News

EDM receives EuroCloud StarAudit Certificate (4-Star)

16.12.2020

The cloud service of the Austrian Federal Ministry for Climate Action, Environment, Energy, Mobility, Innovation and Technology has...

FDA Taiwan receives a 4* Certificate from StarAudit

16.11.2020

EuroCloud and the Taiwan Food and Drug Authority are pleased to announce that the FDA has received a certificate for its Government...

The 4th version of the StarAudit Catalogue in German has been released

17.09.2020

Today we're announcing the release of the StarAudit Catalogue v4, translated into German, which will soon become available into the...

Fabasoft awarded for the fifth time the highest certification level by the EuroCloud StarAudit

16.09.2020

For the fifth time in a row, the cloud service of the company from Linz has been awarded all five stars in the renowned cloud...

Enforcement of GDPR Infringements by Third Parties – First Decision of the Austrian Supreme Court

02.03.2020

While the GDPR deals extensively with the rights and claims of data subjects, it mainly leaves the provisions for the assertion of...

StarAudit Area 7 (GDPR) becomes mandatory starting from 2020

13.12.2019

The most recent version of the StarAudit Catalogue v4.0 (Rev. 03) will be the mandatory version to be used in audits from 2020. ...

Orion Telekom data centre confirms StarAudit DC level 3

28.11.2019

Orion Telekom successfully passed a refresh certification audit conducted during October 2019.

Croatian Post data centre refreshes certification for 4-star maturity level

28.11.2019

During the second half of October, Croatian Post once more confirmed compliance of its data centre against the StarAudit criteria for...

Significant fines imposed by the Bulgarian Commission for Personal Data Protection

31.10.2019

Earlier in 2019 the Bulgarian data protection supervisory authority – the Bulgarian Commission for Personal Data Protection (“CPDP”)-...

CNIL on monitoring employee software / internet use

24.10.2019

Use of video recording of screens, coupled with recordings of telephone conversations in a professional setting, may be proportionate...

Obligation of Notification of Personal Data Violations to Turkish DPA

22.10.2019

Law on Protection of Personal Data numbered 6698 provides under the article titled “Data Security Liabilities” that, data controllers...

Serbia - readiness/lack of readiness of controllers and processors and knowledge of individuals regarding application of the new Law on Personal Data Protection

21.10.2019

In August 2019, Serbia started applying new Law on Personal Data Protection. Many challenges were expected before initiation of the...

New European judgment on cookies

11.10.2019

In its recent judgment in the “Planet49 case”, the Court of Justice of the European Union (“CJEU”) held that consent for cookies...

New Greek law on GDPR

11.09.2019

Following a fast track procedure, the Greek Parliament adopted Law 4624/2019, which frames the provisions of the GDPR in Greece and...

Washington Privacy Act Proposal Increases Pressure for Federal Legislation

04.09.2019

In the wake of the EU GDPR and the California Consumer Privacy Act (CCPA), Washington State has recently become the next in a series...

Would you like some cookies?

30.08.2019

When users browse through the internet, cookies perform multi-faceted functions for the benefit of both the webmasters and users...

Fine of € 460.000,- imposed on Dutch Haga Hospital by Dutch Data Protection Officer, the first Dutch fine under GDPR (July 19, 2019)

25.07.2019

This first fine under the GDPR is imposed on the Dutch Haga Hospital for having an insufficient internal security of patient records...

Slovenia’s DPA says mere possession of processing equipment does not amount to personal data processing

17.07.2019

Slovenian courts have in place a system for audio recording of court hearings. The data recorded (which in itself constitute personal...

Fabasoft once again awarded the highest certification level by the EuroCloud StarAudit

10.07.2019

Linz, 10 July 2019. For the fourth time in a row, the cloud service of the company from Linz has been awarded all five stars in the...

GDPR: A Game Changer for Cloud Contracts

24.06.2019

Until recently, most IT contracts, even the large-scale ones, were generally based on a simple purchase order and sometimes a...

Meeting between EuroCloud Europe and the Chinese Institute of Electronics

19.06.2019

Beijing, 19th June 2019: Meeting Dr. Ning Huicong (Chinese Institute of Electronics) once again to discuss the further cooperation...

