Vast amounts of personal information are processed in the cloud. But who is legally responsible for such 鈥榩ersonal data鈥 in cloud environments? What duties do cloud providers like Amazon, Microsoft, and Google have? And what rights can you, as an individual, exercise under data protection law? If you鈥檇 like to find out, then this course is for you!
First, we鈥檒l look at how the European Union鈥檚 鈥楪eneral Data Protection Regulation鈥 (鈥楪DPR鈥) regulates the processing of personal data in cloud services. You鈥檒l learn to identify controllers and processors, describe their roles and responsibilities, and understand how cloud customers and providers can comply in practice.
Second, we鈥檒l look at international transfers of personal data. We鈥檒l explain how the GDPR can apply to cloud providers and their customers anywhere in the world, as well as how restrictions on international transfers apply to cloud services.
Third, we鈥檒l look at how the Network and Information Security (鈥楴IS鈥) Directive regulates the cybersecurity of critical infrastructure. You鈥檒l learn to identify cloud providers鈥 duties to notify security breaches and to keep their services secure, and how to apply those duties to concrete case studies.
In short, this course covers how the GDPR and NIS Directive apply to cloud services and what cloud providers and their customers should do to comply.