cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Caute_cautim
Community Champion

Data Sovereignty is causing a legal storm

Hi All

 

Some interesting issues surrounding Cloud Security and data sovereignty, it has been pointed out the majority of data held by Cloud Providers currently around the world is either under USA jurisdiction or if it is to be believed actually under Chinese jurisdiction.

 

Here is a view point from a New Zealand law firm:

 

https://www.dentons.co.nz/en/insights/articles/2022/march/31/home-is-where-the-data-is-the-increasin...

 

It becomes a major issue with Maori Data Sovereignty and digital identity as well.

 

Is it likely to cause further issues in the future - I think it will.

 

Regards

 

Caute_Cautim

2 Replies
Steve-Wilme
Advocate II

Russian and China are particular issues in that data has to be localised to those jurisdictions.  So even US companies would need to ensure data about Chinese or Russian citizen did not leave the jurisdiction.

 

-----------------------------------------------------------
Steve Wilme CISSP-ISSAP, ISSMP MCIIS
Anthony69
Viewer


@Caute_cautim wrote: LiteBlue

Hi All

 

Some interesting issues surrounding Cloud Security and data sovereignty, it has been pointed out the majority of data held by Cloud Providers currently around the world is either under USA jurisdiction or if it is to be believed actually under Chinese jurisdiction.

 

Here is a view point from a New Zealand law firm:

 

https://www.dentons.co.nz/en/insights/articles/2022/march/31/home-is-where-the-data-is-the-increasin...

 

It becomes a major issue with Maori Data Sovereignty and digital identity as well.

 

Is it likely to cause further issues in the future - I think it will.

 

Regards

 

Caute_Cautim


Data sovereignty is the idea of data being subject to the laws and governance structures within the country where it is being collected - in contrast to Data being governed by the Laws and Governance structures of the country where it is stored or processed or where the company storing the data is incorporated.