Revisited: Concerns about cloud usage at RIPE NCC
Hi all, Last november i wrote a post to this mailinglist, voicing my concerns about the wide use of US based cloud services at the RIPE NCC. This was just before the US elections took place. RIPE NCC (Felipe) responded to my concerns, and the last sentence of that mail was: "It is difficult to run our operations if we have to speculate on what governments can and cannot do. Instead, we apply a risk-based approach, paying close attention to the contracts we sign with these providers and ensuring that the obligations described in them give the highest possible level of privacy and security for our members." Now, a lot has happened in the world since november, and without going into every detail, i think it is safe to conclude that the US and its big tech companies can no longer be seen as reliable partners when it comes to storing our personal data. In fact it could soon become illegal for EU businesses and organisations to store personal data on US owned cloud platforms; the Transatlantic Data Privacy Framework (TADPF) that allows a free flow of EU data to US providers relies on the "Privacy and Civil Liberties Oversight Board" (PCLOB) for oversight on data protection laws. Already in january, Mr Trump fired all democratic board members of the PCLOB, rendering the board powerless, as they now lack the required quorum necessary to operate. This means that the foundation of the TADPF has essentially been removed, and while EU organisations can still rely on the agreement as long as it's not formally annulled by the European Commission or the Court of Justice, it is now more important than ever to have a contingency plan. So, since the RIPE NCC applies a risk-based approach, my question would be: What contingency plan is there in place for the RIPE NCC? How quickly can they switch to a self hosted or "hosted in Europe" model, while still providing essential services to the members? * Some relevant links with more background information: https://noyb.eu/en/us-cloud-soon-illegal-trump-punches-first-hole-eu-us-data... https://www.lawfaremedia.org/article/trump-s-sacking-of-pclob-members-threat... https://berthub.eu/articles/posts/you-can-no-longer-base-your-government-and... Timo Hilbrink Freedom Internet
Hello,
RIPE NCC (Felipe) responded to my concerns, and the last sentence of that mail was:
"It is difficult to run our operations if we have to speculate on what governments can and cannot do. Instead, we apply a risk-based approach, paying close attention to the contracts we sign with these providers and ensuring that the obligations described in them give the highest possible level of privacy and security for our members."
Now, a lot has happened in the world since November, and without going into every detail, i think it is safe to conclude that the US and its big tech companies can no longer be seen as reliable partners when it comes to storing our personal data.
Thanks for bringing that up. Please note that the NL parliament asked SIDN to move any (bigtech) cloud systems back to NL, and so should RIPE. -- MfG/Best regards, Kurt Jaeger Now what ? Dr.-Ing. Nepustil & Co. GmbH fon +49 7123 93006-0 pi@nepustil.net Rathausstr. 3 mob +49 171 3101372 72658 Bempflingen
Timo Hilbrink wrote:
So, since the RIPE NCC applies a risk-based approach, my question would be: What contingency plan is there in place for the RIPE NCC? How quickly can they switch to a self hosted or "hosted in Europe" model, while still providing essential services to the members?
I fully support the concerns raised in this thread regarding the reliance on US-based cloud services, especially in light of recent political developments that undermine the foundations of the Transatlantic Data Privacy Framework. However, I would like to suggest that the issue goes beyond the geographical or legal jurisdiction of providers. Even within Europe, many so-called "EU-hosted" services are ultimately built upon infrastructure or platforms controlled by foreign or commercial entities with limited transparency and potential exposure to external influence. From a risk-based perspective, true operational independence and legal clarity can only be achieved through self-hosting critical infrastructure under the full control of the RIPE NCC itself. This would eliminate dependencies on commercial cloud providers and allow for full auditability, transparency, and compliance with the highest data protection standards. Given the importance of the services RIPE NCC provides to the stability of the Internet ecosystem, I believe there is a strong case for moving toward infrastructure sovereignty – not just geographical, but technical and operational as well. -- nemox.net Rudolf E. Steiner r.steiner@nemox.net http://nemox.net/pdat/res/
i agree with the perception of risk using us-based provider(s), but ...
