Cloud computing has become an essential element of the IT sourcing strategy for many companies.
IT, legal and procurement staff in these companies are therefore faced with the fact that comprehensive know-how in many areas — not only in technology — is now necessary if cloud services are to be used responsibly, economically and in a way that is legally compliant with the locally applicable regulation frameworks.
The strategically planned introduction and use of cloud services inevitably requires the topic of data protection to be taken into consideration from the very beginning. For with the use of cloud services, data — and in particular personal data — are transmitted to third parties for processing.
The European General Data Protection Regulation (GDPR) that will become binding in all EU countries on 25 May 2018 establishes fundamental and modern technical, economic and legal framework conditions. With it, the EU is sending a clear and globally recognisable signal showing how a society can react to quickly developing technical possibilities and their consequences for the people within it. The resulting challenges for providers and users of modern IT services alike should not be underestimated, and to prepare for these challenges ahead of time is a must.
The Cloud Privacy Check (CPC) is one element of the stream “Cloud Know-how” launched by EuroCloud Europe to present a seemingly complex topic in a way that is understandable to the affected parties and describe suitable and practicable courses of action.
The CPC does not replace legal expertise, but it structures and simplifies a complex subject without the loss of essential information. The CPC organises the questions asked by cloud users that cloud providers need to answer in order to make data protection in the context of the use of cloud services transparent and comprehensible, a further fundamental requirement of the General Data Protection Regulation (Art. 5 GDPR).
The Cloud Privacy Check was developed by the authors and verified within the European CPC Network, a network of lawyers. It is the result of a cooperation between law offices in around 30 countries. The information provided here, i.e. the CPC itself and the individual country reports, can also be downloaded from the CPC website: cloudprivacycheck.eu