The EU Cybersecurity Act: a new Era dawns on ENISA

11.06.2019

On 7th June 2019, the EU Cybersecurity Act was published in the Official Journal of the European Union.

Cloud benefits still massively underestimated

06.06.2019

Publication in Business Reporter by Dr. Tobias Höllwarth, President of EuroCloud Europe, Director of the StarAudit Programme, and...

The 4th version of the StarAudit Catalogue has been released

05.06.2019

We've introduced a new Area focused on GDPR and several enhancements to existing controls as part of this major update. ...

Salesforce shut down its infrastructure after a huge outage that is still ongoing for 3 days now

21.05.2019

Salesforce is facing a huge outage and it shut down a good portion of its infrastructure due to a change to the production...

Serbia: New Law on Personal Data Protection

21.05.2019

At the end of November 2018, the new Law on Personal Data Protection (Law) came into force but its application was postponed for nine...

Microsoft Office Enterprise version as used at EU institutions may conflict with the GDPR.

20.05.2019

The EU data protection authority EDPS is investigating whether the contracts of EU agencies with Microsoft conform to new data...

The 4th version of the StarAudit Catalogue is coming soon

17.05.2019

We're introducing a new Area focused on GDPR and several enhancements to existing controls as part of this major update. ...

The Belgian data protection authority bans the use of private sector logins as an access condition to public sector websites

09.05.2019

The Belgian tax authorities maintain an online repository called FisconetPlus, on which tax payers can find key information and...

Slovak list of processing operations which are subject to the requirement for a data protection impact assessment

06.05.2019

Where a type of processing in particular using new technologies, and taking into account the nature, scope, context and purposes of...

Three Legal Opinions of the Italian DPA clarify some GDPR Implementation Aspects

04.04.2019

The aim of this article is to focus on three important legal opinions published by the Italian Data Protection Authority on the...

Implications on Data Protection law in the event of a no-deal Brexit

21.03.2019

Since the 2016 referendum whereby voters expressed their wish for the United Kingdom (the “UK”) to leave the European Union (the...

Data Protection Officers under Slovenia’s Draft Personal Data Protection Act (ZVOP-2)

19.03.2019

In the light of the GDPR, on March 6, 2019, Slovenia’s Ministry of Justice published <a...

OnePin has successfully renewed its 4 Star Certificate

06.03.2019

OnePin is the first US company to successfully achieve a 4-star rating from EuroCloud. The company creates a universal, interactive...

How to get a StarAudit certificate and how much does it cost

05.03.2019

How does one go about getting a StarAudit certificate? The path to getting a StarAudit certificate for one’s cloud service is...

The Looming Clouds: How and why cloud services are reshaping the future of financial services in Europe

26.02.2019

EuroCloud Europe publishes a new whitepaper in partnership with RedHat and Accenture, tracing the drivers of change across the...

EuroCloud and TUV cooperation in Southeast Asia

22.02.2019

Shanghai, 22 Feb: Meeting in Shanghai with Chia-Hung Lin of TÜV Nord, auditing partner of StarAudit in Taiwan. ...

To be or not to be (a processor). That is the question.

21.02.2019

In the case of a service provider that is not contracted by a controller to process personal data on its behalf but may gain custody...

CARS are safe – the CLOUD isn’t?

19.02.2019

Honestly, are cars really safe? I would say they are actually very dangerous. A comparatively small mistake can injure or even kill...

The cloud is NOT a safe space!

12.02.2019

Why is that? The cloud itself is a complex combination of services by various IT companies. One data centre or several. Cables...

Cyber Attack on the Olympic Village Paris 2020

06.02.2019

West Point (New York) Military Academy team wins Cybersecurity Challenge at the FIC 2019 conference.

Is the Cloud a safe place?

05.02.2019

Interview at FIC 2019 - the International Cyber Security Conference, Lille January 2019.

EU–U.S. Privacy Shield adequacy decision (“Privacy Shield”) adopted on 12 July 2016, assessed by EDPB in report January 22, 2019

04.02.2019

The EDPB (European Data Protection Board) assessed in its January 22, 2019 report once again whether the safeguards provided under...