From a risk-based perspective, true operational independence and legal clarity can only be achieved through self-hosting critical infrastructure under the full control of the RIPE NCC itself. This would eliminate dependencies on commercial cloud providers and allow for full auditability, transparency, and compliance with the highest data protection standards.
this is the way things used to be. we complained it was too expensive. without micro-managing the details of service provisioning, let's assume that the NCC's cost analysis was good. are we willing to pay for data sovereignty? < from the cheap seats > my short term suggestion, should anyone be foolish enough to ask, would be that the NCC not bind itself to things such as AWS's or Gobble's very sticky feature services. portability to different MaaS providers would be my inclination. i suspect there is a lot of thinking going on in amsterdam this season. and by folk with much more information and expertise than i have. randy
Randy Bush wrote:
are we willing to pay for data sovereignty?
We should. Absolutely. -- nemox.net Rudolf E. Steiner r.steiner@nemox.net http://nemox.net/pdat/res/
Hi!
are we willing to pay for data sovereignty?
Yes. -- MfG/Best regards, Kurt Jaeger Now what ? Dr.-Ing. Nepustil & Co. GmbH fon +49 7123 93006-0 pi@nepustil.net Rathausstr. 3 mob +49 171 3101372 72658 Bempflingen
https://berthub.eu/articles/posts/a-coherent-non-us-cloud-strategy/ Kind regards, Job
Not if that means raising the membership fees to higher heighs. Not every LIR are big companies with yearly benefits counted with 6 figures. Some are own by non profit orgs, associations, individuals, etc. Yes the sovereignty is an important point, and probably most non-profit strctures take this way to have more sovereignty over their infra, but what's the point if we can't afford the membership fees anymore ? So it's a big yes with a per-resources/category charging scheme, but a not possible at all with a flat membership fee. Le 07/05/2025 à 01:12, Randy Bush a écrit :
i agree with the perception of risk using us-based provider(s), but ...
From a risk-based perspective, true operational independence and legal clarity can only be achieved through self-hosting critical infrastructure under the full control of the RIPE NCC itself. This would eliminate dependencies on commercial cloud providers and allow for full auditability, transparency, and compliance with the highest data protection standards.
this is the way things used to be. we complained it was too expensive. without micro-managing the details of service provisioning, let's assume that the NCC's cost analysis was good. are we willing to pay for data sovereignty?
Hi, On Tue, May 06, 2025 at 04:12:36PM -0700, Randy Bush wrote:
are we willing to pay for data sovereignty?
Yes. That said, I question if the price tag is really that much higher in the end, taking everything into account. Hyperscaler services tend to cost way more money than promised upfront (unless in specific cases where you need flexibility and burst scalability, which I do not really see for the things NCC does). Also, we might not even have the liberty to ask ourselves that question if the legal framework requires keeping our data in regions that adhere to european data protection legislation. Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Karin Schuler, Sebastian Cler Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279
Hi guys, On 5/6/25 23:12, Randy Bush wrote:
are we willing to pay for data sovereignty?
We must be, or our governments must be. Many of us are responsible for parts of vital digital infrastructure of our countries. It is not, with all possible emphasis I can conjure up without all caps, not responsible to trust Donald Trump and his henchmen (which we are currently doing) with the fundamental data underpinning these extremely important services of our countries. I remind you of the existence of National Security Letters and similar instruments in the USA. We will never know what access the US government has procured to European data from any US entity or person if the US government does not want us to know. The US service providers will absolutely be barred from informing anyone at all. I advice you to read up on Nicolas Merrill. Best, Mo 1984
are we willing to pay for data sovereignty? We must be, or our governments must be. Many of us are responsible for
Hi guys, On 5/6/25 23:12, Randy Bush wrote: parts of vital digital infrastructure of our countries. It is not, with all possible emphasis I can conjure up without all caps, Not. Responsible . to trust Donald Trump and his henchmen (which we are currently doing) with the fundamental data underpinning these extremely important services of our countries. I remind you of the existence of National Security Letters and similar instruments in the USA. We will never know what access the US government has procured to European data from any US entity or person if the US government does not want us to know. The US service providers will absolutely be barred from informing anyone at all. I advice you to read up on the case of Nicolas Merrill. Best, Mo 1984
Hi everyone, On Wed, 2025-05-07 at 00:01 +0200, Rudolf E. Steiner via members- discuss wrote:
So, since the RIPE NCC applies a risk-based approach, my question would be: What contingency plan is there in place for the RIPE NCC? How quickly can they switch to a self hosted or "hosted in Europe" model, while still providing essential services to the members?
