[scanny]

From my understanding it comes from a law passed that allows unlimited access by state intelligence services in China to any firms customer data.

  "The most controversial sections of the law include Article 7 which potentially compels businesses registered or operating in the People's Republic of China to hand over information to Chinese intelligence agencies such as the MSS and to conceal the fact that they do so." [1]

[1] https://en.wikipedia.org/wiki/National_Intelligence_Law_of_t...

[dumbo-octopus]

The same laws apply to American companies for American data requested by American agencies, is that better? And likely Norwegian too, but I don't know the specifics there.

[sunaookami]

>for American data

If only! https://en.wikipedia.org/wiki/CLOUD_Act

[sickofparadox]

Yes, it is better.

[Spivak]

Which like yeah, but the US doesn't exactly come out smelling like a rose here. The whole EU-US transatlantic data transfer spat surrounding Facebook was because of PRISM which EU courts ruled gave the US the same level of access.

The US even went so far to demand that US intelligence has domain over data no matter where it's stored, and supremacy when it conflicts with local laws https://www.theguardian.com/technology/2014/apr/29/us-court-....

If you're in the US you could make an argument that it's fine because it's your own government -- which I don't really buy because China can't arrest you over here -- but to everyone else US tech and business should be just as toxic as China if that's the real motivation.

[wumeow]

Appealed and overturned: https://www.reuters.com/article/idUSKCN0ZU1RI/

> which I don't really buy because China can't arrest you over here

Not entirely true: https://www.politico.com/news/2023/04/19/china-police-state-...