Contact
QR code for the current URL

Story Box-ID: 472185

IDC Central Europe GmbH Hanauer Landstraße 182 D 60314 Frankfurt am Main, Germany http://www.idc.de
Contact Ms Katja Schmalen +49 69 90502115
Company logo of IDC Central Europe GmbH
IDC Central Europe GmbH

Microsoft Embeds the EU's Data Transfer Rules into Office 365

Top Line: Microsoft will sign Office 365 contracts containing the EU's model data protection clauses

(PresseBox) (Frankfurt am Main, )
In 2010, the European Commission published a set of model clauses that can be added to services contracts where the service provider remotely processes personal data (either about employees or customers) on behalf of the customer. The clauses commit the service provider - whether an outsourced, hosted or cloud service - to observing the rules of the EU Data Protection Directive.

Microsoft says it is now able to sign contracts for Office 365 that contain these model clauses - in other words, it complies with the Data Protection Directive. Microsoft also says that Office 365 complies with the US HIPAA rules that protect healthcare data.

Bottom Line for ICT Buyers:

1. If you operate in or across Europe, and you store personal data about staff or customers, you will already be aware of your responsibilities under the EU Data Protection Directive. Hosting and outsourcing service providers will almost certainly comply with its rules, but since cloud services providers are the 'new kids on the block', you will need to check that they fulfill its requirements by asking them specific questions -- in particular, if they are willing to sign contracts with the model clauses.

2. Some countries have data transfer requirements that are more stringent and the EU's transfer rules may not be enough. Microsoft says that it meets or exceeds the requirements of all EU member states. Again, you will have to ask specific questions of your cloud services vendors. It is not just U.S. vendors that should be aware of the directive: European suppliers may find themselves out of compliance if they have built their data transfer requirements for one country (e.g. the UK) and now offer them in another (e.g. Germany). Cloud services vendors from the UK in particular need to ensure that they are ready to meet the more stringent privacy requirements of other European countries.

3. A wide range of business applications (often cloud based) are becoming 'socialized' to improve collaboration and business effectiveness. This means that the personal data of employees and business partners will be captured and stored either deliberately or inadvertently by many types of applications that previously contained no personal information. You will have to be careful to ensure that this scope creep does not inadvertently affect your own compliance.
The publisher indicated in each case (see company info by clicking on image/title or company info in the right-hand column) is solely responsible for the stories above, the event or job offer shown and for the image and audio material displayed. As a rule, the publisher is also the author of the texts and the attached image, audio and information material. The use of information published here is generally free of charge for personal information and editorial processing. Please clarify any copyright issues with the stated publisher before further use. In case of publication, please send a specimen copy to service@pressebox.de.
Important note:

Systematic data storage as well as the use of even parts of this database are only permitted with the written consent of unn | UNITED NEWS NETWORK GmbH.

unn | UNITED NEWS NETWORK GmbH 2002–2024, All rights reserved

The publisher indicated in each case (see company info by clicking on image/title or company info in the right-hand column) is solely responsible for the stories above, the event or job offer shown and for the image and audio material displayed. As a rule, the publisher is also the author of the texts and the attached image, audio and information material. The use of information published here is generally free of charge for personal information and editorial processing. Please clarify any copyright issues with the stated publisher before further use. In case of publication, please send a specimen copy to service@pressebox.de.