I don't know how to feel about this. One the one hand this is good for sites that needs to be more global. But I mainly build stuff for Europe and I don't want anything to do with USA when storing personal data. I hope they keep the seperation between Europe and US clear.
> Hetzner's own team of technicians in Germany provides customer support for the Hetzner Cloud servers in both Europe and Ashburn, VA. See below "How do I contact support?" We hope to soon expand the hours for the support team, and we will make an announcement when this happens.
One can hope, otherwise I can see European customers move off Hetzner. We have a number of customers who do not want US staff to be able to access their servers and VMs.
This is such a far departure from where I was hoping the Internet would look like growing up. Makes me sad political borders are now viewed as a feature.
This is nothing to do with freedom of speech; the issue is differing laws on data privacy between the EU and US (and repeated failure of Safe Harbour and other regulatory attempts to paper over the cracks).
So one concern (and it's not just a theoretical concern; it has happened) is that a US court forces the US branch to use access it has to data held by the EU branch to exfiltrate data. Companies with the highest standards on this stuff will want either a pure-EU host or a host structured such that this can't happen.
Not Complying with US law is also illegal, now imagine who has more to say in that regard.
Hetzner should split up in two Company's.
BTW:
The CLOUD Act applies to all electronic communication service or remote computing service providers that operate in the U.S, whether those providers are established in the United States or another country.
The Schrems II judgement might be applicable. I know that in the EU-based company I work for we have strict requirement for all cloud providers to comply with Schrems II, and not send/store any personal data to outside EU.
i was asking specifically about "US based employees should not have access to manage", which isn't necessarily the same thing as "not send/store any personal data outside the EU". You could have data stored inside the EU, but then saying no US-based employees can have access to it seems like another further requirement? Although it may be one under GDPR? But that's what I meant asking for more info about, sorry!
