We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

European Commission cloud data rules 'may drive away business'

Professor says rules will not even deliver proper data protection

The European Commission's draft changes to the existing EU Directive on Data Protection are likely to "drive business away from Europe" and not fully work in a cloud environment, according to cloud legal experts.

The Commission says the proposals will "make it easier to operate a cloud across the EU, with a single point of contact", as well as to "operate outside the EU, with simplified and more consistent rules".

But the Cloud Legal Project at Queen Mary, University of London disagrees. Professor Christopher Millard, leader of the Project, said: "Unless further changes are made to clarify and harmonise data protection rules across the EU, the draft regulation may drive business away from Europe, and still fail to deliver effective protection for individuals."

He said "uncertainty" will persist as to whether particular non-European cloud providers and cloud users are regulated in the EU, and, if so, which laws apply to them. "This may discourage the development of EU data centres and the use of EU cloud services generally," said Millard.

Millard added that the draft regulation fails to close a loophole which may undermine protection for some EU residents when they use services provided by non-EU cloud providers.

Millard said privacy and data security were now more important than the location of the data storage infrastructure.

"In our recommendations we proposed a more radical solution, namely abolishing the restriction on data export, focusing instead on appropriate measures to ensure security, transparency and accountability, regardless of the geographical location of personal data," Millard said.

He said the draft regulation will impose "substantial" new compliance obligations on businesses, as well as greatly expanding the roles of the European Commission and national regulators, all of whom will need extra resources to police the new regime.

The European Commission recently announced a first £8 million tranche of funding for its European Cloud Computing Strategy.

IDG UK Sites

Windows 10 release date, price, features UK: Staggered release with PCs coming first this summer -...

IDG UK Sites

In defence of BlackBerrys

IDG UK Sites

Why we should reserve judgement on Apple ditching Helvetica in OS X/iOS for the Apple Watch's San...

IDG UK Sites

MacBook Pro 15in preview: better battery life, faster storage and a new discrete graphics chip may...