John, this is a fascinating thought. As I read it, it would be no defense for the director of a company guilty of a breach of the DP Act that he/she was unaware that the 'cloud' provider was holding the data in a country that was not a signatory to equivalent legislation. As fines up to half a million pounds can now be imposed, or even imprisonment, this might concentrate the mind of any manager considering a 'cloud' solution!