GDPR – Noise

Dutch government successfully completes privacy audit of AWS data protection practices

Gokhan Akyuz — Wed, 16 Jul 2025 16:02:46 +0000

We are pleased to announce the successful completion of a comprehensive privacy audit conducted by Ernst & Young (EY) Netherlands on behalf of the Netherlands Ministry of Justice and Security. This customer audit examined the data protection measures implemented by AWS for a limited number of internal AWS operations when AWS is processing personal data […]

CISPE Data Protection Code of Conduct Public Register now certifies 122 AWS services as adherent

Gokhan Akyuz — Mon, 23 Jun 2025 18:55:18 +0000

We continue to expand the scope of our assurance programs at Amazon Web Services (AWS) and are pleased to announce that 122 services are now certified as adherent to the Cloud Infrastructure Services Providers in Europe (CISPE) Data Protection Code of Conduct. This alignment with the CISPE requirements demonstrates our ongoing commitment to adhere to the heightened expectations for […]

CISPE Data Protection Code of Conduct Public Register now has 113 compliant AWS services

Gokhan Akyuz — Thu, 20 Jun 2024 13:19:50 +0000

We continue to expand the scope of our assurance programs at Amazon Web Services (AWS) and are pleased to announce that 113 services are now certified as compliant with the Cloud Infrastructure Services Providers in Europe (CISPE) Data Protection Code of Conduct. This alignment with the CISPE requirements demonstrates our ongoing commitment to adhere to the heightened expectations for […]

Dan Solove on Privacy Regulation

Bruce Schneier — Wed, 24 Apr 2024 11:05:29 +0000

Law professor Dan Solove has a new article on privacy regulation. In his email to me, he writes: “I’ve been pondering privacy consent for more than a decade, and I think I finally made a breakthrough with this article.” His mini-abstract:

In this Article I argue that most of the time, privacy consent is fictitious. Instead of futile efforts to try to turn privacy consent from fiction to fact, the better approach is to lean into the fictions. The law can’t stop privacy consent from being a fairy tale, but the law can ensure that the story ends well. I argue that privacy consent should confer less legitimacy and power and that it be backstopped by a set of duties on organizations that process personal data based on consent...

NIS2, DORA, CER and GDPR: A Comparative Overview of Crucial EU Compliance Directives and Regulations

Editor — Tue, 26 Mar 2024 13:16:15 +0000

Dive into our detailed guide comparing DORA, GDPR, NIS2 and CER directives and regulations, highlighting key requirements, compliance strategies and intersections between these critical EU legal acts for enhanced operational resilience and data protection.

Understanding GDPR: A Definitive Guide on Key Requirements and Compliance

Editor — Sun, 24 Mar 2024 00:33:24 +0000

Unveil the fundamentals of GDPR with our in-depth guide. Explore an inclusive list of all key requirements under the GDPR to ensure your organization's full compliance and data protection.

Build a pseudonymization service on AWS to protect sensitive data: Part 2

Edvin Hallvaxhiu — Wed, 06 Mar 2024 16:34:22 +0000

Part 1 of this two-part series described how to build a pseudonymization service that converts plain text data attributes into a pseudonym or vice versa. A centralized pseudonymization service provides a unique and universally recognized architecture for generating pseudonyms. Consequently, an organization can achieve a standard process to handle sensitive data across all platforms. Additionally, […]

Reflecting on the GDPR to celebrate Privacy Day 2024

Emily Hancock http://blog.cloudflare.com/author/emily-hancock/ — Fri, 26 Jan 2024 12:22:06 +0000

On Privacy Day 2024, we answer the EU Commission’s call for reflection on how the GDPR has been functioning by pointing out two ways in which the GDPR has been applied that actually may harm people’s privacy

CISPE Code of Conduct Public Register now has 107 compliant AWS services

Gokhan Akyuz — Mon, 19 Jun 2023 15:16:38 +0000

We continue to expand the scope of our assurance programs at Amazon Web Services (AWS) and are pleased to announce that 107 services are now certified as compliant with the Cloud Infrastructure Services Providers in Europe (CISPE) Data Protection Code of Conduct. This alignment with the CISPE requirements demonstrates our ongoing commitment to adhere to […]

