Hundreds of countries have data localization laws, and while geopolitics raise the stakes, data controls matter as much as physical location

Mary Branscombe's avatar
20m

I was reading a UK consultation on international data flows and sovereignty and spotted the term 'transfer by access' and started digging into what data sovereignty really is. All the press releases talk about where the servers live or who does the customer support; is that just sovereignty washing?

True data sovereignty isn't where it's kept, but who has access to it

True data sovereignty isn't where it's kept, but who has access to it

Hundreds of countries have data localization laws, and while geopolitics raise the stakes, data controls matter as much as physical location.

www.cio.com

Mary Branscombe's avatar
20m

geography absolutely matters for data *residency* and localisation rules are only getting stricter but access and encryption key ownership are what matter for sovereignty and actually delivering that is a knotty enough question my editor had me put it in part 2 (coming soon!)

True data sovereignty isn't where it's kept, but who has access to it

True data sovereignty isn't where it's kept, but who has access to it

Hundreds of countries have data localization laws, and while geopolitics raise the stakes, data controls matter as much as physical location.

www.cio.com

Mary Branscombe's avatar
20m

just moving your data to a different region isn't how you get data sovereignty; lots of organisations still want the benefits of global services because local options aren't always up to snuff. Sadly, W Social has been proving that (and has had even more blunders since I mentioned them here)

True data sovereignty isn't where it's kept, but who has access to it

True data sovereignty isn't where it's kept, but who has access to it

Hundreds of countries have data localization laws, and while geopolitics raise the stakes, data controls matter as much as physical location.

www.cio.com

True data sovereignty isn't where it's kept, but who has access to it
Hundreds of countries have data localization laws, and while geopolitics raise the stakes, data controls matter as much as physical location.
https://www.cio.com/article/4235303/true-data-sovereignty-isnt-where-its-kept-but-who-has-access-to-it.html

  • data sovereignty

  • identity and access management

  • data labelling

  • jurisdiction

  • data localisation

  • data residency

  • cloud regions

  • US CLOUD Act

  • geopolitics