Microsoft admits no guarantee of sovereignty for UK policing data

Microsoft has admitted to Scottish policing bodies that it cannot ensure the sovereignty of UK policing data stored on its public cloud infrastructure, despite previous claims. The company acknowledged that data uploaded to the Police Scotland IT system may be processed overseas, not necessarily in the UK as required by law. This revelation raises concerns about compliance with UK data protection regulations. Microsoft's acknowledgment of international data transfers affects all UK government users facing similar limitations on data offshoring. The disclosure has prompted experts to highlight the breach of UK law by using such technology. The issue extends beyond policing, impacting other public sector data hosting requirements. Microsoft stated it has not altered its Azure services' operation and has worked with Police Scotland to ensure compliance with data protection laws. The concerns about data sovereignty and processing outside the UK have been ongoing, with Microsoft making commitments to address these issues. Despite these commitments, questions remain about ensuring compliance with UK regulations regarding data processing and storage locations.