The following Information Law guidance note provides comprehensive and up to date legal information covering:
This Practice Note on data protection and business-to-business cloud computing, including software as a service (SaaS), platform as a service (PaaS) and infrastructure as a service (IaaS) solutions, provides guidance on:
the implications of Brexit for the subject matter of this Practice Note
Cloud computing and the GDPR
General obligations on customers (as controllers)
Specific obligations on customers (as controllers) under Article 28
International personal data transfers
Obligations on suppliers (as processors)
Standard processing clauses, approved codes of conduct and certification schemes
Sanctions and enforcement
Considerations for cloud customers
Considerations for cloud suppliers
Negotiating cloud contracts
Other information laws
Overseas data protection laws
Conflict of laws and the US CLOUD Act
This Practice Note covers the law under the General Data Protection Regulation (the GDPR) regime as it applies in the UK.
As further explained below, in the context of cloud computing, the customer will generally be a controller and the supplier a processor. Unless stated otherwise, references to the supplier or to the customer in this Practice Note will be to the supplier acting as a processor and the customer acting as a controller under the GDPR.
For a comprehensive introduction to the GDPR, collating key practical guidance, see: GDPR toolkit.
For further guidance on cloud computing, see Practice Notes: Cloud computing—introduction and Cloud computing—key legal issues.
On 31 January 2020,
**excludes LexisPSL Practice Compliance, Practice Management and Risk and Compliance. To discuss trialling these LexisPSL services please email customer service via our online form. Free trials are only available to individuals based in the UK. We may terminate this trial at any time or decide not to give a trial, for any reason. Trial includes one question to LexisAsk during the length of the trial.
To view the latest version of this document and thousands of others like it, sign-in to LexisPSL or register for a free trial.
Existing user? Sign-in
Take a free trial
Take a free trial
0330 161 1234