New Global AWS Data Processing Addendum

Chad Woolf — Tue, 11 Apr 2023 19:04:14 +0000

Navigating data protection laws around the world is no simple task. Today, I’m pleased to announce that AWS is expanding the scope of the AWS Data Processing Addendum (Global AWS DPA) so that it applies globally whenever customers use AWS services to process personal data, regardless of which data protection laws apply to that processing. […]

Helping protect personal information in the cloud, all across the world

Rory Malone — Thu, 30 Mar 2023 10:46:56 +0000

Helping protect personal information in the cloud, all across the world

Facebook Fined $276M under GDPR

Bruce Schneier — Wed, 30 Nov 2022 12:00:51 +0000

Facebook—Meta—was just fined $276 million (USD) for a data leak that included full names, birth dates, phone numbers, and location. Meta’s total fine by the Data Protection Commission is over $700 million. Total GDPR fines are over €2...

Build a pseudonymization service on AWS to protect sensitive data, part 1

Rahul Shaurya — Thu, 11 Aug 2022 20:41:56 +0000

According to an article in MIT Sloan Management Review, 9 out of 10 companies believe their industry will be digitally disrupted. In order to fuel the digital disruption, companies are eager to gather as much data as possible. Given the importance of this new asset, lawmakers are keen to protect the privacy of individuals and […]

Cloudflare achieves key cloud computing certifications — and there’s more to come

Rory Malone — Mon, 23 May 2022 06:59:57 +0000

Cloudflare now has a second major international privacy certification, as well as C5 attestation — and we’re not done yet.

New IDC whitepaper released – Trusted Cloud: Overcoming the Tension Between Data Sovereignty and Accelerated Digital Transformation

Marta Taggart — Wed, 27 Apr 2022 21:26:54 +0000

A new International Data Corporation (IDC) whitepaper sponsored by AWS, Trusted Cloud: Overcoming the Tension Between Data Sovereignty and Accelerated Digital Transformation, examines the importance of the cloud in building the future of digital EU organizations. IDC predicts that 70% of CEOs of large European organizations will be incentivized to generate at least 40% of […]

LGPD workbook for AWS customers managing personally identifiable information in Brazil

Rodrigo Fiuza — Mon, 25 Apr 2022 22:25:35 +0000

Portuguese version AWS is pleased to announce the publication of the Brazil General Data Protection Law Workbook. The General Data Protection Law (LGPD) in Brazil was first published on 14 August 2018, and started its applicability on 18 August 2020. Companies that manage personally identifiable information (PII) in Brazil as defined by LGPD will have […]

AWS welcomes new Trans-Atlantic Data Privacy Framework

Michael Punke — Mon, 25 Apr 2022 17:45:40 +0000

Amazon Web Services (AWS) welcomes the new Trans-Atlantic Data Privacy Framework (Data Privacy Framework) that was agreed to, in principle, between the European Union (EU) and the United States (US) last month. This announcement demonstrates the common will between the US and EU to strengthen privacy protections in trans-Atlantic data flows, and will supplement the […]

Enabling data classification for Amazon RDS database with Macie

Bruno Silveira — Tue, 05 Oct 2021 16:59:53 +0000

Customers have been asking us about ways to use Amazon Macie data discovery on their Amazon Relational Database Service (Amazon RDS) instances. This post presents how to do so using AWS Database Migration Service (AWS DMS) to extract data from Amazon RDS, store it on Amazon Simple Storage Service (Amazon S3), and then classify the […]

New Standard Contractual Clauses now part of the AWS GDPR Data Processing Addendum for customers

Stéphane Ducable — Thu, 16 Sep 2021 22:51:05 +0000

Today, we’re happy to announce an update to our online AWS GDPR Data Processing Addendum (AWS GDPR DPA) and our online Service Terms to include the new Standard Contractual Clauses (SCCs) that the European Commission (EC) adopted in June 2021. The EC-approved SCCs give our customers the ability to comply with the General Data Protection […]

How AWS is helping EU customers navigate the new normal for data protection

Stephen Schmidt — Thu, 15 Jul 2021 16:09:33 +0000

Achieving compliance with the European Union’s data protection regulations is critical for hundreds of thousands of Amazon Web Services (AWS) customers. Many of them are subject to the EU’s General Data Protection Regulation (GDPR), which ensures individuals’ fundamental right to privacy and the protection of personal data. In February, we announced strengthened commitments to protect […]