Background and Benefits of the “Austrian Cloud” Seal

25.01.2019

What is the background of the “Austrian Cloud” seal and what are its benefits?

Is a violation of a GDPR rule at the same time a violation of competition law?

16.01.2019

According to the Oberlandesgericht Hamburg (Higher Regional Court Hamburg) violations of data protection rules can also mean a...

What Makes a Good Cloud Service Provider?

15.01.2019

What are the key elements that make a good cloud service provider?

Interview: From cloud to competition

11.01.2019

"If we allow the small and medium enterprises to be excluded from fundamental technological developments, then we must also be aware...

Croatian Post upgrades its data centre to 4-Star maturity level

20.12.2018

On 16 December 2018, SGS completed the surveillance audit of Croatian Post’s data centre against the StarAudit criteria. ...

2018 Highlights of data protection in Monaco

20.12.2018

The year 2018 was for Monaco a preparatory year for the forthcoming adaptation of Act No. 1.165 on the protection of personal data,...

Speaking with Pearse O'Donohue

17.12.2018

Speaking with Pearse O'Donohue (Director Future Networks, European Commission) about the development of cloud certifications in...

The Dutch Data Protection Authority (Dutch DPA) clarifies the concept “large scale” for the Data Protection Officer (DPO)

17.12.2018

Government agencies and public organisations have the obligation to appoint a DPA, regardless the type of data they process. ...

Joint Controllership Sub-group News

13.12.2018

During 2018, the Not-for-Profit International Network CPC set up some study groups with the aim to analyze and compare the Member...

Compete for the best cloud solution worldwide – the EuroCloud Awards 2019 start now

10.12.2018

The EuroCloud Awards recognize the best digital services from Europe and around the world based on their underlying cloud computing...

Supreme Court Finds the Publisher and the State Liable for Personal Data Breach

10.12.2018

In August 2018, the Supreme Court of the Republic of Slovenia upheld the judgements of the lower courts finding the publisher and the...

New cybersecurity law imposes security and reporting obligations to Operators of Essential Services and Digital Service Providers

06.12.2018

The Greek Parliament recently enacted Law 4577/2018, the purpose of which is to transpose Directive (EU) 2016/1148 on security of...

Uber fined £385,000 in the UK and €600,000 in the Netherlands

30.11.2018

Uber US and Uber Netherlands were considered to be joint controllers which made them both separately liable for claims of customers...

EDM Receives 4-Star Certificate

26.11.2018

The cloud service of the Austrian Federal Ministry of Sustainability and Tourism was once again awarded the StarAudit Certificate....

Slovenia’s ICO defines DPO’s additional tasks that could result in a conflict of interests

23.11.2018

Paragraph 6, Article 38 of the General Data Protection Regulation (GDPR) allows the Data Protection Officer (DPO) to fulfil other...

The Spanish DPA (AEPD) issues guidelines regarding the management and notification of security breaches according to GDPR

21.11.2018

The Agencia Española de Protección de Datos ( AEPD) presented guidelines regarding the management and notification of security...

Turkey: Data Protection Matters in M&A Transactions

20.11.2018

Privacy issues in mergers and acquisitions take the attention of transaction parties among other things in these days. ...

With Legislative Decree 101/2018, Italy harmonized the national privacy legislation to the GDPR

16.11.2018

With Legislative Decree n. 101/2018 the Italian legislator has finally taken the last necessary step in order to coordinate the local...

Doping control in sport – how about personal data?

15.11.2018

As the legal representatives of the Slovak Anti-doping Agency (hereinafter referred to as “SADA”), we have taken part in several...

List of personal data processing activities that must be subject to a Data Protection Impact Assessment (“DPIA”)

14.11.2018

The CNPD (Portuguese Data Protection National Commission), as the Portuguese supervisory authority, has approved Regulation nr....

In-vehicle emergency call systems (e-call) in Turkey

09.11.2018

In-vehicle emergency call (eCall) systems, which have been in use for a long time, are defined as systems within vehicles being...

