By Craig Hale
Publication Date: 2025-12-02 10:20:00
- American hyperscalers adhere to the US Cloud Act, which goes against Swiss beliefs
- Privatim is advocating for true E2EE and more transparency across the chain
- American hyperscalers are acceptable if customers can encrypt their own data
Swiss data protection officers have warned public bodies not to use cloud services from industry hyperscalers Microsoft, Amazon, and Google, due to a lack of true end-to-end encryption.
This comes as many SaaS vendors, especially those falling under the US Cloud Act, could be required to hand over data to US authorities, even if it’s stored in Switzerland.
Cloud providers were also criticized for not offering sufficient transparency to verify security, with “long chains of external service providers” further complicating data security.
Switzerland warns against using Microsoft 365, AWS, and Google Cloud
Privatim, the Conference of Swiss Data Protection Officers, also warned that using SaaS means a significant loss of control…