{"id":5959,"date":"2022-01-17T13:55:06","date_gmt":"2022-01-17T11:55:06","guid":{"rendered":"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-clauses-contractuelles-types-cloud-act%c2%a0-les-conseils-de-max-schrems-defenseur-de-la-protection-des-donnees"},"modified":"2024-05-07T19:41:25","modified_gmt":"2024-05-07T17:41:25","slug":"privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies","status":"publish","type":"post","link":"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/","title":{"rendered":"Privacy Shield, clauses contractuelles types, CLOUD Act\u00a0: les conseils de Max Schrems, d\u00e9fenseur de la protection des donn\u00e9es"},"content":{"rendered":"

Depuis que la Cour de justice de l’Union europ\u00e9enne a d\u00e9clar\u00e9 les accords bilat\u00e9raux pour la transmission des donn\u00e9es transatlantiques (Safe Harbor et, ensuite, Privacy Shield) invalides<\/a> sur requ\u00eate de Max Schrems, activiste autrichien pour la protection des donn\u00e9es, de plus en plus de fournisseurs am\u00e9ricains de services cloud sont contraints d’avoir recours aux clauses contractuelles types (CCT, Standard Contractual Clauses ou SCC). Dans le cadre de nos projets client, nous recevons fr\u00e9quemment des questions pour savoir \u00e0 quoi s’attendre sur le sujet. \u00c0 ce contexte s’ajoutent les incertitudes li\u00e9es aux lois comme le CLOUD Act aux \u00c9tats-Unis. Celle-ci r\u00e9git la transmission des donn\u00e9es aux autorit\u00e9s pour les fournisseurs am\u00e9ricains, et ce, m\u00eame si les donn\u00e9es ne sont pas h\u00e9berg\u00e9s aux \u00c9tats-Unis mais sur des serveurs en Europe.<\/p>

Schrems : scepticisme \u00e9galement \u00e0 l’\u00e9gard des clauses contractuelles types actualis\u00e9es<\/h2>

Il est \u00e9vident qu’un article de blog ne peut pas et ne doit pas remplacer un conseil juridique pointu sur ces questions. Toutefois, nous vous renvoyons \u00e0 la conversation que nous avons eue avec Max Schrems<\/a> l’ann\u00e9e derni\u00e8re. Durant cet \u00e9change, Schrems abordait de mani\u00e8re tr\u00e8s explicite le \u00ab contournement \u00bb au moyen des CCT (clauses contractuelles types). Dans sa ligne de mire : les versions mises \u00e0 jour depuis juin 2021, qui seraient toutefois nettement plus compliqu\u00e9es \u00e0 appliquer, car, en principe, une \u00e9valuation au cas par cas doit \u00eatre effectu\u00e9e \u00e0 chaque fois.<\/p>

Les datacenters europ\u00e9ens des fournisseurs am\u00e9ricains non prot\u00e9g\u00e9s contre l’acc\u00e8s des autorit\u00e9s<\/h2>

Selon Max Schrems, il n’est pas toujours facile d’\u00e9valuer la situation des fournisseurs am\u00e9ricains, en particulier ceux dont le traitement des donn\u00e9es est g\u00e9ographiquement r\u00e9parti, comme c’est le cas dans les domaines de la messagerie \u00e9lectronique, de la s\u00e9curit\u00e9 ou de la fourniture de contenu. Mais une chose est claire : m\u00eame si les fournisseurs am\u00e9ricains de services cloud exploitent leurs propres datacenters en Europe, cela ne prot\u00e8ge pas les donn\u00e9es qui y sont stock\u00e9es contre l’acc\u00e8s permis par la loi FISA. Et pour cause : le Foreign Intelligence Surveillance Act n’a pas de restriction g\u00e9ographique.<\/p>

Des fournisseurs tenus au secret<\/h2>

L’obligation de garder le secret est consid\u00e9r\u00e9e ici comme particuli\u00e8rement probl\u00e9matique dans le cadre des National Security Letters (NSL) et du Foreign Intelligence Surveillance Act (FISA), qui interdisent parfois express\u00e9ment aux fournisseurs d’informer les personnes concern\u00e9es des demandes de donn\u00e9es dont elles font l’objet (au grand dam de grands fournisseurs am\u00e9ricains<\/a> tels que Microsoft).<\/p>

Et si vous interrogiez directement vos fournisseurs sur leurs pratiques ? <\/h2>

Concernant l’invalidation du Privacy Shield et les doutes que cela g\u00e9n\u00e8re chez de nombreuses entreprises, Max Schrems a un avis tranch\u00e9. Plut\u00f4t que de d\u00e9penser leur argent en conseils juridiques, les entreprises devraient interroger elles-m\u00eames leurs prestataires de services et les mettre \u00e0 l’\u00e9preuve. Dans cette optique, nous avons rassembl\u00e9 les crit\u00e8res essentiels \u00e0 respecter sur notre site Web<\/a>. Vous trouverez \u00e9galement un questionnaire \u00e0 transmettre \u00e0 votre prestataire de services informatiques.<\/p> ","protected":false},"excerpt":{"rendered":"

