In this paper, we analyse the results of a detailed survey of the privacy policies, and data protection terms more broadly, of 40 major cloud computing services, including Amazon Web Services, Google Cloud, and Microsoft Azure. We review terms relating to controller and processor designations;...

Effective protection of individuals under the EU’s General Data Protection Regulation (‘GDPR’) depends mainly on the ‘accountability’ of one or more persons, usually organizations, for ensuring compliance with relevant obligations. As we will see, identifying the ‘controllers’,...

In this paper we explore the rights that individuals have under the EU’s General Data Protection Regulation (‘GDPR’) when their data are processed in clouds, and the remedies that might be available to them if those rights are breached. The complex nature of cloud ecosystems can make it...

There has been on-going discussion regarding the alignment of cloud computing services to a range of European policy objectives. This paper provides an outline of key legal and regulatory aspects arising from recent calls for establishing a Europe-only cloud. After covering the background to...