Skip navigation

PRESS RELEASE: EU Cloud CoC collaborates with CSA to further harmonize GDPR compliance

SCOPE EuropeEU Cloud CoCNewsPress Release

Starting in November 2023 and through a specific framework, the CSA community will have access to an approved and European Data Protection Board (EDPB)-endorsed GDPR compliance solution designed for the cloud.

On one side of this collaboration, we have the EU Cloud Code of Conduct (EU Cloud CoC), a pioneer initiative and market standard for robust data protection within the cloud sector. On the other, we have the Cloud Security Alliance (CSA), a global leader widely reputed for the development and administration of various IT and cyber security certifications.

It is exactly this mutual mission of developing effective and accessible standards for the cloud industry that constitutes the very foundation of this collaboration. Against this background, the EU Cloud CoC and CSA are joining forces to enable trust building and, ultimately, the broader dissemination of cloud services globally.

Concretely, this step will allow the CSA community to declare adherence to the EU Cloud CoC via the platform. In this context, Cloud Service Providers that have successfully completed their GDPR verification by the accredited Monitoring Body of the Code, SCOPE Europe, will have their compliance mark displayed in the STAR Registry, a publicly accessible registry that documents the security and privacy controls provided by popular cloud computing offerings..  

This initiative is an essential resource for cloud users, empowering them to gain a thorough understanding of available offerings through the Registry and enabling them to make informed choices when seeking cloud services.

Finally, given the abundant synergies driving this collaboration, that derive from both parties’ strong commitment to best practices in compliance, the goal is to work continuously for the design of robust cloud-specific instruments.

Addressing this achievement, Jim Reavis, CEO and co-founder, Cloud Security Alliance

Our mission at CSA is to assist companies in ensuring a secure cloud computing environment, while simultaneously adhering to often-complex data privacy regulations. With this collaboration, it will now be even easier for companies around the globe to assess a cloud service provider's adherence to cloud security and data privacy best practices."

Gabriela Mercuri, Managing Director of SCOPE Europe, added:

The materialization of this collaboration is a product of a meaningful exchange between the two organizations, our shared values and objectives when it comes to the development of robust and workable industry standards. As SCOPE Europe, we firmly believe this collaboration will foster trust in cloud services and enable businesses to innovate and grow through the deployment of this key technology."