Shopify is a Canadian company, does this change anything?

toyg · on Nov 11, 2022

I don't think that matters - what matters is where the processing servers are. And if they are using CloudFront etc, they are sending data to the US.

rurban · on Nov 11, 2022

But those 3 US companies all signed the safe heaven agreement, AFAIK.

Hanschri · on Nov 11, 2022

The Safe Harbor Agreement was invalidated by the Schrems I case in 2015. The Schrems II case from 2020 invalidated the EU-US Privacy Shield Agreement.

In addition, the physical location of the servers do not change anything when the company operating those servers is American. They still need to comply with the CLOUD Act, even to the point of pulling data and encryption keys from servers based in the EU.

anonymousab · on Nov 11, 2022

Agreements mean nothing because the problem is with US law, which these companies cannot countermand.