I remember some time ago a client mentioned Data Protection issues surrounding storing UK email addresses outside the European Union (CM servers are in Australia right?). I couldn't Google anything in particular on this. Is this a non-issue? If it is a concern, is it simply a matter of advising subscribers at sign-up? Any advice much appreciated.
Just found this excerpt from the UK Data Protection Act 1998: "Personal Information must not be transferred to countries outside the European Economic Area unless there is adequate protection for the information."
Adequate protection? Kind of vague.
Campaign Monitor servers are in the US, actually, but the same applies. You can transfer data outside of the EU if the party you are giving the data to meets or exceed the requirements of EU law.
See http://www.campaignmonitor.com/privacy for our policy. Many customers have gone through this process and determined that our data protection does exceed the requirements, but of course you will want to do your own determination.
Please get in touch if you have any other questions or feedback.