M\u00eame si les fournisseurs am\u00e9ricains de services cloud exploitent leurs propres datacenters en Europe, selon Schrems, cela ne prot\u00e8ge pas les donn\u00e9es qui y\u00a0sont stock\u00e9es contre l’acc\u00e8s des autorit\u00e9s am\u00e9ricaines. Les versions des CCT mises \u00e0 jour en 2021 seraient toutefois nettement plus compliqu\u00e9es \u00e0 appliquer d’apr\u00e8s le d\u00e9fenseur de la protection des donn\u00e9es le plus r\u00e9put\u00e9.<\/p>\n","protected":false},"author":12,"featured_media":8090,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[78,8,15],"tags":[946,3850,102,3644,286,3885],"acf":[],"yoast_head":"\nPrivacy Shield, SCCs, CLOUD Act: Was Datensch\u00fctzer Schrems nun r\u00e4t<\/title>\n<meta name=\"description\" content=\"Selbst wenn US-Cloud-Anbieter eigene Data Center in Europa betreiben, sch\u00fctzt das laut Schrems die dort gespeicherten Daten nicht vor Zugriffen durch US-Beh\u00f6rden. In 2021 aktualisierte SCC-Fassungen seien noch deutlich komplizierter anzuwenden.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Shield, clauses contractuelles types, CLOUD Act\u00a0: les conseils de Max Schrems, d\u00e9fenseur de la protection des donn\u00e9es\" \/>\n<meta property=\"og:description\" content=\"Selbst wenn US-Cloud-Anbieter eigene Data Center in Europa betreiben, sch\u00fctzt das laut Schrems die dort gespeicherten Daten nicht vor Zugriffen durch US-Beh\u00f6rden. In 2021 aktualisierte SCC-Fassungen seien noch deutlich komplizierter anzuwenden.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/\" \/>\n<meta property=\"og:site_name\" content=\"Retarus Corporate Blog - FR\" \/>\n<meta property=\"article:published_time\" content=\"2022-01-17T11:55:06+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-07T17:41:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.retarus.com\/blog\/fr\/wp-content\/uploads\/sites\/24\/2024\/05\/surveillance.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"562\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"S\u00f6ren Schulte\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Standardvertragsklauseln und CLOUD Act: Was Max Schrems nun r\u00e4t\" \/>\n<meta name=\"twitter:description\" content=\"Selbst wenn US-Cloud-Anbieter eigene Data Center in Europa betreiben, sch\u00fctze das laut Schrems nicht vor Zugriff durch US-Beh\u00f6rden.\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"S\u00f6ren Schulte\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/\",\"url\":\"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/\",\"name\":\"Privacy Shield, SCCs, CLOUD Act: Was Datensch\u00fctzer Schrems nun r\u00e4t\",\"isPartOf\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/fr\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.retarus.com\/blog\/fr\/wp-content\/uploads\/sites\/24\/2024\/05\/surveillance.jpg\",\"datePublished\":\"2022-01-17T11:55:06+00:00\",\"dateModified\":\"2024-05-07T17:41:25+00:00\",\"author\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/fr\/#\/schema\/person\/da5eb37e5936738ea4e12be8b429433d\"},\"description\":\"Selbst wenn US-Cloud-Anbieter eigene Data Center in Europa betreiben, sch\u00fctzt das laut Schrems die dort gespeicherten Daten nicht vor Zugriffen durch US-Beh\u00f6rden. In 2021 aktualisierte SCC-Fassungen seien noch deutlich komplizierter anzuwenden.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/#primaryimage\",\"url\":\"https:\/\/www.retarus.com\/blog\/fr\/wp-content\/uploads\/sites\/24\/2024\/05\/surveillance.jpg\",\"contentUrl\":\"https:\/\/www.retarus.com\/blog\/fr\/wp-content\/uploads\/sites\/24\/2024\/05\/surveillance.jpg\",\"width\":1000,\"height\":562},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.retarus.com\/blog\/fr\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Shield, clauses contractuelles types, CLOUD Act\u00a0: les conseils de Max Schrems, d\u00e9fenseur de la protection des donn\u00e9es\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.retarus.com\/blog\/fr\/#website\",\"url\":\"https:\/\/www.retarus.com\/blog\/fr\/\",\"name\":\"Retarus Corporate Blog - FR\",\"description\":\"Restez inform\u00e9\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.retarus.com\/blog\/fr\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.retarus.com\/blog\/fr\/#\/schema\/person\/da5eb37e5936738ea4e12be8b429433d\",\"name\":\"S\u00f6ren Schulte\",\"url\":\"https:\/\/www.retarus.com\/blog\/fr\/author\/sschulte\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Privacy Shield, SCCs, CLOUD Act: Was Datensch\u00fctzer Schrems nun r\u00e4t","description":"Selbst wenn US-Cloud-Anbieter eigene Data Center in Europa betreiben, sch\u00fctzt das laut Schrems die dort gespeicherten Daten nicht vor Zugriffen durch US-Beh\u00f6rden. In 2021 aktualisierte SCC-Fassungen seien noch deutlich komplizierter anzuwenden.