Skip navigation

May 25th, 2021 marks the General Data Protection Regulation’s Third Year Anniversary

EU Cloud CoC

As we reach the GDPR's third anniversary, the EU Cloud CoC General Assembly is proud to be a part of this journey and to significantly contribute to its concrete and broad implementation within the cloud industry.

Since its introduction, back in 2018, the GDPR has become an international blueprint, setting high privacy standards and enforcing the protection of hundreds of millions of data subjects across Europe, besides serving as a baseline for the drafting of several other regulatory initiatives abroad.

In this context – and more broadly in the context of implementing any new piece of legislation – the materialization of GDPR provisions has created compliance challenges to both data controllers and processors.

However, anticipating such challenges and seeking to remain future proof while regulating highly innovative industries, the GDPR has rightfully incorporated different mechanisms to optimize its implementation. Codes of conduct are of these instruments and have a unique potential to guarantee broad market compliance while fostering an innovation-friendly ecosystem.

Against this background, the EU Cloud Code of Conduct emerges as the first tool to receive official approval by Data Protection Authorities to ensure and prove GDPR compliance for all service types of cloud computing.

Setting an unparalleled market standard, the approval of the EU Cloud CoC and accreditation of SCOPE Europe as its dedicated monitoring body paves the way to the continuous development of co-regulatory initiatives, which are key elements to optimize GDPR enforcement as well as to support Europe’s digital transition. 

The EU Cloud CoC General Assembly is proud to contribute to the enforcement of GDPR provisions and is eager to continuously work for the fostering of a trustworthy environment for cloud computing. 

Click here to read the approval decision of the EU Cloud CoC and accreditation of SCOPE Europe as its monitoring body by the Belgian Data Protection Authority