I fully support the concerns raised in this thread regarding the reliance on US-based cloud services, especially in light of recent political developments that undermine the foundations of the Transatlantic Data Privacy Framework.
I also fully support the idea. As a critical infrastructure provider, and especially relying mostly on european entities fund, I think that the NCC should focus on the idea to work with eu-based companies, even if it's not cheaper. European companies should act like that, imho. Kind regards, -- Clément Cavadore
If you look at this list https://www.ripe.net/publications/documentation/cloud-technology-status/, even without access to the actual contracts, I would imagine that most of the contractual parties are European companies. That is, NCC buys services from entities incorporated in an EU country even if they're subsidiaries of a foreign parent. Now, how much should one insist to be European? Is incorporating sufficient? Based on other responses there seem to be people implying it isn't. So, should one allow foreign ownership? If so, how many % should be allowed? What should happen should the company be acquired? If the company isn't listed, how could you even verify this, realistically? What about the company's subprocessors? Can they be foreign? So far it seems like NCC has been doing what is commercially reasonable. Most of the data is public one way or another or can be looked up from alternative sources. Kaj Sent from my iPad ________________________________ From: Clement Cavadore via members-discuss <members-discuss@ripe.net> Sent: Wednesday, May 7, 2025 10:38 AM To: Rudolf E. Steiner <r.steiner@nemox.net>; members-discuss@ripe.net <members-discuss@ripe.net> Subject: [members-discuss] Re: Revisited: Concerns about cloud usage at RIPE NCC Hi everyone, On Wed, 2025-05-07 at 00:01 +0200, Rudolf E. Steiner via members- discuss wrote:
So, since the RIPE NCC applies a risk-based approach, my question would be: What contingency plan is there in place for the RIPE NCC? How quickly can they switch to a self hosted or "hosted in Europe" model, while still providing essential services to the members?
I fully support the concerns raised in this thread regarding the reliance on US-based cloud services, especially in light of recent political developments that undermine the foundations of the Transatlantic Data Privacy Framework.
I also fully support the idea. As a critical infrastructure provider, and especially relying mostly on european entities fund, I think that the NCC should focus on the idea to work with eu-based companies, even if it's not cheaper. European companies should act like that, imho. Kind regards, -- Clément Cavadore ----- To unsubscribe from this mailing list or change your subscription options, please visit: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmailman.ripe.net%2Fmailman3%2Flists%2Fmembers-discuss.ripe.net%2F&data=05%7C02%7C%7C1777c8d5783542083d6a08dd8d3a26ea%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638822003083715336%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C4000%7C%7C%7C&sdata=KdciwhRjuz4kbr%2BffK28rr%2FShRoNoFM7OkFkmEklbGk%3D&reserved=0<https://mailman.ripe.net/mailman3/lists/members-discuss.ripe.net/> As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ripe.net%2Fmembership%2Fmail%2Fmailman-3-migration%2F&data=05%7C02%7C%7C1777c8d5783542083d6a08dd8d3a26ea%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638822003083735722%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C4000%7C%7C%7C&sdata=8AceqP7kwqWhGgqbS%2BqoHuYfWKm1CAVV2PcTAuA4GdU%3D&reserved=0<https://www.ripe.net/membership/mail/mailman-3-migration/>
Hi, On 07/05/2025 00:01, Rudolf E. Steiner via members-discuss wrote:
From a risk-based perspective, true operational independence and legal clarity can only be achieved through self-hosting critical infrastructure under the full control of the RIPE NCC itself. This would eliminate dependencies on commercial cloud providers and allow for full auditability, transparency, and compliance with the highest data protection standards.
Given the importance of the services RIPE NCC provides to the stability of the Internet ecosystem, I believe there is a strong case for moving toward infrastructure sovereignty – not just geographical, but technical and operational as well.
I agree that self-hosting everything would be the ideal solution, but we also need to be realistic, and conclude that this might not be possible within the current financial budget. It might be an option to self-host certain services which are not so heavy on resources, while other services (eg. object storage to replace S3) could be placed at a cloud service under EU legislation. But as Randy said, we are not here to micro manage the RIPE NCC, they are well capable of deciding what the best balance is. For the short term, i believe it is urgent to at least have a plan how to remove the dependency on US based cloud technology. Timo Hilbrink Freedom Internet
Timo Hilbrink wrote:
I agree that self-hosting everything would be the ideal solution, but we also need to be realistic, and conclude that this might not be possible within the current financial budget.
