Why is this a surprise to anyone? I run a US based IT company and we make it a point to ise encrypted Swiss (soon to be Norway) storage for our cloud based offsite sensitive backups. Local + offsite + cloud. All locally encrypted first.
If you are going to use a cloud infrastructure provider (not just storage), you really should use something based in your country and subject to your country’s laws. Otherwise, rent some local data center space and self-host like it’s 2005.
Norway has pretty draconic surveillance laws regarding digital cross-border communication, allowing all comms (encrypted or not) to be stored in the servers of the intelligence service for years, with the vague hope of combatting organized crime and terrorism.
If you use post-quantum encryption you should be fine though.
Why is this a surprise to anyone? I run a US based IT company and we make it a point to ise encrypted Swiss (soon to be Norway) storage for our cloud based offsite sensitive backups. Local + offsite + cloud. All locally encrypted first.
If you are going to use a cloud infrastructure provider (not just storage), you really should use something based in your country and subject to your country’s laws. Otherwise, rent some local data center space and self-host like it’s 2005.
Norway has pretty draconic surveillance laws regarding digital cross-border communication, allowing all comms (encrypted or not) to be stored in the servers of the intelligence service for years, with the vague hope of combatting organized crime and terrorism.
If you use post-quantum encryption you should be fine though.
https://rett24.no/articles/stiftelsen-tinius-tapte-soksmalet-om-lovligheten-av-ny-e-tjenestelov
Good to know!