I've been trying to figure this out, have a company, and need to travel to Europe for a few months. Can we remote VPN temporarily for a few months while traveling in Europe from a VPN. We already use Azure GCC high and have end to end encryption. Some users would have to remote into a VM from Europe. I saw the regulations from the DTCC, and 125.4 says it's allowed. All employees are based in the US. There has been a lot of movement on remote work since covid that there seems to be some Grey area concerning this. Any help is appreciated.

A person who is traveling or on temporary assignment abroad may access data using "Sufficient security precautions" under the 125.4(b)(9) exemption.

Does this apply only to government agencies or also businesses. The regulation does not specify only for government agencies but in general.