> Expecting a company to hold its own promise (of notifying the user before it happens) sounds like a pretty minimal expectation, hard for me to imagine it being "too much".
I am saying that this expectation is unrealistic for a British/Trinbagonian citizen, given the political situation in the US right now. For a US citizen having the same issue (Google gave their data to the government without a safeguard), it would be realistic.
> Furthermore, how would data sovereignty affect whether Google holds its promise on notifying users?
The user could file a lawsuit in the UK about Google handing over their data without notification and proper jurisdiction. If Google UK employees were involved in handing over this data, they could be prosecuted and fined by the UK government.
Overall what I am hinting at is that this would incentivize Google to put in proper safeguards for non-US citizens. Currently they seem to be treated as a separate, non-protected category.
I'm merely saying that I'm skeptical that calling them out for breaking a promise is a useful path to go down. The alternate path (often proven to have been effective) is to pressure your non-US regulators into regulating them more. What I foresee is that this will either make Google follow more safeguards for everyone, or incentivize them to get out of non-US jurisdictions altogether.
It's even harder than people doing the same, because at the end of the day companies are a bunch of stuff that can be taken over and controlled by other people.