<story><title>Shopify Is Illegal in Germany</title><url>https://lsww.de/shopify-illegal/</url></story><parent_chain><item><author>shafyy</author><text>I think it&amp;#x27;s good that the EU is forcing the US to get their privacy laws in order.</text></item><item><author>lmkg</author><text>The CLOUD Act gives US law enforcement access to the data, even if it&amp;#x27;s only stored in Europe. That&amp;#x27;s the problem, and the EU court is doing no more than recognizing that for the problem that it is.</text></item><item><author>yashap</author><text>But their CDN providers (CloudFlare, Amazon and Fastly) aren’t. That’s the claim made in the article, that using American owned CDNs makes your business illegal in Europe, even if no data processing or storage happens outside Europe. I find this hard to believe …</text></item><item><author>abrichr</author><text>To clarify: Shopify is a Canadian company (edit: but as mentioned elsewhere in this thread: they send data to CloudFlare, CloudFront (Amazon) and Fastly, which are US companies.)</text></item><item><author>shafyy</author><text>All EU companies sending any PII to US-owned companies, regardless if the actual data stays in the EU or not, are in danger to be sued similarly to the author of this post. This is, among other laws, because of the US CLOUD act:&lt;p&gt;&amp;gt; &lt;i&gt;The CLOUD Act primarily amends the Stored Communications Act (SCA) of 1986 to allow federal law enforcement to compel U.S.-based technology companies via warrant or subpoena to provide requested data stored on servers regardless of whether the data are stored in the U.S. or on foreign soil.&lt;/i&gt;&lt;p&gt;So, it&amp;#x27;s not a Shopify specific issue.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;CLOUD_Act&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;CLOUD_Act&lt;/a&gt;</text></item></parent_chain><comment><author>mbreese</author><text>I don&amp;#x27;t think the EU will force the US to do anything w.r.t. privacy. Instead, we&amp;#x27;ll see EU based CDNs start to take over customers from US CDNs. Less &amp;quot;get your act together&amp;quot;, more &amp;quot;we&amp;#x27;d rather do this ourselves...&amp;quot;.</text></comment>
<story><title>Shopify Is Illegal in Germany</title><url>https://lsww.de/shopify-illegal/</url></story><parent_chain><item><author>shafyy</author><text>I think it&amp;#x27;s good that the EU is forcing the US to get their privacy laws in order.</text></item><item><author>lmkg</author><text>The CLOUD Act gives US law enforcement access to the data, even if it&amp;#x27;s only stored in Europe. That&amp;#x27;s the problem, and the EU court is doing no more than recognizing that for the problem that it is.</text></item><item><author>yashap</author><text>But their CDN providers (CloudFlare, Amazon and Fastly) aren’t. That’s the claim made in the article, that using American owned CDNs makes your business illegal in Europe, even if no data processing or storage happens outside Europe. I find this hard to believe …</text></item><item><author>abrichr</author><text>To clarify: Shopify is a Canadian company (edit: but as mentioned elsewhere in this thread: they send data to CloudFlare, CloudFront (Amazon) and Fastly, which are US companies.)</text></item><item><author>shafyy</author><text>All EU companies sending any PII to US-owned companies, regardless if the actual data stays in the EU or not, are in danger to be sued similarly to the author of this post. This is, among other laws, because of the US CLOUD act:&lt;p&gt;&amp;gt; &lt;i&gt;The CLOUD Act primarily amends the Stored Communications Act (SCA) of 1986 to allow federal law enforcement to compel U.S.-based technology companies via warrant or subpoena to provide requested data stored on servers regardless of whether the data are stored in the U.S. or on foreign soil.&lt;/i&gt;&lt;p&gt;So, it&amp;#x27;s not a Shopify specific issue.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;CLOUD_Act&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;CLOUD_Act&lt;/a&gt;</text></item></parent_chain><comment><author>bcrosby95</author><text>Wait, do you think law enforcement agencies in Europe can&amp;#x27;t force companies to reveal ip addresses and&amp;#x2F;or other customer information?</text></comment>