Exit the US?

The transatlantic relationship between the EU and the US has long been characterised by cooperation but also by tensions related to the regulation of technology, digital sovereignty and data security.

The current geopolitical situation between the EU and the US has major implications for information security and privacy. While collaboration remains important, regulatory differences and increasing cybersecurity threats require a risk-based approach to protect data and digital infrastructures. Both governments and private actors must continuously assess and adapt their strategies to meet future challenges in the digital landscape.

In 2025, Norwegian businesses face a complex situation:

Rapid regulatory changes

If the level of protection of personal data is no longer adequate, the European Commission may withdraw the adequacy decision for the United States. Norwegian companies do not always know where the data is processed or which subcontractors are involved. The supplier's level of security can vary, and it can be challenging to ensure compliance with Norwegian and European regulations.

Visualisation of "Illegal transfer of personal data to the US" on our Bowtie model.
Vendor lock-in

Dependency on one cloud service provider can make switching difficult and expensive.

Visualisation of "Supplier dependency" in our Bowtie model.
Geopolitical risk

Trade conflicts and regulations can affect service availability and costs.

Supply chain vulnerabilities

Norwegian companies that build their IT infrastructure around US cloud services are largely dependent on the provider maintaining robust security measures, both technically and organisationally.

How can your organisation navigate this risk picture?

Using Diri, we can visualise the risks, identify the most important causes and consequences, and take targeted action. This provides a clearer picture of preventive and consequence-reducing strategies to secure you and your organisation in an uncertain time.

At Diri, we help businesses understand, analyse and manage these challenges.

Want to know more? Let's talk about how your organisation can use Diri and our experts to secure your information values and personal data!

Tags:
Diri
Privacy
Riskmanagement
Published: 
2.4.2025