Many answers on this site and other security-related websites state that one should host sensitive data in a country with strong data protection laws. What countries are these, and how is this determined?

I understand that Germany has an excellent webhosting service as does the UK. Are either of these countries considered to have strong data protection laws? Even if they do, is it reasonable to assume that those laws are abided by?

  • Closing as the answer to this will change from year to year. And since it is more of a legal question, it's off-topic.
    – schroeder
    Commented Jan 25, 2020 at 10:57

2 Answers 2


I have found a website which list a overview of the key privacy and data protection laws and regulations across 77 different jurisdictions. Of course i haven't read the legislation of any of these countries and i'm not a lawyer so you should pick one of this countries and do a deep search to see if their laws suit your needs.

And laws can change at any time this should not be the end of your search but rather the start for a more deep and current search on the law.

enter image description here

  • 4
    Man, why would they color "good" as red, and "bad" as green? Commented Jul 5, 2015 at 21:13
  • I don't know lol. But red = heavy regulation & enforcement and green = limited regulation or enforcement
    – Freedo
    Commented Jul 10, 2015 at 2:55

A quick google search turned up the following:

  • Romania
  • Switzerland
  • Netherlands
  • Norway
  • Iceland

Not the answer you're looking for? Browse other questions tagged .