CLOUD Act vs GDPR: How to comply and protect your data

Schrems II (July 2020) repealed the Privacy Shield as a sufficient basis for maintaining the GDPR when storing personal data with US cloud providers. In practice, this means that the US judiciary has jurisdiction and can request data stored with US cloud providers (such as Microsoft, Google and Amazon). An obvious problem for many organizations that already have, or are planning, to migrate to the cloud as it may mean that personal data is disclosed.

Does Schrems II mean that organizations are violating the GDPR? What can you store in the cloud? Is it possible to get the best of both worlds: the benefits of cloud solutions and adequate information security?

Watch our webinar with GDPR and data privacy expert, Alexander Hanff.