It is a common misconception that commercial cloud services are inherently more cost-effective than self-hosting. In fact, the opposite is often true once a certain scale of usage is reached. Cloud providers charge recurring fees for compute, storage, bandwidth, monitoring, and often even for support – all based on proprietary pricing models that are difficult to predict and control. Hosting even basic services on platforms like S3 or EC2 can become significantly more expensive over time than running well-managed, dedicated infrastructure, especially for sustained workloads, high I/O, and long-term data retention. When properly designed and operated – using virtualization, standard hardware, automation tools, and efficient monitoring – self-hosting is not only more cost-efficient in the medium to long term, but also offers maximum independence, transparency, and compliance with data protection standards. This does not mean everything must be migrated at once. But the assertion that self-hosting is “not feasible within the current budget” should at least be subject to a differentiated cost-benefit analysis before being used to guide strategic decisions. -- nemox.net Rudolf E. Steiner r.steiner@nemox.net http://nemox.net/pdat/res/
Of course, you are absolutely right! If NCC wants to remain an independent operator of address space management and network interaction, it needs its own distributed infrastructure. Perhaps it's support could be provided by some NCC members. BUT THAT'S NOT THE MAIN POINT. Very Soon, issues within the EU will arise to us such more problems then clouds problem. The NCC now SHOULD take measures aimed to removing dependence on the laws of only one country and the EU and on the fully financial dependence on the Euro. In the current situation, it is not enough to have your own distributed network infrastructure. We need a "distributed" organization, possibly through a network of branches in some countries. And we need a versatile financial policy with the preservation of reserve funds in different assets and countries. If we don't start doing this now, the NCC will not survive as an independent structure for more than 2-3 years. This is my forecast.
Hi all,
Last november i wrote a post to this mailinglist, voicing my concerns about the wide use of US based cloud services at the RIPE NCC. This was just before the US elections took place.
RIPE NCC (Felipe) responded to my concerns, and the last sentence of that mail was:
"It is difficult to run our operations if we have to speculate on what governments can and cannot do. Instead, we apply a risk-based approach, paying close attention to the contracts we sign with these providers and ensuring that the obligations described in them give the highest possible level of privacy and security for our members."
Now, a lot has happened in the world since november, and without going into every detail, i think it is safe to conclude that the US and its big tech companies can no longer be seen as reliable partners when it comes to storing our personal data.
In fact it could soon become illegal for EU businesses and organisations to store personal data on US owned cloud platforms; the Transatlantic Data Privacy Framework (TADPF) that allows a free flow of EU data to US providers relies on the "Privacy and Civil Liberties Oversight Board" (PCLOB) for oversight on data protection laws. Already in january, Mr Trump fired all democratic board members of the PCLOB, rendering the board powerless, as they now lack the required quorum necessary to operate.
This means that the foundation of the TADPF has essentially been removed, and while EU organisations can still rely on the agreement as long as it's not formally annulled by the European Commission or the Court of Justice, it is now more important than ever to have a contingency plan.
So, since the RIPE NCC applies a risk-based approach, my question would be: What contingency plan is there in place for the RIPE NCC? How quickly can they switch to a self hosted or "hosted in Europe" model, while still providing essential services to the members?
* Some relevant links with more background information: https://noyb.eu/en/us-cloud-soon-illegal-trump-punches-first-hole-eu-us-data... https://www.lawfaremedia.org/article/trump-s-sacking-of-pclob-members-threat... https://berthub.eu/articles/posts/you-can-no-longer-base-your-government-and...
Timo Hilbrink Freedom Internet ----- To unsubscribe from this mailing list or change your subscription options, please visit: https://mailman.ripe.net/mailman3/lists/members-discuss.ripe.net/ As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://www.ripe.net/membership/mail/mailman-3-migration/
----------------------------- С уважением Сербулов Дмитрий ООО "Альфа Нет Телеком" +7(498)785-8-000 раб. +7(495)940-92-11 доп. +7(925)518-10-69 сот.
