Is Storj GDPR or HIPPA compliant yet? If no, What are the factors responsible for the same?

I store Terrabytes of data that I pay for out of my own pocket on the Storj network. It has been very reliable for me. Assuming you are in the United States, the IRS can ask for records as far back as ten years. I would feel secure having a copy on the Storj network, but not the only copy. I wou…

Storj employees don’t have access to data. All of it is encrypted and only you have the key. However, if you use the web client or S3 gateway, encryption happens server side. The encryption keys are wiped after that is done, but in theory that’s where they could “listen in”. This is just theoretical…

So using FileZilla PRO does it do the Encryption on my side 1st? Seems to use a LOT of processing power when sending over the data to storj

[image] BrightSilence: If you want to avoid that though, you can use uplink to transfer the data or run your own S3 gateway. Or encrypt the data with a software of your own choice before uploading it. Just an example, I don’t know how far they are with this and if it works with Storj DCS: …

Depends on the used integration. If you used a native integration (with access grant or API Key and encryption phrase), then it’s encrypted locally. If you used an S3 integration with Storj-hosted S3-Compatible Gateway , then you opted-in for server-side encryption. However, if you used an S3-integr…

I think storj would be very wise to enlist the help of some legal professional to either figure out definitively how we can make it compliant (specifically talking about GDPR here because that’s relevant to me) or reaching out to the EU to get the regulation updated. Someone needs to get down in det…

[image] Update Proposal for Storage Node Operators Announcements This has already been addressed in the Twitter Spaces, see summary post: For those that don´t want to read all the 30 pages of legalese: The article specifically states on P30: Use Case 1: Data storage fo…

[image] heunland: We are confident that GDPR compliance is achievable. Yes with that assessment from the EDP this seems achievable. But what about the others? I hope you are looking into them as well. HIPPA means healthcare and clinical data like from MRIs. CJIS means all the data from bodyca…

Regarding HIPPA and other standards, please refer to the statement from the Twitter Spaces by @Bryanm which I quoted in the post above yours.

[image] heunland: please refer to the statement from the Twitter Spaces by @Bryanm which I quoted in the post above yours. [image] Updates and Live Q&A Twitter Space March 15, 2023 @ UPDATED START TIME 2:00pm ET We are working on our SOC2 certification and are more mature in terms of the l…

GDPR or HIPPA compliance

Product Discussions

heunland March 18, 2023, 3:49pm 27

TL;DR: Storj is already working on this, and yes we do have legal council advising on these matters. We are confident that GDPR compliance is achievable.