European Union: Privacy

The Data Act introduces mandatory cloud switching provisions to prevent vendor lock-in, requiring service providers to facilitate customer transitions between data processing services without barriers or fees. This analysis examines the obligations imposed on cloud service providers, customer rights under the new framework, and the technical requirements for achieving interoperability across IaaS, PaaS, and SaaS platforms.

The European Data Protection Board and European Data Protection Supervisor have issued their Joint Opinion on the European Commission's proposed Cybersecurity Act 2 and amendments to the NIS 2 Directive. While generally supportive of strengthened cybersecurity measures, the opinion emphasizes the need to balance effective security protocols against fundamental rights to privacy and data protection, offering specific recommendations to ensure compliance with EU data protection law.

La Cour de justice de l'Union européenne établit qu'une plateforme organisant et monétisant des annonces publicitaires peut être tenue responsable des traitements de données personnelles effectués via ces encarts.