Erschienen in:Chapter 9, ‘Responsibilities of Controllers and Processors of Personal Data in Clouds’, in C. Millard (ed.) Cloud Computing Law, (2nd edn, OUP 2021
Umfang:
1 Online-Ressource (58 p)
Sprache:
Englisch
DOI:
10.2139/ssrn.4255853
Identifikator:
Entstehung:
Anmerkungen:
Nach Informationen von SSRN wurde die ursprüngliche Fassung des Dokuments May 2021 erstellt
Beschreibung:
Effective protection of individuals under the EU’s General Data Protection Regulation (‘GDPR’) depends mainly on the ‘accountability’ of one or more persons, usually organizations, for ensuring compliance with relevant obligations. As we will see, identifying the ‘controllers’, ‘joint controllers’, and ‘processors’ of personal data in cloud supply chains can be challenging, especially where arrangements are dynamic and there are overlapping responsibilities. Moreover, the requirements for a customer of a cloud service, as the controller of personal data, to give detailed written ‘instructions’ to the cloud provider, as processor, may make little sense in the context of commoditized services where the provision of such specific instructions by each customer may be neither feasible nor appropriate