Cloud Computing - Article 29 Working Party Guidance On EU Privacy And Security Concerns

Keywords: article 29, cloud computing, solutions, EU data privacy

The Article 29 Working Party established under the EU data privacy legislation published an opinion on 1 July 2012 addressing the data privacy compliance concerns associated with the use of cloud computing solutions.

The Working Party identified the concerns as falling into two categories:

• Lack of Control: Cloud clients lose control of the technical and organisational measures necessary to ensure the availability, integrity, confidentiality, transparency, isolation and portability of data;
• Lack of Information Processing: Insufficient information about a cloud services processing operation poses a risk to controllers as well as to data subjects, because they might not be aware of potential threats and risks and, therefore, cannot take measures they deem appropriate.