EuroCloudcertification scheme
Trusted and audited cloud services
European quality scheme for global usage
Checklists for provider transparency and tender support. Assessment tools for quality checks, gap analysis and audit purposes.
Get to know us better
Download the StarAudit catalogue and get a more in-depth look at what an assessment covers — the full criteria catalogue and a compact overview.
Latest News
All news →
China Implements Strict Requirements for Cybersecurity Incident Reporting
With a rising number of data breaches and cybersecurity incidents in recent years, China has rolled out stringent new rules that set clear requirements on incident reporting items, time limits and procedures for all network operators. This article provides an overview to navigate the incident reporting obligations.
Decree 356/2025/ND-CP: The Next Chapter in Vietnam’s Personal Data Protection Framework
Vietnam’s data protection landscape just got sharper. Decree No. 356/2025/ND-CP delivers the detailed rules businesses have been waiting for, tighter timelines, clearer roles and fewer grey areas. Now is the time for organisations to put their policies, people and data practices to the test before the new regime takes hold.
When Anonymization Fails: Readable Data in a Published Contract
A decision of the Office for Personal Data Protection of the Slovak Republic confirms that the anonymization of a document intended for publication must be technically effective, rather than merely visual. If personal data become readable after text is copied from a PDF document, the controller may be in breach of its obligation to ensure the ongoing confidentiality of personal data under Article 32(1) of the GDPR, even where contracts are subject to mandatory publication in the Central Register of Contracts.
Age Assurance and Privacy: Israel’s Draft Guidance
On 11 June 2026, the Israeli Privacy Protection Authority (“PPA”) published draft guidance for public comment on online age assurance measures. The guidance is addressed to online service providers and treats age assurance as a data processing activity to be designed, assessed, and governed accordingly, rather than merely as a child safety tool. Non-compliance can attract administrative fines and civil claims.
North Macedonian Administrative Court Upholds Agency Decision on Unlawful Processing of Patient Health Data
The Administrative Court of North Macedonia has upheld a decision of the Personal Data Protection Agency concerning the unlawful processing of a patient’s personal and health data within the national electronic healthcare system.
Is Lithuania Finally Ready for B2B Direct Marketing? Almost.
From 1 July 2026, Lithuania's amended Law on Electronic Communications finally lifts its blanket opt-in requirement for B2B electronic direct marketing, allowing businesses to contact other businesses on an opt-out basis – joining the majority of EU member states that never imposed such a restriction in the first place. For B2C direct marketing, however, a strict six-condition regime remains immovably in place, with no room for partial compliance.
