{"id":5579,"date":"2021-03-23T16:04:48","date_gmt":"2021-03-23T15:04:48","guid":{"rendered":"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner"},"modified":"2024-05-07T18:54:43","modified_gmt":"2024-05-07T16:54:43","slug":"is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner","status":"publish","type":"post","link":"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/","title":{"rendered":"Is it possible to utilize Cloud Services in a GDPR-compliant manner?"},"content":{"rendered":"\n<p>\u201cThe use of Microsoft software by authorities is illegal\u201d and \u201cAuthorities should immediately stop using Microsoft\u201d dominated the headlines following a <a href=\"https:\/\/www.datenschutz-mv.de\/presse\/?id=168438&amp;processor=processor.sa.pressemitteilung\">recent press release<\/a> issued by Heinz M\u00fcller, a German state Data Protection Commissioner.<\/p>\n\n\n\n<p>With these statements, the commissioner is essentially <a href=\"https:\/\/netzpolitik.org\/2020\/datenschutzkonferenz-deutsche-verwaltung-nutzt-microsoft-produkte-nicht-rechtskonform\/\">taking the same stance<\/a> that a group of federal and state data protection officers had already indicated at a conference last September. The matter has additionally been discussed in numerous EU countries, as clearly indicated in a <a href=\"https:\/\/edps.europa.eu\/sites\/edp\/files\/publication\/20-07-02_edps_euis_microsoft_contract_investigation_en.html\">public paper<\/a> released by the EDPS (European Data Protection Supervisor). The criticism focuses on Microsoft cloud services, Microsoft 365, as well as other operating systems, office applications, and video conferencing solutions supplied by providers based outside of the EU. European data guardian\u2019s view is that regular use of such services allows the flow of personal data to third parties who lack a sufficient legal basis for accessing it.<\/p>\n\n\n\n<p>Last autumn however, certain data protection representatives <a href=\"https:\/\/www.datenschutz-bayern.de\/presse\/20201002_365.pdf\">were not all on the same page<\/a>. At that time, nine members of the data protection conference were of the opinion that utilizing such services was not in line with data protection regulations. This in contrast to the remaining eight members who voted against the position of the other nine. Nevertheless, all members saw potential for improvement, especially in light of the CJEU\u2019s \u201cSchrems II\u201d <a href=\"https:\/\/www.retarus.com\/blog\/us\/the-cjeu-overturns-privacy-shield-so-what-now\/\">decision on the US Privacy Shield<\/a> in July 2020.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-tips-for-implementing-the-gdpr-provisions\">Tips for implementing the GDPR provisions<\/h2>\n\n\n\n<p>This discord makes it clear how much opinions differ with regard to assessing the legality of cloud services. We have compiled <a href=\"https:\/\/www.retarus.com\/end-of-privacy-shield-7-questions-to-ask-now\/\">this useful list of tips<\/a> to detail what you need to consider when assessing the legal certainty of the cloud services you use. The web page also provides a free questionnaire to use to check whether cloud service providers are processing data in compliance with the GDPR.<\/p>\n\n\n\n<p>According to Heinz M\u00fcller companies are left with only one option \u2013 using open source products to ensure data protection and safeguard the digital sovereignty of government agencies and authorities. All services provided by Retarus \u2013 whether it\u2019s the <a href=\"https:\/\/www.retarus.com\/secure-email-platform\/\">Secure Email Platform<\/a>, the <a href=\"https:\/\/www.retarus.com\/services\/fax\/\">Communications Platform<\/a> or the <a href=\"https:\/\/www.retarus.com\/services\/managed-edi-services\/\">Business Integration Platform<\/a> \u2013 can be run <a href=\"https:\/\/www.retarus.com\/why-retarus\/compliance-certifications\/\">in compliance with GDPR<\/a>, even in conjunction with cloud services provided by commercial suppliers such as Microsoft, SAP, Oracle, or any open source systems. All data belonging to European customers is processed exclusively in data centers located in Europe and operated by Retarus itself, unless otherwise contractually agreed upon.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u201cAuthorities should immediately stop using Microsoft\u201d was the strident tone echoed across headlines following a recent press release issued by a German state Data Protection Commissioner. However, there are cloud services that are fully GDPR compliant. <\/p>\n","protected":false},"author":7,"featured_media":5581,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_s2mail":"yes","footnotes":""},"categories":[66,8],"tags":[80,249,477],"class_list":["post-5579","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud","category-news","tag-cloud-services","tag-data-protection","tag-gdpr"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.8 (Yoast SEO v25.8) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Is it possible to utilize Cloud Services in a GDPR-compliant manner? - Retarus Corporate Blog - US<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Is it possible to utilize Cloud Services in a GDPR-compliant manner?\" \/>\n<meta property=\"og:description\" content=\"\u201cAuthorities should immediately stop using Microsoft\u201d was the strident tone echoed across headlines following a recent press release issued by a German state Data Protection Commissioner. However, there are cloud services that are fully GDPR compliant.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/\" \/>\n<meta property=\"og:site_name\" content=\"Retarus Corporate Blog - US\" \/>\n<meta property=\"article:published_time\" content=\"2021-03-23T15:04:48+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-07T16:54:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.retarus.com\/blog\/us\/wp-content\/uploads\/sites\/34\/2021\/03\/Cloud_Datenschutz-DSGVO.