Well, you have to obeye local law. Only because the internet makes it easy to provide services in other countries doesn&#x27;t put you outside their law - the territorial principle applies.<p>Regarding the data protection specifics, well, maybe it makes sense to follow the standards of the most rigid country globally?<p>The wild west manner of US-companies and government are really annoying, the mindset is - if I get my hand on the data it&#x27;s my property. That is wrong, the user trusts &quot;you&quot; with it&#x27;s data and expects it&#x27;s usage only in the beforehand given consent for the necessary purposes.
It&#x27;s like copyright, the company has certain usage rights but does not own it.<p>The principles are easy: data processing has to be purposeful, lawful, fair and user rights and will is to be respected.