Many answers on this site and other security-related websites state that one should host sensitive data in a country with strong data protection laws. What countries are these, and how is this determined?
I understand that Germany has an excellent webhosting service as does the UK. Are either of these countries considered to have strong data protection laws? Even if they do, is it reasonable to assume that those laws are abided by?