skip to main content
US FlagAn official website of the United States government
dot gov icon
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
https lock icon
Secure .gov websites use HTTPS
A lock ( lock ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.


This content will become publicly available on July 1, 2026

Title: Empirically Measuring Data Localization in the EU
EU data localization regulations limit data transfers to non-EU countries with the GDPR. However, BGP, DNS and other Internet protocols were not designed to enforce jurisdictional constraints, so implementing data localization is challenging. Despite initial research on the topic, little is known about if or how companies currently operate their server infrastructure to comply with the regulations. We close this knowledge gap by empirically measuring the extent to which servers and routers that process EU requests are located outside of the EU (and a handful of 'adequate' non-EU countries). The key challenge is that both browser measurements (to infer relevant endpoints) and data-plane measurements (to infer relevant IP addresses) are needed, but no large-scale public infrastructure allows both. We build a novel methodology that combines BrightData (browser) and RIPE Atlas (data-plane) probes, with joint measurements from over 1,000 networks in 20 EU countries. We find that, on average, 2.2% of servers serving users in each EU country are located in non-adequate destination countries (1.4% of known trackers). Our findings suggest that data localization policies are largely being followed by content providers, though there are exceptions.  more » « less
Award ID(s):
1955227
PAR ID:
10627282
Author(s) / Creator(s):
; ; ; ; ; ;
Publisher / Repository:
Proceedings on Privacy Enhancing Technologies Symposium 2025
Date Published:
Journal Name:
Proceedings on Privacy Enhancing Technologies
Volume:
2025
Issue:
3
ISSN:
2299-0984
Page Range / eLocation ID:
436 to 450
Format(s):
Medium: X
Sponsoring Org:
National Science Foundation
More Like this
  1. Abstract Extreme weather events are major causes of loss of life and damage infrastructure worldwide. High temperatures cause heat stress on humans, livestock, crops and infrastructure. Heat stress exposure is projected to increase with ongoing climate change. Extremes of temperature are common in Africa and infrastructure is often incapable of providing adequate cooling. We show how easily accessible cooling technology, such as evaporative coolers, prevent heat stress in historic timescales but are unsuitable as a solution under climate change. As temperatures increase, powered cooling, such as air conditioning, is necessary to prevent overheating. This will, in turn, increase demand on already stretched infrastructure. We use high temporal resolution climate model data to estimate the demand for cooling according to two metrics, firstly the apparent temperature and secondly the discomfort index. For each grid cell we calculate the heat stress value and the amount of cooling required to turn a heat stress event into a non heat stress event. We show the increase in demand for cooling in Africa is non uniform and that equatorial countries are exposed to higher heat stress than higher latitude countries. We further show that evaporative coolers are less effective in tropical regions than in the extra tropics. Finally, we show that neither low nor high efficiency coolers are sufficient to return Africa to current levels of heat stress under climate change. 
    more » « less
  2. Abstract Over half of all visits to websites now take place in a mobile browser, yet the majority of web privacy studies take the vantage point of desktop browsers, use emulated mobile browsers, or focus on just a single mobile browser instead. In this paper, we present a comprehensive web-tracking measurement study on mobile browsers and privacy-focused mobile browsers. Our study leverages a new web measurement infrastructure, OmniCrawl, which we develop to drive browsers on desktop computers and smartphones located on two continents. We capture web tracking measurements using 42 different non-emulated browsers simultaneously. We find that the third-party advertising and tracking ecosystem of mobile browsers is more similar to that of desktop browsers than previous findings suggested. We study privacy-focused browsers and find their protections differ significantly and in general are less for lower-ranked sites. Our findings also show that common methodological choices made by web measurement studies, such as the use of emulated mobile browsers and Selenium, can lead to website behavior that deviates from what actual users experience. 
    more » « less
  3. A novel antiferromagnetic semiconductor, Eu 3 Sn 2 P 4 , has been discovered. Single crystals of Eu 3 Sn 2 P 4 were prepared using the Sn self-flux method. The crystal structure determined by single crystal X-ray diffraction shows that Eu 3 Sn 2 P 4 crystallizes in the orthorhombic structure with the space group Cmca (Pearson Symbol, oP 216). Six Sn–Sn dimers connected by P atoms form a Sn 12 P 24 crown-shaped cluster with a Eu atom located in the center. Magnetization measurements indicate that the system orders antiferromagnetically below a T N ∼14 K at a low field and undergoes a metamagnetic transition at a high field when T < T N . The effective magnetic moment is 7.41(3) μ B per Eu, corresponding to Eu 2+ . The electric resistivity reveals a non-monotonic temperature dependence with non-metallic behavior below ∼60 K, consistent with the band structure calculations. By fitting the data using the thermally activated resistivity formula, we estimate the energy gap to be ∼0.14 eV. Below T N , the resistivity tends to saturate, suggesting the reduction of charge-spin scattering. 
    more » « less
  4. Urban air pollution is a public health challenge in low- and middle-income countries (LMICs). However, LMICs lack adequate air quality (AQ) monitoring infrastructure. A persistent challenge has been our inability to estimate AQ accurately in LMIC cities, which hinders emergency preparedness and risk mitigation. Deep learning-based models that map satellite imagery to AQ can be built for high-income countries (HICs) with adequate ground data. Here we demonstrate that a scalable approach that adapts deep transfer learning on satellite imagery for AQ can extract meaningful estimates and insights in LMIC cities based on spatiotemporal patterns learned in HIC cities. The approach is demonstrated for Accra in Ghana, Africa, with AQ patterns learned from two US cities, specifically Los Angeles and New York. 
    more » « less
  5. The European Union (EU) General Data Protection Regulation (GDPR) has expanded data privacy regulations regarding personal data for over half a billion EU citizens. Given the regulation’s effectively global scope and its significant penalties for non-compliance, systems that store or process personal data in increasingly complex workflows will need to demonstrate how data were generated and used. In this paper, we analyze the GDPR text to explicitly identify a set of central challenges for GDPR compliance for which data provenance is applicable; we introduce a data provenance model for representing GDPR workflows; and we present design patterns that demonstrate how data provenance can be used realistically to help in verifying GDPR compliance. We also discuss open questions about what will be practically necessary for a provenance-driven system to be suitable under the GDPR. 
    more » « less