云服务能否带来数据？如何应对《数据法案》对云服务的影响.pdf

1、CLOUDY WITH A CHANCE OF DATA?Weathering the Effects of the Data Act on the Enterprise CloudWELCOME AND INTRODUCTIONSRichard GreeneDPO&Director EMEA Privacy CounselAutodeskGabriela MercuriManaging DirectorSCOPE EuropePhil LeeZettabyte Lawyer(MD)DigiphileWHAT WERE COVERING TODAY(AND WHAT WERE NOT)Ente

2、rprise CloudData Processing ServicesInternet of ThingsWHAT WERE COVERING TODAY(AND WHAT WERE NOT)Enterprise CloudData Processing ServicesInternet of Things The Data Act-Regulation 2023/2854 Affects personal and non-personal data Make data available,accessibile,and usable Applicable to“data processin

3、g services”.provided to EU customers(B2B or B2C)Penalties set at a national levelTHE BASICSDATA PROCESSING SERVICESA digital service that is provided to a customer and that enables ubiquitous and on-demand network access to a shared pool of configurable,scalable and elastic computing resources of a

4、centralised,distributed or highly distributed nature that can be rapidly provisioned and released with minimal management effort or service provider interaction.(Art 2(8)SaaS:Ready-to-use software online(e.g.,Google Docs).PaaS:Tools to build apps without managing servers(e.g.,Microsoft Azure App Ser

5、vices).IaaS:Rent virtual servers and storage(e.g.,Amazon EC2).Recital 81DATA PROCESSING SERVICES Problem:Cloud lock-in Goal:Enable switching to on-prem or similar service type How?Remove switching barriers-Art 23 Give contractual rights-Art 25 Provide transparency-Art 26 Duty to act in good faith-Ar

6、t 27 Remove switching charge-Art 29 Support functional equivalence-Art 30CLOUD SWITCHING AND PORTABILITY(Chapter VI)Maximum Notice Periodto initiate switchingMaximum Transitional PeriodMinimum Retrieval Period30 days2 months30 days (Extendable in some cases)CLOUD SWITCHING AND PORTABILITY(Art 25-non