) extend to any US entity wherever the data is in the world.

This is why data on Amazon, Google or Microsoft data centers in Europe and elsewhere are still open season for US authorities. The same would apply to Mozilla.

Then maybe Mozilla should move outside US juristiction.

can't an entity be incorporated in the EU that can own that piece of code, placing it out of the hands of Mozilla US?