There is no problem storing data outside of the EU if GDPR standards are met. Switzerland, Iceland, Australia are some examples. I know it might be surprising from a US perspective, but there might be a need to change because of laws made by non-US citizens
1
1
I don’t see how you derive at that interpretation. Can you point to a court ruling that supports this? Schrems 2 alone doesn’t.
1
Yes, but that does not mean PII can’t be hosted in the US. It means you can’t give your users’ PII to 3rd parties without their consent, which is a good thing in my book
2
Let’s take Facebook as an example. I avoid them, that’s why I don’t visit their site. If I visit yours, I definitely expect you to not send data about my visits to them. That’s why GDPR requires you to ask for my consent before you do so.
2
2
Now I don’t have the same problem with Google (even though I’m not a heavy user), but the principle is the right one. Because it’s my data, what you’re allowed do with it is my decision, not yours.

Feb 11, 2022 · 4:55 PM UTC