Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 03 OCTOBER 2024

Data Act And Cloud Service Providers (Part 2): Switching Providers

CMS Adonnino Ascoli & Cavasola Scamoni
Explore more from CMS Adonnino Ascoli & Cavasola Scamoni

The Data Act means cloud service providers need to take action. Part 2 of our article provides an overview of the process for switching providers.

ItalyPrivacy
Philippe Heinzke, LL.M.
Philippe Heinzke, LL.M.
Julia Dreyer
Julia Dreyer
Björn Herbers
Björn Herbers
Michael Kraus
Michael Kraus
Tom De Cordier
Tom De Cordier
Italo De Feo
Italo De Feo
María González Gordon
María González Gordon
Johannes Juranek
Johannes Juranek
Ian Stevens
Ian Stevens

The Data Act means cloud service providers need to take action. Part 2 of our article provides an overview of the process for switching providers.

Next blog post in the #CMSdatalaw series

As part of its digitalisation and data strategy, the European Union (EU) wants to create an internal data market and make it easier for customers and others to switch cloud service providers (CSPs). The Data Act (Regulation on harmonised rules on fair access to and use of data, "DA"), which came into force on 11 January 2024 and will apply throughout the EU from 12 September 2025, sets out in Chapter VI a large number of new information obligations and requirements regarding drafting contracts for CSPs. In this article, we provide an overview of the new DA regulations on the switching process.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Pseudonymised, Not Anonymous: What The Italian Garante’s €7 Million IQVIA Fine Means For Health Data

The Italian data protection authority fined IQVIA Solutions Italy €7 million for treating patient records as anonymous when they were actually pseudonymised personal data subject to GDPR. This decision demonstrates regulators' strict interpretation of what constitutes personal data, even as the EU considers narrowing this definition through the Digital Omnibus reforms.
GlobalPrivacy
Arnold & Porter
Arnold & Porter
Article

Tracking Pixels In Emails: The Garante’s New Guidelines And Requirements For Businesses

The Italian Data Protection Authority has issued comprehensive guidelines on tracking pixels in email communications, establishing strict transparency and consent requirements for both public and private entities. Organizations now face a six-month compliance deadline to overhaul their email marketing practices, update privacy notices, and implement granular consent mechanisms for these invisible tracking tools.
ItalyPrivacy
A&O Shearman
A&O Shearman
Article

Tracking Pixel And Email: New Guidelines Issued By The Italian Data Protection Authority To Be Implemented By 29 October 2026

On 17 April 2026, the Italian Data Protection Authority ( Garante per la protezione dei dati personali ) (“ Italian DPA ”) adopted the “ Guidelines on the Use of Tracking Pixel in email Communications ” ( doc. web n. 10241943 ), which set out the applicable legal framework, transparency obligations and conditions for obtaining consent for all entities using tracking pixels.
ItalyPrivacy
Chiomenti
Chiomenti
Article

EU KIDS Act: Brussels Rewrites The Rules For Digital Services For Minors

The European Commission's proposed EU Kids Act introduces sweeping new requirements for digital service providers, establishing a harmonised age threshold of 15 for social media access and mandating safety-by-design principles across online platforms. This comprehensive regulatory framework fundamentally reshapes how providers must verify ages, design interfaces, and protect minors in the digital space, with sanctions reaching up to 6% of worldwide annual turnover for non-compliance.
European UnionPrivacy
ADVANT Nctm
ADVANT Nctm
Article

When AI Meets Children: Italy’s Garante Fines Character.AI Over Transparency And Safeguarding Failures

The Italian Data Protection Authority has issued a landmark decision against Character Technologies, Inc., examining how generative AI services must comply with GDPR requirements when processing personal data for model training and operation. The case establishes critical precedents for transparency obligations, age verification mechanisms, and the timing of data protection impact assessments for AI developers operating in the European Union.
European UnionPrivacy
GVZH Advocates
GVZH Advocates