And possibly its sister companies, too.Īgain, remember that there is no recorded information about your activity – the sites you visit, the files you download – because of the zero-logs policy. So while ExpressVPN says it will be independent, it will likely update its terms and conditions and privacy policy to say that it, too, might share your data with its new parent company. But Cyberghost says that this actually protects customers: English law complies with GDPR and, in terms of jurisdiction for information requests for the VPN service, it still falls under Romanian law (because that’s where Cyberghost is based) which is much more privacy friendly. The UK is one of the five-eyes and a jurisdiction to avoid when choosing a VPN.