ABSTRACT
In this paper, we analyse the results of a detailed survey of the privacy policies, and data protection terms more broadly, of 40 major cloud computing services, including Amazon Web Services, Google Cloud, and Microsoft Azure. We review terms relating to controller and processor designations; purposes and legal bases for data processing; individuals’ rights of access, rectification, and erasure of personal data; the right to data portability; security and data breach notification; monitoring; transfers of personal data outside of the EEA; and appointment of a Data Protection Officer. Where relevant, we compare the results to those of previous surveys conducted in 2010, 2013, and 2015 to show how cloud privacy policies have developed over time, including changes that appear to have been made in response to the General Data Protection Regulation.
Turton, Felicity and Kamarinou, Dimitra and Michels, Johan David and Millard, Christopher, Privacy in the Clouds, Revisited: An Analysis of the Privacy Policies of 40 Cloud Computing Services (April 9, 2021). Queen Mary Law Research Paper No 354/2021.
First posted 2021-05-20 08:45:35
Leave a Reply