The Datacenter of Orion Telekom, Recertified as StarAudit Approved DC level 3

24.10.2018

Orion Telekom, a Serbian telecommunication provider has been audited and recertified in October 2018.

StarAudit Training in Tokio, September 2018

18.10.2018

Through mediation by the Taiwanese Chapter, a EuroCloud StarAudit training was offered in Japan for the first time. The three-day...

Taiwan's Food & Drug Administration, recertified as StarAudit 4 Star level

10.10.2018

The Food & Drug Administration in Taiwan's Ministry of Health and Welfare has been audited and recertified in October 2018 for...

Privacy Shield: Brace Yourself, Changes are Coming

08.10.2018

Since the application of the GDPR, the days of the EU-U.S. Privacy Shield may be numbered and parties to an IT contract must be on...

Controller-Processor relationship in public sector (Bulgaria)

04.10.2018

With the entry into force of Regulation (EU) 2016/679 (the “General Data Protection Regulation”) on 25th May 2018, the matter of...

Mandatory e-mail encryption from January 1st 2019 in Denmark

03.10.2018

The new practice of the Danish Data Protection Agency requires all work related e-mails containing personal data is to be encoded...

The days after the GDPR – The Cyprus Law on the Protection of Natural Persons against the Processing of Personal Data and the Free Movement of this Data

01.10.2018

This year, on the 25th of May 2018, the highly anticipated and monumental EU General Data Protection Regulation (henceforth “the...

Erstes Austrian Cloud Gütesiegel an Wiener Unternehmen verliehen

14.09.2018

Edentity Software Solution GmbH hat als erstes Unternehmen den Prozess zum Austrian Cloud Gütesiegel abgeschlossen. ...

New StarAudit Catalogue Add-On: Cryptography CC

13.09.2018

EuroCloud Europe launches the new Cryptography CC StarAudit Catalogue, focused on Technical Data Privacy and Cryptographic...

EC English Language Centres, in a new Trust in Cloud (TIC) story

23.08.2018

The Malta Communications Authority (MCA), which falls under the Parliamentary Secretariat for Financial Services, Digital Economy and...

Portuguese Data Protection Authority activities - Data Protection Impact Assessment List and notifications for DPO and Data Breaches

20.08.2018

The Portuguese Data Protection Authority (“DPA”) recently announced a public consultation on the list of processing activities that...

StarAudit Program: Qualifying and Certifying in Several Levels

10.08.2018

StarAudit of EuroCloud Europe wants to build trust between cloud providers and users with its certification program. Since its...

StarAudit training session in Taiwan

04.08.2018

Taipei, August 4: StarAudit training session in Taiwan

The Estonian data protection authority issued guidance on the definition of “large scale” processing

02.08.2018

The Estonian data protection authority (Data Protection Inspectorate, DPI) issued guidance on the definition of “large scale”...

First Cloud Certification in Europe for E-Government-Platform of the BMNT

01.08.2018

EuroCloud Europe awards “Elektronisches Datenmanagement – Umwelt” a 4-star StarAudit Certificate.

Cloud-Studium: Aus der Masterarbeit in die Praxis

31.07.2018

Norbert Fesel hat sich im Rahmen seines Masterstudiums Cloud Computing Engineering an der FH Burgenland mit wichtigen Fragestellung...

The impact on digital transformation on society

30.07.2018

Portugal, 26 July: Excellent socio economic discussion about the impact on digital transformation on society right after a...

“White list” – (Austrian) Exceptions to the Privacy Impact Assessment

18.07.2018

The General Data Protection Regulation (GDPR) stipulates that (data) controllers must carry out what is known as a "data protection...

StarAudit training in June (Zagreb, Croatia)

16.07.2018

Professional (PF) training in Zagreb (Croatian training)

A European Sovereign Cloud: the Silver Lining to the U.S. CLOUD Act

12.07.2018

The adoption of the U.S. Cloud Act weakens the integrity and security model of leading public cloud providers. ...

The Spanish Data Protection Authority (AEPD) issues a check-list on regulatory compliance

06.07.2018

The Spanish DPA issued a check-list regarding regulatory compliance to facilitate the implementation of GDPR. ...

