EuroCloudcertification scheme
Trusted and audited cloud services
European quality scheme for global usage
Checklists for provider transparency and tender support. Assessment tools for quality checks, gap analysis and audit purposes.
Get to know us better
Download the StarAudit catalogue and get a more in-depth look at what an assessment covers — the full criteria catalogue and a compact overview.
Latest News
All news →
Israel's First Administrative Fines under Amendment 13: A New Enforcement Era for Privacy Compliance
Amendment 13 to Israel's Protection of Privacy Law, 1981 (the "PPL") entered into force on 14 August 2025, giving the Israeli Privacy Protection Authority (the "PPA") — for the first time — the ability to impose meaningful financial sanctions directly on organisations that breach Israeli data protection rules. A little over a year later, the first sanctions have arrived. Between July and September 2026 the PPA published three decisions imposing fines on a health fund, a small leisure business and a municipality. Modest in amount, they are significant in signal: Israeli privacy obligations that were long treated as formalities now carry a direct price tag.
Brazil’s ECA Digital: Is Child Safety Now a Product Requirement?
Six months after entering into force, Brazil’s Digital Statute for Children and Adolescents (Law No. 15,211/2025) has moved from text to enforcement, and the ANPD’s age-assurance guidance is setting the practical bar. This article maps the core obligations, the six requirements behind “reliable” age assurance and what providers, in Brazil and abroad, should prioritise now.
The CNIL's new approach to AI models Memorisation, extractability and anonymisation under the GDPR
As generative AI becomes increasingly powerful, the CNIL’s 2026 guidance shifts the GDPR debate from how personal data is used in training to whether AI models themselves can retain and reveal information about individuals. By focusing on memorisation, extractability, and anonymisation, the framework offers a practical roadmap for assessing when AI models may still pose privacy risks and therefore remain subject to European data protection law.
Ecuador’s Risk Management Guide for Personal Data Protection. A practical view
Ecuador’s Superintendence of Personal Data Protection has published its first risk management guide. The document is ambitious: it demands that organizations justify every assumption, calibrate expert opinion, and adopt measurable models. However, it leaves a critical question unanswered, as, what methodology should companies actually use? Unlike Spain, where proportionality and maturity guide the choice of methods, Ecuador’s guide presents multiple options without prioritization. This article argues that such neutrality, while flexible, creates practical uncertainty. It suggests that organizations should adopt a mixed model, anchored in the traditional risk matrix but enriched with qualitative rationales and, where possible, quantitative tools.
Legal Alert: Bill Postpones Effective Date of the Personal Data Protection Law
Two regulatory developments marked the beginning of September in the area of personal data protection: the introduction of a bill seeking to postpone the effective date of the new legislation and the formal acknowledgment of the regulations on models for preventing violations.
North Macedonian Administrative Court Upholds Agency Decision on Unlawful Processing of Patient Health Data
The Administrative Court of North Macedonia has upheld a decision of the Personal Data Protection Agency concerning the unlawful processing of a patient’s personal and health data within the national electronic healthcare system.