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/","og_locale":"fr_FR","og_type":"article","og_title":"Privacy Shield, clauses contractuelles types, CLOUD Act\u00a0: les conseils de Max Schrems, d\u00e9fenseur de la protection des donn\u00e9es","og_description":"Selbst wenn US-Cloud-Anbieter eigene Data Center in Europa betreiben, sch\u00fctzt das laut Schrems die dort gespeicherten Daten nicht vor Zugriffen durch US-Beh\u00f6rden. In 2021 aktualisierte SCC-Fassungen seien noch deutlich komplizierter anzuwenden.","og_url":"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/","og_site_name":"Retarus Corporate Blog - FR","article_published_time":"2022-01-17T11:55:06+00:00","article_modified_time":"2024-05-07T17:41:25+00:00","og_image":[{"width":1000,"height":562,"url":"https:\/\/www.retarus.com\/blog\/fr\/wp-content\/uploads\/sites\/24\/2024\/05\/surveillance.jpg","type":"image\/jpeg"}],"author":"S\u00f6ren Schulte","twitter_card":"summary_large_image","twitter_title":"Standardvertragsklauseln und CLOUD Act: Was Max Schrems nun r\u00e4t","twitter_description":"Selbst wenn US-Cloud-Anbieter eigene Data Center in Europa betreiben, sch\u00fctze das laut Schrems nicht vor Zugriff durch US-Beh\u00f6rden.","twitter_misc":{"\u00c9crit par":"S\u00f6ren Schulte","Dur\u00e9e de lecture estim\u00e9e":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/","url":"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/","name":"Privacy Shield, SCCs, CLOUD Act: Was Datensch\u00fctzer Schrems nun r\u00e4t","isPartOf":{"@id":"https:\/\/www.retarus.com\/blog\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/#primaryimage"},"image":{"@id":"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/#primaryimage"},"thumbnailUrl":"https:\/\/www.retarus.com\/blog\/fr\/wp-content\/uploads\/sites\/24\/2024\/05\/surveillance.jpg","datePublished":"2022-01-17T11:55:06+00:00","dateModified":"2024-05-07T17:41:25+00:00","author":{"@id":"https:\/\/www.retarus.com\/blog\/fr\/#\/schema\/person\/da5eb37e5936738ea4e12be8b429433d"},"description":"Selbst wenn US-Cloud-Anbieter eigene Data Center in Europa betreiben, sch\u00fctzt das laut Schrems die dort gespeicherten Daten nicht vor Zugriffen durch US-Beh\u00f6rden. In 2021 aktualisierte SCC-Fassungen seien noch deutlich komplizierter anzuwenden.","breadcrumb":{"@id":"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/#primaryimage","url":"https:\/\/www.retarus.com\/blog\/fr\/wp-content\/uploads\/sites\/24\/2024\/05\/surveillance.jpg","contentUrl":"https:\/\/www.retarus.com\/blog\/fr\/wp-content\/uploads\/sites\/24\/2024\/05\/surveillance.jpg","width":1000,"height":562},{"@type":"BreadcrumbList","@id":"https:\/\/www.retarus.com\/blog\/fr\/privacy-shield-standard-contractual-clauses-cloud-act-privacy-activist-max-schrems-advice-for-worried-companies\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.retarus.com\/blog\/fr\/"},{"@type":"ListItem","position":2,"name":"Privacy Shield, clauses contractuelles types, CLOUD Act\u00a0: les conseils de Max Schrems, d\u00e9fenseur de la protection des donn\u00e9es"}]},{"@type":"WebSite","@id":"https:\/\/www.retarus.com\/blog\/fr\/#website","url":"https:\/\/www.retarus.com\/blog\/fr\/","name":"Retarus Corporate Blog - FR","description":"Restez inform\u00e9","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.retarus.com\/blog\/fr\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/www.retarus.com\/blog\/fr\/#\/schema\/person\/da5eb37e5936738ea4e12be8b429433d","name":"S\u00f6ren Schulte","url":"https:\/\/www.retarus.com\/blog\/fr\/author\/sschulte\/"}]}},"_links":{"self":[{"href":"https:\/\/www.retarus.com\/blog\/fr\/wp-json\/wp\/v2\/posts\/5959"}],"collection":[{"href":"https:\/\/www.retarus.com\/blog\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.retarus.com\/blog\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/fr\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/fr\/wp-json\/wp\/v2\/comments?post=5959"}],"version-history":[{"count":5,"href":"https:\/\/www.retarus.com\/blog\/fr\/wp-json\/wp\/v2\/posts\/5959\/revisions"}],"predecessor-version":[{"id":8931,"href":"https:\/\/www.retarus.com\/blog\/fr\/wp-json\/wp\/v2\/posts\/5959\/revisions\/8931"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/fr\/wp-json\/wp\/v2\/media\/8090"}],"wp:attachment":[{"href":"https:\/\/www.retarus.com\/blog\/fr\/wp-json\/wp\/v2\/media?parent=5959"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/fr\/wp-json\/wp\/v2\/categories?post=5959"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/fr\/wp-json\/wp\/v2\/tags?post=5959"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}