Employee monitoring under the Romanian law implementing GDPR

05.07.2018

On 27 June 2018, the Romanian Parliament finally approved the Romanian law intending to cover the open clauses under the General Data...

GDPR in a Post-Brexit Era: Some New Challenges?

03.07.2018

The General Data Protection Regulation (GDPR) came into full operation on 25 May 2018 and was described by the Information...

1st meeting of the Advisory Board for the International Cybersecurity Forum

28.06.2018

Brussels 25 June: Général d'armée (2S) Watin-Augouard and Chairwoman Elly van den Heuvel, Secretary of the Cybersecurity Council...

CPC Presentation Brochure 2018

25.06.2018

Halfway through 2018, we have published a presentation brochure detailing the status and results the Cloud Privacy Check (CPC)...

Fabasoft Cloud Reconfirmed as World’s Most Secure Cloud Service

12.06.2018

The renowned cloud certification service EuroCloud Europe has once again decided to award Fabasoft Cloud the highest possible...

Fabasoft Cloud als weltweit sicherstes Cloud-Service wiederbestätigt

12.06.2018

Die renommierte Cloud Zertifizierung der EuroCloud Europa hat entschieden, der Fabasoft Cloud erneut als weltweit einziges...

The Impact of the GDPR in Monaco until the Revision of the Monegasque Data Protection Legislation

08.06.2018

The Monegasque Data Protection Authority has published on its website on May 2, 2018 a list of the key questions on the GDPR...

A brief history of data protection: How did it all start?

01.06.2018

With the GDPR being enforced on 25th of May, we decided to take a glimpse back into the history of data privacy and traced it's first...

The discussions around the national law on personal data processing

29.05.2018

The Latvian legislator is facing delays with the adaptation of the national Law on Personal Data Processing (the Draft Law). On April...

Meeting with the new Croatian EuroCloud Auditor

24.05.2018

Zagreb, 22 May: Final Meeting with the new Croatian EuroCloud Auditor for Cloud certifications Zlatko Švigir (on my right) organised...

A guide to the insurability of GDPR fines across Europe: the price of data security

23.05.2018

Zepos & Yannopoulos, partners of the EuroCloud CPC network, participated in a multi jurisdictional exercise organised by the...

The Danish Parliament has adopted the Danish Data Protection Act

18.05.2018

The act will to some extent replace the Danish Act on Processing of Personal Data and it will enter into force simultaneously with...

GDPR and its influence outside EU - Why, What, Who, When, How (Macedonia’s case study)

15.05.2018

GDPR is knocking on the door. Being a Europe’s country, and not being a European Union member country yet, does not release the...

Cloud Contracts, GDPR and Liability Caps

11.05.2018

Liability caps in contracts under the GDPR is a hot-button issue for data controllers and data processors. A few days before the...

Austria’s first quality seal for cloud services

19.04.2018

With EuroCloud Austria as their partner, the Austrian Federal Economic Chamber has for the first time launched an official...

Latest News

EDM receives EuroCloud StarAudit Certificate (4-Star)

FDA Taiwan receives a 4* Certificate from StarAudit

The 4th version of the StarAudit Catalogue in German has been released

Fabasoft awarded for the fifth time the highest certification level by the EuroCloud StarAudit

Enforcement of GDPR Infringements by Third Parties – First Decision of the Austrian Supreme Court

StarAudit Area 7 (GDPR) becomes mandatory starting from 2020

Orion Telekom data centre confirms StarAudit DC level 3

Croatian Post data centre refreshes certification for 4-star maturity level

Significant fines imposed by the Bulgarian Commission for Personal Data Protection

CNIL on monitoring employee software / internet use

Obligation of Notification of Personal Data Violations to Turkish DPA

Serbia - readiness/lack of readiness of controllers and processors and knowledge of individuals regarding application of the new Law on Personal Data Protection

New European judgment on cookies

New Greek law on GDPR

Washington Privacy Act Proposal Increases Pressure for Federal Legislation

Would you like some cookies?

