Data Protection Law Requirements to Cloud Computing Agreements in the European Union (EU).

Session Date and Time: Day 2, March 24, 20:30pm EST (17.30PM West Coast) –(45min)
Keywords: Agreement, Data Protection, European Union, Law, Privacy.
Authors: Thomas Helbing, Law Firm Dr. Helbing.
Abstract: The presentation gives an overview over the requirements of the EU Data Protection Directive for cloud computing services with examples from national laws, in particular Germany. No legal background knowledge is required.

The session shall help compliance managers, privacy and IT security officers, legal counsel, contract manager and sales/procurement teams to understand EU privacy compliance requirements. It is addressed to vendors and customers of cloud services in and outside the EU. An understanding of the basic concept of data protection laws is important for customers when analyzing terms and conditions of cloud providers and for providers when targeting customers in the EU.

Key questions will be: What is the role of the EU Data Protection Directive? What legal requirements must be fulfilled by cloud computing agreements in relation to privacy? Which security measures are required? What special rules apply if cloud providers are located outside the EU?

We will also analyze the new EU standard contractual clauses for data export which the EU Commission has updated in February 2010.

Bio

Dr. Thomas Helbing is an IT and data protection lawyer from Germany, holding a PhD in Telecommunications Law. He practiced from 2004 to 2009 at Lovells LLP, a leading international commercial law firm, in the practice group "Technology, Media and Telecommunications". In 2009 he has founded his own law firm. Thomas advises both medium sized and international companies on IT and data protection matters and has comprehensive experience in drafting and negotiating IT contracts. Visit his website at www.thomashelbing.com