The CISPE Code of Conduct (Cloud Infrastructure Services Providers in Europe) has been approved by the European Data Protection Board (EDPB). This was made known by a press release in Aruba, which is among the funding members of CISPE. In the light of the approval, CISPE is the first pan European code, borne in order to standardize the regulation in cloud, in compliance with the GDPR, with the principal aim to permit citizens and European companies to protect their personal data inside the European Economic Area.

The CISPE code defines the best procedures and provides a concrete guideline in order that cloud provider shall raise personal data protection standards and provide transparency to their clients by establishing clearly the role, responsibilities and borders both for providers and clients.

By choosing services declared in compliance with the CISPE code, since today users have the guarantee to access to trustable cloud infrastructures which participate to data processing and storage procedures in compliance with the GDPR. The CISPE code offers companies a recognized reference framework in order to demonstrate the full compliance of its certificated cloud services, by providing concrete examples of what they and their clients are expected to do in order to protect their data according to the GDPR rules.

The CISPE code approbation represents an important step, both for industries and final users, that thanks to transparent rules will protect European citizens of the digital era. Aruba expects a better trust relationship towards services providers: data will be processed and stored in the European Economic Area and provider shall not have the access to client’s data for different purposes from the maintenance or the provision of chosen services.

SOURCE: FEDERPRIVACY