CLOUD-what? Yes, what do we really mean. What to watch out for?
What we are referring to is a US law called the CLOUD Act, which affects Swedish companies and their information if they use US cloud services to store data. The Act means that US authorities must be given access to data stored on US cloud services, even if it is stored abroad, and that US cloud services cannot refuse to disclose such data.
But what if the US company offers storage in the EU? Yes, it is not uncommon for US companies to offer storage in the EU to Swedish companies in order to meet the requirements of the GDPR. With the CLOUD Act, this means that US law applies to data stored with a US cloud service even if it is within the EU and it can be very costly for a Swedish company to ignore these risks. Similar legislation exists in Russia, India and China, among others.
We believe that Swedish data should be stored in Swedish clouds with Swedish integrity and under Swedish law.
