The European Data Protection Authorities, assembled in the Article 29 Working Party, adopted an opinion on cloud computing in which they analyze relevant data protection issues for cloud computing customers and cloud computing service providers operating in the European Economic Area. According to the Opinion, cloud computing can generate significant benefits in both economic and societal terms. However, the rise of cloud computing also represents a challenge to data protection. The main risks identified include: lack of control over personal data, and insufficient information regarding how, where and by whom data is being processed. The Opinion concludes that organizations wishing to use cloud computing services should always conduct a comprehensive and thorough risk analysis. Clients should choose a cloud provider that guarantees compliance with EU data protection legislation. The Opinion states that any contract between the cloud computing customer and the provider should include sufficient guarantees in terms of technical and organizational measures.
Read More
