• Avid Amoeba
    link
    fedilink
    arrow-up
    6
    ·
    5 days ago

    We can (and should) verify compliance with call-home restrictions.

    • CubitOom@infosec.pub
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      2
      ·
      4 days ago

      Let’s say you are able to prove that a foreign entity was not in compliance with your personal data. And you were able to sue for damages. How long would you be ready to wait? How long do you think it would take for that foreign entity to earn back their lost profits? How would your government force compliance if they refused?

      • Avid Amoeba
        link
        fedilink
        arrow-up
        9
        ·
        4 days ago

        Sue for damages? Hell no. The national regulator conducts random checks, like food safety. Found a car that sends data across the border? Inform the manufacturer and give them a short window to remediate, following which you stop all imports, and or prohibit sales under the regulation. Similar to how we can prohibit sales of all sorts of goods on the basis of safety.

        • CubitOom@infosec.pub
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          4 days ago

          That’s fair. My point is that once your data is no longer yours, regulation won’t save it.