One of the things I've heard from our legal team around storing personal information on our social business platform reads like this,
"In Germany a person's consent for their employer to transfer personally identifiable information (PII) outside the EU is deemed void for public policy reasons because the law assumes such a great imbalance of power that the employee could not reasonably be expected to say no. So it's illegal to transfer PII out of Germany, even with the employee's permission. "
I'm guessing other places have this problem too. How are you getting around this problem? If you're in the EU, I'd love to hear your stories around this.