Dear Timo, Thank you for raising these concerns again. We agree that the situation has changed since November. Within the RIPE NCC we are also seeing increased risk. In response to this, we are actively working on business continuity plans that include exit strategies for the different cloud providers we use. We are also reviewing our cloud strategy and expect this to shift to using less Platform as a Service (PaaS) from Big Tech providers. I have also decided to halt any significant deployments to some cloud providers until we have a new strategy in place. Our approach to the cloud has evolved since we first dipped our toe in the water five years ago. We stepped back from our initial “cloud-first” strategy after hearing concerns from the members and community. We also shared principles that aimed to achieve a balance between resilience, accessibility and availability on the one hand, and avoiding vendor lock-in and dependence on any single provider on the other. And all the while, we needed to strike this balance while being conscious of the costs to our members. The result of this work is that we are well placed to further adapt our strategy in light of the concerns you outline. We are currently discussing internally what actions we might need to take. I’ll be sharing more details on this as part of my update in the RIPE NCC Services WG at RIPE 90. We are interested in thoughts from our members and the RIPE community and we welcome input both in that session and on this mailing list. Kind regards, Felipe Victolla Silveira Chief Technology Officer RIPE NCC Cloud technology status: https://www.ripe.net/publications/documentation/cloud-technology-status/ Service Criticality Ratings: https://www.ripe.net/publications/documentation/service-criticality-rating-o... RIPE NCC Cloud Strategy Framework (v2): https://labs.ripe.net/author/felipe_victolla_silveira/ripe-ncc-cloud-strateg... On Tue, 6 May 2025 at 14:39, Timo Hilbrink via members-discuss < members-discuss@ripe.net> wrote:
Hi all,
Last november i wrote a post to this mailinglist, voicing my concerns about the wide use of US based cloud services at the RIPE NCC. This was just before the US elections took place.
RIPE NCC (Felipe) responded to my concerns, and the last sentence of that mail was:
"It is difficult to run our operations if we have to speculate on what governments can and cannot do. Instead, we apply a risk-based approach, paying close attention to the contracts we sign with these providers and ensuring that the obligations described in them give the highest possible level of privacy and security for our members."
Now, a lot has happened in the world since november, and without going into every detail, i think it is safe to conclude that the US and its big tech companies can no longer be seen as reliable partners when it comes to storing our personal data.
In fact it could soon become illegal for EU businesses and organisations to store personal data on US owned cloud platforms; the Transatlantic Data Privacy Framework (TADPF) that allows a free flow of EU data to US providers relies on the "Privacy and Civil Liberties Oversight Board" (PCLOB) for oversight on data protection laws. Already in january, Mr Trump fired all democratic board members of the PCLOB, rendering the board powerless, as they now lack the required quorum necessary to operate.
This means that the foundation of the TADPF has essentially been removed, and while EU organisations can still rely on the agreement as long as it's not formally annulled by the European Commission or the Court of Justice, it is now more important than ever to have a contingency plan.
So, since the RIPE NCC applies a risk-based approach, my question would be: What contingency plan is there in place for the RIPE NCC? How quickly can they switch to a self hosted or "hosted in Europe" model, while still providing essential services to the members?
* Some relevant links with more background information:
https://noyb.eu/en/us-cloud-soon-illegal-trump-punches-first-hole-eu-us-data...
https://www.lawfaremedia.org/article/trump-s-sacking-of-pclob-members-threat...
https://berthub.eu/articles/posts/you-can-no-longer-base-your-government-and...
Timo Hilbrink Freedom Internet ----- To unsubscribe from this mailing list or change your subscription options, please visit: https://mailman.ripe.net/mailman3/lists/members-discuss.ripe.net/ As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://www.ripe.net/membership/mail/mailman-3-migration/
Hi Felipe, Thanks for your response on this topic, i'm glad to hear that the RIPE NCC acknowledges there are increased risks with the current approach, and that changes will be necessary. I'm looking forward to learn more about the future of RIPE NCC's cloud strategy during the upcoming NCC Services WG session. Timo Hilbrink Freedom Internet On 08/05/2025 20:10, Felipe Silveira wrote:
Dear Timo,
Thank you for raising these concerns again.
We agree that the situation has changed since November. Within the RIPE NCC we are also seeing increased risk.
In response to this, we are actively working on business continuity plans that include exit strategies for the different cloud providers we use. We are also reviewing our cloud strategy and expect this to shift to using less Platform as a Service (PaaS) from Big Tech providers. I have also decided to halt any significant deployments to some cloud providers until we have a new strategy in place.
