The Dutch data protection authority, Autoriteit Persoonsgegevens, said a plan to store government data in commercial cloud services comes with major privacy risks. "If you don't properly investigate which risks there are, you can't take measures to eliminate those risks," AP Chairman Aleid Wolfsen said, urging particular attention be paid to storing personal data in countries outside Europe, and therefore out of the scope of the EU General Data Protection Regulation.