The arrangements organisations put in place for transferring personal data outside of the EU when using cloud computing services will come under increased scrutiny from the French data protection authority this year, it has confirmed.
The Commission Nationale de l’information et des Liberties (CNIL) said the use of cloud technologies “should be given special attention”. It said cloud services had become “essential” but said they are “likely to entail risks for the protection of personal data”. In particular, it said there is a risk, when cloud technologies are being used, that personal data will be transferred outside of the EU “to countries that do not provide an adequate level of protection” for that data.
“Throughout the year, the CNIL will be looking in greater detail at issues relating to data transfers and the framework for contractual relations between data controllers and cloud solution providers,” the CNIL said.
The CNIL said its work in relation to cloud services is part of broader coordinated enforcement activity it is involved in undertaking under the auspices of the European Data Protection Board. That coordinated action will involve data protection authorities from across Europe opening investigations into the use of cloud-based services by public sector bodies. CNIL said it will focus specifically on the use of cloud services by five government departments.
Paris-based data protection law expert Guillaume Morat of Pinsent Masons said: “Following the various...
The presidency has denied claims of withholding 250 billion in Nigeria LNG Limited (NLNG) dividends for each state in the country. At the 2027 Budget Stakeholders’ Consultative Engagement held at...