Our approach to the cloud has evolved since we first dipped our toe in the water five years ago. We stepped back from our initial “cloud-first” strategy after hearing concerns from the members and community. We also shared principles that aimed to achieve a balance between resilience, accessibility and availability on the one hand, and avoiding vendor lock-in and dependence on any single provider on the other. And all the while, we needed to strike this balance while being conscious of the costs to our members.
The result of this work is that we are well placed to further adapt our strategy in light of the concerns you outline. We are currently discussing internally what actions we might need to take.
I’ll be sharing more details on this as part of my update in the RIPE NCC Services WG at RIPE 90. We are interested in thoughts from our members and the RIPE community and we welcome input both in that session and on this mailing list.
Kind regards,
Felipe Victolla Silveira Chief Technology Officer RIPE NCC
Cloud technology status: https://www.ripe.net/publications/documentation/cloud-technology-status/ <https://www.ripe.net/publications/documentation/cloud-technology-status/>
Service Criticality Ratings: https://www.ripe.net/publications/documentation/service-criticality-rating-o... <https://www.ripe.net/publications/documentation/service-criticality-rating-of-ripe-ncc-services/>
RIPE NCC Cloud Strategy Framework (v2): https://labs.ripe.net/author/felipe_victolla_silveira/ripe-ncc-cloud-strateg... <https://labs.ripe.net/author/felipe_victolla_silveira/ripe-ncc-cloud-strategy-framework-v2/>
On Tue, 6 May 2025 at 14:39, Timo Hilbrink via members-discuss <members-discuss@ripe.net <mailto:members-discuss@ripe.net>> wrote:
Hi all,
Last november i wrote a post to this mailinglist, voicing my concerns about the wide use of US based cloud services at the RIPE NCC. This was just before the US elections took place.
RIPE NCC (Felipe) responded to my concerns, and the last sentence of that mail was:
"It is difficult to run our operations if we have to speculate on what governments can and cannot do. Instead, we apply a risk-based approach, paying close attention to the contracts we sign with these providers and ensuring that the obligations described in them give the highest possible level of privacy and security for our members."
Now, a lot has happened in the world since november, and without going into every detail, i think it is safe to conclude that the US and its big tech companies can no longer be seen as reliable partners when it comes to storing our personal data.
In fact it could soon become illegal for EU businesses and organisations to store personal data on US owned cloud platforms; the Transatlantic Data Privacy Framework (TADPF) that allows a free flow of EU data to US providers relies on the "Privacy and Civil Liberties Oversight Board" (PCLOB) for oversight on data protection laws. Already in january, Mr Trump fired all democratic board members of the PCLOB, rendering the board powerless, as they now lack the required quorum necessary to operate.
This means that the foundation of the TADPF has essentially been removed, and while EU organisations can still rely on the agreement as long as it's not formally annulled by the European Commission or the Court of Justice, it is now more important than ever to have a contingency plan.
So, since the RIPE NCC applies a risk-based approach, my question would be: What contingency plan is there in place for the RIPE NCC? How quickly can they switch to a self hosted or "hosted in Europe" model, while still providing essential services to the members?
* Some relevant links with more background information: https://noyb.eu/en/us-cloud-soon-illegal-trump-punches-first-hole-eu-us-data... <https://noyb.eu/en/us-cloud-soon-illegal-trump-punches-first-hole-eu-us-data-deal> https://www.lawfaremedia.org/article/trump-s-sacking-of-pclob-members-threat... <https://www.lawfaremedia.org/article/trump-s-sacking-of-pclob-members-threatens-data-privacy> https://berthub.eu/articles/posts/you-can-no-longer-base-your-government-and... <https://berthub.eu/articles/posts/you-can-no-longer-base-your-government-and-society-on-us-clouds/>
Timo Hilbrink Freedom Internet ----- To unsubscribe from this mailing list or change your subscription options, please visit: https://mailman.ripe.net/mailman3/lists/members-discuss.ripe.net/ <https://mailman.ripe.net/mailman3/lists/members-discuss.ripe.net/> As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://www.ripe.net/membership/mail/mailman-3-migration/ <https://www.ripe.net/membership/mail/mailman-3-migration/>
participants (12)
-
alexandre-ripe-ncc＠lotharedon.org -
Clement Cavadore -
Felipe Silveira -
Gert Doering -
Job Snijders -
Kaj Niemi -
Kurt Jaeger -
Mo -
Randy Bush -
Rudolf E. Steiner -
sdy＠a-n-t.ru -
Timo Hilbrink