Are there cloud-specific data protection issues we should take into account?

Question

Hello all,

If we choose to host part of our online services system on an AWS instance or other cloud services, do we face special privacy/data protection issues? Does it make a difference if we designate availability zones or implement additional encryption of our customer's data?

Thank you!

or

Answers: 1 public & 0 private

Lawrence lau
IP Broker

Yes ... any customer from EU will come under their Data Directive and thus could be subject to their jurisdiction (see user complaints against google France). Encryption alone may not be sufficient as any identifying feature (including metadata) could qualify depending on your industry (eg higher standards for insurance companies). Seek professional legal advice as I'm not qualified for US.

Recent questions