Cloud computing, encryption, and export laws

[Scott Ehrlich]

I have been reading about about people discussing encryption with data
when using cloud-based storage.   I am also aware cloud providers may
have servers around the world, and you may not know where in the world
your data resides.

I believe the US still has export laws related to the type and use of
encryption.

I have not read any cloud provider's TOS and liabilities.

In light of all this, where does responsibility lie if someone in the
US encrypts data in a manner that prohibits export, places said data
into the cloud, and any of the bits land on a server in a country on
the prohibited list?   How does this get handled/managed/addressed?

I do not have a need for any of this, but the thought of this recently
crossed my mind so I figured I'd throw it out there and see who had
what insights.

Thanks.

Scott