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"721\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Alexander H\u00fcls\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alexander H\u00fcls\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/\",\"url\":\"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/\",\"name\":\"Is it possible to utilize Cloud Services in a GDPR-compliant manner? - Retarus Corporate Blog - US\",\"isPartOf\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/us\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.retarus.com\/blog\/us\/wp-content\/uploads\/sites\/34\/2021\/03\/Cloud_Datenschutz-DSGVO.png\",\"datePublished\":\"2021-03-23T15:04:48+00:00\",\"dateModified\":\"2024-05-07T16:54:43+00:00\",\"author\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/us\/#\/schema\/person\/5dbabd3b8a406ebd06fe0769cedd6c7a\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/#primaryimage\",\"url\":\"https:\/\/www.retarus.com\/blog\/us\/wp-content\/uploads\/sites\/34\/2021\/03\/Cloud_Datenschutz-DSGVO.png\",\"contentUrl\":\"https:\/\/www.retarus.com\/blog\/us\/wp-content\/uploads\/sites\/34\/2021\/03\/Cloud_Datenschutz-DSGVO.png\",\"width\":1280,\"height\":721},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.retarus.com\/blog\/us\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Is it possible to utilize Cloud Services in a GDPR-compliant manner?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.retarus.com\/blog\/us\/#website\",\"url\":\"https:\/\/www.retarus.com\/blog\/us\/\",\"name\":\"Retarus Corporate Blog - US\",\"description\":\"Always up to date\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.retarus.com\/blog\/us\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.retarus.com\/blog\/us\/#\/schema\/person\/5dbabd3b8a406ebd06fe0769cedd6c7a\",\"name\":\"Alexander H\u00fcls\",\"url\":\"https:\/\/www.retarus.com\/blog\/us\/author\/ahuels\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Is it possible to utilize Cloud Services in a GDPR-compliant manner? - Retarus Corporate Blog - US","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/","og_locale":"en_US","og_type":"article","og_title":"Is it possible to utilize Cloud Services in a GDPR-compliant manner?","og_description":"\u201cAuthorities should immediately stop using Microsoft\u201d was the strident tone echoed across headlines following a recent press release issued by a German state Data Protection Commissioner. However, there are cloud services that are fully GDPR compliant.","og_url":"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/","og_site_name":"Retarus Corporate Blog - US","article_published_time":"2021-03-23T15:04:48+00:00","article_modified_time":"2024-05-07T16:54:43+00:00","og_image":[{"width":1280,"height":721,"url":"https:\/\/www.retarus.com\/blog\/us\/wp-content\/uploads\/sites\/34\/2021\/03\/Cloud_Datenschutz-DSGVO.png","type":"image\/png"}],"author":"Alexander H\u00fcls","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Alexander H\u00fcls","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/","url":"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/","name":"Is it possible to utilize Cloud Services in a GDPR-compliant manner? - Retarus Corporate Blog - US","isPartOf":{"@id":"https:\/\/www.retarus.com\/blog\/us\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/#primaryimage"},"image":{"@id":"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/#primaryimage"},"thumbnailUrl":"https:\/\/www.retarus.com\/blog\/us\/wp-content\/uploads\/sites\/34\/2021\/03\/Cloud_Datenschutz-DSGVO.png","datePublished":"2021-03-23T15:04:48+00:00","dateModified":"2024-05-07T16:54:43+00:00","author":{"@id":"https:\/\/www.retarus.com\/blog\/us\/#\/schema\/person\/5dbabd3b8a406ebd06fe0769cedd6c7a"},"breadcrumb":{"@id":"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/#primaryimage","url":"https:\/\/www.retarus.com\/blog\/us\/wp-content\/uploads\/sites\/34\/2021\/03\/Cloud_Datenschutz-DSGVO.png","contentUrl":"https:\/\/www.retarus.com\/blog\/us\/wp-content\/uploads\/sites\/34\/2021\/03\/Cloud_Datenschutz-DSGVO.png","width":1280,"height":721},{"@type":"BreadcrumbList","@id":"https:\/\/www.retarus.com\/blog\/us\/is-it-possible-to-utilize-cloud-services-in-a-gdpr-compliant-manner\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.retarus.com\/blog\/us\/"},{"@type":"ListItem","position":2,"name":"Is it possible to utilize Cloud Services in a GDPR-compliant manner?"}]},{"@type":"WebSite","@id":"https:\/\/www.retarus.com\/blog\/us\/#website","url":"https:\/\/www.retarus.com\/blog\/us\/","name":"Retarus Corporate Blog - US","description":"Always up to date","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.retarus.com\/blog\/us\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.retarus.com\/blog\/us\/#\/schema\/person\/5dbabd3b8a406ebd06fe0769cedd6c7a","name":"Alexander H\u00fcls","url":"https:\/\/www.retarus.com\/blog\/us\/author\/ahuels\/"}]}},"_links":{"self":[{"href":"https:\/\/www.retarus.com\/blog\/us\/wp-json\/wp\/v2\/posts\/5579","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.retarus.com\/blog\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.retarus.com\/blog\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/us\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/us\/wp-json\/wp\/v2\/comments?post=5579"}],"version-history":[{"count":2,"href":"https:\/\/www.retarus.com\/blog\/us\/wp-json\/wp\/v2\/posts\/5579\/revisions"}],"predecessor-version":[{"id":6043,"href":"https:\/\/www.retarus.com\/blog\/us\/wp-json\/wp\/v2\/posts\/5579\/revisions\/6043"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/us\/wp-json\/wp\/v2\/media\/5581"}],"wp:attachment":[{"href":"https:\/\/www.retarus.com\/blog\/us\/wp-json\/wp\/v2\/media?parent=5579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/us\/wp-json\/wp\/v2\/categories?post=5579"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/us\/wp-json\/wp\/v2\/tags?post=5579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}