Surveillance: Proton relocates parts of its infrastructure from Switzerland
According to a Swiss monitoring ordinance, services with more than 5000 users must identify customers.
But to where?
Following the launch, Proton's CEO Andy Yen told the Keystone-SDA news agency that the company had chosen Germany as the location for Lumo's servers due to the planned VÜPF reform. The company is also setting up locations in Norway. However, Proton does not want to completely pull up stakes in its Swiss homeland.
Depending on your threat model, you may want to look where to pick servers (if that's an option, which should be, and if your data is spread such that none of these countries can figure things out, the better).
Norway is good, though it is part of the 9 Eyes network; and Germany of the 14 Eyes.
Depending on your threat model, best to always look at which country your VPN has its headquarters, and where you pick your VPN.
"The planned amendments to the Swiss Ordinance on the Surveillance of Postal and Telecommunications Traffic (VÜPF) and the associated implementing provisions continue to make waves. "
The headlines states it as a law - it's a proposed law. Yes it may well go through, and yes Proton are moving beforehand to ensure it doesn't impact them, but it's not yet in place.
