agqs.gr - Map Section
agqs.gr - Main Section
agqs.gr - Bottom info
agqs.gr - Home Section
Data recognition and classification cannot be performed by just installing IT controls, such as firewalls and encryption.
New technologies, such as Cloud computing, log analysis, file sharing, video conferencing, location services, need specific handling. Risk transferring and risk mitigation, by the utilization of outsourcing contracts, must have a minimum baseline of acceptable and defined clauses.
“The relevant legal framework is the Data Protection Directive 95/46/EC. This Directive applies in every case where personal data are being processed as a result of the use of cloud computing services. The e-privacy Directive 2002/58/EC (as revised by 2009/136/EC) applies to the processing of personal data in connection with the provision of publicly available electronic communications services in public communications networks (telecom operators) and thus is relevant if such services are provided by means of a cloud solution”,
extracted by the published document of article 29 data protection working party, regarding their opinion 05/2012 on Cloud Computing