Posts by FiletCrochet

Ministry of Justice abandons key plank of £280m IT project

Re: The US CLOUD Act 2018 changes everything - but not a lot of people know that

Unfortunately, the civil service has gone for Google GSuite.

Re: The US CLOUD Act 2018 changes everything - but not a lot of people know that

"the US doesn't have the power to demand stuff from overseas companies simply because their owners are American."

It does, though. No challenge is possible where there is no CLOUD executive agreement on extraterritoriality in place between the US government and the government of the other country. The US govt v Microsoft legal proceedings which had reached the US Supreme Court in early 2018, about data held on MS servers in Ireland, had to be abandoned altogether.

"The EU have already made a fair amount of noise about this - if a company complies with such a US order, against EU law, then that company will face serious consequences in the EU instead."

Which will never happen in the UK because the US govt can already see all the data it wants to see, that is held on the servers of US companies anywhere in the world, without a court Order.

Re: Parts of CPP have been successful

Barristers (self-employed) often have to use weekends to prepare for the following week. The MoJ/HMCTS digital case preparation thing routinely falls over at weekends, and when it is recovered people sometimes find their work has disappeared.

The US CLOUD Act 2018 changes everything - but not a lot of people know that

"like Exchange can? Or dirty in a different way Google Calendar?

If 95% of the business world can run on those 2 - why on earth is anyone considering a bespoke system?""

Perhaps because of the US CLOUD Act that was signed into law by Trump on 23 March 2018. Since then, the US govt and military can obtain data, including personal data, held on servers of American technology companies ANYWHERE IN THE WORLD, without a court Order. No possibility of challenge unless there is an executive agreement on extraterritoriality in place between the US and the government of the other country. There is no US-UK executive agreement in place.

It means that using Exchange and Google may put you in breach of GDPR and EU Directives 2016/679 and 2016/680. And "95% of the business world" using those two no longer includes EU countries, except by breaking EU data protection laws.

44m UK consumers on Equifax's books. How many pwned? Blighty eagerly awaits spex on the breach

That link in the article to "Equifax’s dedicated breach-handling site" takes you to a site that is only for people in the US (asks for your social security number, required field). So far, I have not been able to find any way of credit freezing your record on-line at Equifax UK. Has anyone else found it?