Fine of € 460.000,- imposed on Dutch Haga Hospital by Dutch Data Protection Officer, the first Dutch fine under GDPR (July 19, 2019)

Slovenia’s DPA says mere possession of processing equipment does not amount to personal data processing

Fabasoft once again awarded the highest certification level by the EuroCloud StarAudit

GDPR: A Game Changer for Cloud Contracts

Meeting between EuroCloud Europe and the Chinese Institute of Electronics

The EU Cybersecurity Act: a new Era dawns on ENISA

Cloud benefits still massively underestimated

The 4th version of the StarAudit Catalogue has been released

Salesforce shut down its infrastructure after a huge outage that is still ongoing for 3 days now

Serbia: New Law on Personal Data Protection

Microsoft Office Enterprise version as used at EU institutions may conflict with the GDPR.

The 4th version of the StarAudit Catalogue is coming soon

The Belgian data protection authority bans the use of private sector logins as an access condition to public sector websites

Slovak list of processing operations which are subject to the requirement for a data protection impact assessment

Three Legal Opinions of the Italian DPA clarify some GDPR Implementation Aspects

Implications on Data Protection law in the event of a no-deal Brexit

Data Protection Officers under Slovenia’s Draft Personal Data Protection Act (ZVOP-2)

OnePin has successfully renewed its 4 Star Certificate

How to get a StarAudit certificate and how much does it cost

The Looming Clouds: How and why cloud services are reshaping the future of financial services in Europe

EuroCloud and TUV cooperation in Southeast Asia

To be or not to be (a processor). That is the question.

CARS are safe – the CLOUD isn’t?

The cloud is NOT a safe space!

Cyber Attack on the Olympic Village Paris 2020

Is the Cloud a safe place?

EU–U.S. Privacy Shield adequacy decision (“Privacy Shield”) adopted on 12 July 2016, assessed by EDPB in report January 22, 2019

Background and Benefits of the “Austrian Cloud” Seal

Is a violation of a GDPR rule at the same time a violation of competition law?

What Makes a Good Cloud Service Provider?

Interview: From cloud to competition

Croatian Post upgrades its data centre to 4-Star maturity level

2018 Highlights of data protection in Monaco

Speaking with Pearse O'Donohue

The Dutch Data Protection Authority (Dutch DPA) clarifies the concept “large scale” for the Data Protection Officer (DPO)

Joint Controllership Sub-group News

Compete for the best cloud solution worldwide – the EuroCloud Awards 2019 start now

Supreme Court Finds the Publisher and the State Liable for Personal Data Breach

New cybersecurity law imposes security and reporting obligations to Operators of Essential Services and Digital Service Providers

Uber fined £385,000 in the UK and €600,000 in the Netherlands

EDM Receives 4-Star Certificate

Slovenia’s ICO defines DPO’s additional tasks that could result in a conflict of interests

The Spanish DPA (AEPD) issues guidelines regarding the management and notification of security breaches according to GDPR

Turkey: Data Protection Matters in M&A Transactions

With Legislative Decree 101/2018, Italy harmonized the national privacy legislation to the GDPR

Doping control in sport – how about personal data?

List of personal data processing activities that must be subject to a Data Protection Impact Assessment (“DPIA”)

In-vehicle emergency call systems (e-call) in Turkey

The Datacenter of Orion Telekom, Recertified as StarAudit Approved DC level 3

StarAudit Training in Tokio, September 2018

Taiwan's Food & Drug Administration, recertified as StarAudit 4 Star level

Privacy Shield: Brace Yourself, Changes are Coming

Controller-Processor relationship in public sector (Bulgaria)

Mandatory e-mail encryption from January 1st 2019 in Denmark

The days after the GDPR – The Cyprus Law on the Protection of Natural Persons against the Processing of Personal Data and the Free Movement of this Data

Erstes Austrian Cloud Gütesiegel an Wiener Unternehmen verliehen

New StarAudit Catalogue Add-On: Cryptography CC

EC English Language Centres, in a new Trust in Cloud (TIC) story

Portuguese Data Protection Authority activities - Data Protection Impact Assessment List and notifications for DPO and Data Breaches

StarAudit Program: Qualifying and Certifying in Several Levels

StarAudit training session in Taiwan

The Estonian data protection authority issued guidance on the definition of “large scale” processing