← Glossary

Extraterritoriality (CLOUD Act)

In brief

A law of a country that applies even beyond its borders. The CLOUD Act allows US authorities to request data held by a US company, even if that data is stored on servers in France.

Precise definition

The application of a legal framework beyond national borders. The CLOUD Act (United States, 2018) authorises US authorities to require a service provider falling within their jurisdiction to disclose data in its possession, regardless of where it is stored. Direct consequence: locating one’s servers in Europe is not sufficient to protect against foreign access; it is the operator’s legal domicile that determines the outcome.