Quote:
Originally Posted by eschwartz
Sounds reasonable to me. Either obey the laws of the country you are in or don't do business there. Don't tell me you can brazenly violate the law of the land becaus you also do business in another country with different laws...
|
(quote snipped for brevity but the entire post is relevant.)
I essentially agree. For me, it's like this:
If the company is operating within jurisdiction,
and
the individual is within jurisdiction,
and
The business relationship between them takes place within jurisdiction,
and
the basis for the data request is within jurisdiction,
then
the data should be considered to be within jurisdiction.
Obviously, that's a bit simplified as many business relationships aren't so easily defined, but a company choosing to store customer data on any given server shouldn't
automatically place that data outside jurisdiction if everything that allowed that data to be created falls within jurisdiction.
At the same time, without laws that set parameters for such, MS is certainly in a rock / hard place situation (especially factoring in EU laws), and right now we don't have enough information to determine if this particular case even falls into the if / then scenario above. But this isn't the last time this is going to come up, so it needs to be addressed.