Data Governance in the Cloud

This book provides practical guidance for cloud service providers to address EU data-related legal obligations – notably, those created by the General Data Protection Regulation (GDPR), Data Act, and Network and Information Security Directive 2 (NIS2), among others – as well as for cloud customers to assess providers’ compliance with such obligations. It describes actionable recommendations spanning 21 domains, from accountability and supply chain management to switching and cloud insurance policies.Key Features:Comprehensive coverage of EU data-related legal obligations for cloud service providersUpdated in light of the European Commission’s Tech Sovereignty Package (including, notably, its proposed Cloud and AI Development Act)Usable as a checklist/control framework for cloud service providers to meet data-related obligations and for cloud customers to assess providers’ complianceStructured and practical recommendations, tailored to the specific challenges created by the cloud, to comply with such obligations, complete with explanatory notes and a concise summary of the relevant legal requirementsBuilt on real-world consulting experience, as well as the authors’ experience in contributing towards cloud-focused data-related codes of conduct and Paolo Balboni’s participation in the European Commission’s Expert Group on B2B Data Sharing and Cloud Computing ContractsData Governance in the Cloud serves as a practical handbook and thorough reference tool for data governance and protection lawyers, cloud services providers, cybersecurity consultants, and other stakeholders developing data protection policies with the EU legal framework in mind. It is also a valuable resource for researchers and students of internet, media, technology, and telecommunications law working on cloud computing, as well as for any organisation procuring cloud services or looking for a benchmark against which to assess its current providers’ EU legal data-related compliance.