$ diff /etc/jurisdiction/is /etc/jurisdiction/ro
[$ ] Iceland vs Romania — for offshore privacy hosting jurisdiction
// TLDR
Both jurisdictions share the property that matters most for privacy hosting: no DMCA-§512-equivalent private notice-and-takedown. Copyright complaints route through court process under Iceland's Höfundalög nr. 73/1972 and Romania's Legea nr. 8/1996, not via a notice from the rightsholder. Both are GDPR jurisdictions (Iceland through the EEA, Romania as an EU member state). Differences come in at: language of filings, data-retention regime, court timeline, and EU treaty membership. Choose by tenant tolerance for Romanian-language filings (RO is faster and cheaper) or for the EEA-non-EU posture (IS removes one layer of EU-treaty exposure). For most workloads either is correct.
// AT A GLANCE
$ compare --short
| // dimension | // iceland | // romania |
|---|---|---|
| copyright statute | Höfundalög nr. 73/1972 | Legea nr. 8/1996 |
| DMCA-§512-equivalent | none — court process required | none — court process required |
| EU member | no — EEA / EFTA | yes |
| GDPR | applies via EEA Joint Committee | directly applicable |
| data retention | no general telecom DR | Law 506/2004 — partially struck |
| RIPE region | RIPE NCC, IS | RIPE NCC, RO |
| civil-court timeline | 12-18 months first instance | 8-14 months first instance |
| language of filings | Icelandic | Romanian |
| EU Counter-Terrorism Directive 2017/541 | implements via EEA | directly transposed (Lege 535/2004 + amendments) |
| XMRHost region code | /location/is | /location/ro |
| starting price (XMRHost VPS) | $15/mo (vps-1) | $15/mo (vps-1) |
// ICELAND — DOSSIER
$ man iceland-jurisdiction
Iceland is in the EEA but not in the EU — a distinct legal posture that removes one layer of EU-treaty exposure (the European Court of Justice does not have direct jurisdiction; the EFTA Court does, with narrower competence). The EEA Joint Committee mechanism applies most EU-internal-market regulation, including GDPR, but Iceland retains more discretion on directives outside the four freedoms.
- Copyright — Höfundalög nr. 73/1972, as amended. The statute does not implement a private-party safe-harbour notice-and-takedown mechanism equivalent to 17 U.S.C. §512. Removal of allegedly-infringing content requires court-issued process. Operators evaluate complaints, request the rightsholder to file, and respond to court orders.
- Data protection — Lög nr. 81/2003 (national ePrivacy transposition) + GDPR via the EEA Joint Committee. Article 15 (right of access) operates as it does anywhere in the EEA.
- Telecommunications data retention — no general mandatory retention regime for non-real-time data. Specific investigations can request preservation under court order.
- Hosting infrastructure — geothermal-powered datacenters in Reykjavik / Hafnarfjörður / Keflavík. Ping from Frankfurt is ~38 ms. Submarine cable redundancy via Farice + IRIS + DanIce.
- Tor / privacy-tech tolerance — hosting Tor relays and hidden services is not restricted. Tor exit traffic carries the operator-side abuse-mail load typical of any exit.
// ROMANIA — DOSSIER
$ man romania-jurisdiction
Romania is an EU member state since 2007 (Schengen since March 2024 for air and maritime borders, ground borders pending). EU regulations and directives apply directly or via national transposition. Romania's posture for hosting is a function of the national copyright statute plus the country's actual prosecutorial practice (which has historically been narrow on commercial-copyright complaints absent industrial-scale infringement).
- Copyright — Legea nr. 8/1996 privind dreptul de autor și drepturile conexe. Like the Icelandic statute, no §512-equivalent private notice mechanism. Court process required for content removal. The 2019 EU Copyright in the Digital Single Market Directive (2019/790) was transposed; Article 17 obligations apply to "online content-sharing service providers" (a category that does NOT include traditional VPS hosting).
- Data protection — Legea 506/2004 (national ePrivacy transposition, partially struck by the Constitutional Court on data-retention grounds in CCR Decision 1258/2009) + GDPR direct application + Law 190/2018 (national GDPR implementing regulation).
- Telecommunications data retention — historically implemented under Law 82/2012, mostly struck down by the Constitutional Court. The current regime is subject to court-ordered preservation rather than mandatory blanket retention.
- Hosting infrastructure — Bucharest datacenter ecosystem (NXData, M247, ITS). Ping from Frankfurt is ~28 ms — better than Iceland for EU-internal latency. Bandwidth pricing in Bucharest is among the lowest in the EU.
- Tor / privacy-tech tolerance — historically permissive for non-exit relays and hidden services; Tor exits carry the same abuse-mail load as anywhere.
// HOW TO CHOOSE
$ man choose-region
For most XMRHost workloads, either region is correct. The differences that move the decision:
- Choose Iceland if: your tenant prefers an EEA- but-not-EU posture (one less layer of EU-treaty / ECJ exposure); your audience is North America + Western Europe and the latency mix favours a transatlantic-cable midpoint; you prefer geothermal-powered infrastructure as a footprint property.
- Choose Romania if: your audience is primarily European and EU-internal latency matters (~28 ms from Frankfurt vs. ~38 ms from Iceland); cost-per-Mbps is a budget constraint (Bucharest is cheaper); you want a faster-resolving civil-court timeline if a complaint does materialise.
- Run in both: XMRHost supports per-plan region selection at order time. A Tor hidden service can run with a primary in IS and a fail-over in RO; a Matrix homeserver can run its primary in RO and replicas in IS.
// CITATIONS
$ ls /etc/xmrhost/statutes
- IS — Lög nr. 73/1972 um höfundarétt (Iceland Copyright Act).
- IS — Lög nr. 81/2003 (Iceland ePrivacy transposition).
- RO — Legea nr. 8/1996 privind dreptul de autor și drepturile conexe.
- RO — Legea nr. 506/2004 privind prelucrarea datelor cu caracter personal (ePrivacy).
- RO — Legea nr. 190/2018 (national GDPR implementing law).
- EU — Regulation (EU) 2016/679 (GDPR).
- EU — Directive 2019/790 (EU DSM Copyright Directive).
- EEA — EEA Agreement, Annex XI (telecommunications) + Joint Committee Decisions.
- US (cf.) — 17 U.S.C. §512 (DMCA safe-harbour, NOT applicable in IS or RO).
// SEE ALSO
$ ls /usr/share/doc/xmrhost/jurisdiction
- /location/is — Iceland location dossier.
- /location/ro — Romania location dossier.
- /numbers — at-a-glance fact sheet (table form).
- /glossary — Höfundalög, Legea 8/1996, DMCA-equivalent definitions.
- /legal/aup — operator's complaint-handling posture.