EU Cloud CoC

The EU Cloud Code of Conduct is a transnational Code of Conduct pursuant Article 40 of the European General Data Protection Regulation (GDPR). The code defines clear requirements for cloud service providers (CSPs) to implement Article 28 GDPR and all its related articles, which covers the processing activities of every type of personal data. Encompassing all cloud service layers (IaaS, PaaS, and SaaS), the code allows cloud service providers to demonstrate GDPR compliance in their role as processors, which is overseen by an accredited monitoring body, as required by Article 41 GDPR. SCOPE Europe is the independent monitoring body that oversees the assessment on a yearly basis. The primary objective of the EU Cloud CoC is to harmonize the implementation of GDPR requirements across the cloud industry. So far, the EU Cloud CoC already represents the vast majority of the European cloud market, establishing itself as a benchmark for transparent services.