government use of cloud computing legal challenges … use of... · government use of cloud...
TRANSCRIPT
![Page 1: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/1.jpg)
Government Use of
Cloud Computing –
Legal Challenges
Liesbeth Hellemans
ICRI/CIR – KU Leuven
IAPP Europe Data Protection Congress
![Page 2: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/2.jpg)
Agenda
2
1. Cloud for Europe project
2. Legal Challenges of Public Sector Cloud
Computing
3. Legal recommendations for Public Sector
Cloud Computing
● Policy-oriented
● In practice
![Page 3: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/3.jpg)
![Page 4: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/4.jpg)
4
Public
sector cloud use
as a collaboration between
public authorities and industry
through pre-commercial
procurement
![Page 5: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/5.jpg)
Cloud for Europe brings together public authorities
and industry to support public sector cloud use.
• Identify obstacles for cloud use in the public sector
• Define services that overcome those obstacles
• Procure research from industry to find innovative
solutions for cloud services
5
Mission
![Page 6: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/6.jpg)
Partners
![Page 7: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/7.jpg)
Legal challenges of Public Sector
Cloud Computing
7
![Page 8: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/8.jpg)
Methodology
• Literature overview (current & future legal framework)
• Due diligence consortium partners
Austria, Belgium, Portugal, Spain, The Netherlands, Norway
Public sector aspects
- Languages
- Public procurement
- Archiving
- Procedural law (criminal and social)
- Medical law
- Bookkeeping/fiscal
- National Defense and State secrets
Legal challenges experienced by consortium partners
8
![Page 9: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/9.jpg)
Categories of challenges
• 2 categories
Common to most cloud services
Public sector specific
• Non-exhaustive
9
![Page 10: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/10.jpg)
Legal challenges common to most
cloud services
Government cloud
Applicable law & jurisdiction
Data Protection
Contractual framework
Liabiility
Data Portability/ Interoperability
Consumer Protection
![Page 11: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/11.jpg)
Public Sector specific legal challenges
Government cloud
Governmental Access
Inaccurate Procurement
legislation
Language requirements
National defense/State
secrets
Fragmented and divering
national legislation
Legislation discouraging cloud transfer
![Page 12: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/12.jpg)
Legal Recommendations for
Public Sector Cloud Computing
12
![Page 13: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/13.jpg)
Policy - oriented
13
![Page 14: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/14.jpg)
14
Regulatory Review, clarify and harmonize legislation in public domain related areas to make it
cloud-friendly
Address the issues on governmental environment and intelligence gathering at
European and international level
Issue clear guidelines when uncertainty on the conditions of cloud use
Further harmonize and simplify public procurement rules
Set up a cross-border working group between legal specialists and technological teams
to address encryption standards
Further harmonize and modify data protection legislation to reflect the reality of cloud
computing
Set up a code of conduct for governments as Cloud Consumers, providing for a clear
overview of cloud prerequisites for the public sector, including a set of minimum
contractual standards
Set up a code of conduct to provide guidelines in the relationship Public Authority –
Cloud End User
![Page 15: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/15.jpg)
15
Legislation Execution Cloud Services
Develop Legislation Executing Cloud Services addressing and overcoming legal cloud
barriers by accomplishing certain legal requirements
![Page 16: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/16.jpg)
In practice
16
![Page 17: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/17.jpg)
17
Key attention points
Cross-border cloud: set up a contractual collaboration model between governments (liability !)
Federal/regional cloud: set up a contractual collaboration model between the various
government
Assess the needs and practical way of working (call-offs ?)
Comply with local Public Procurement legislation
Conduct a comprehensive and thorough risk analysis
• Sensitivity of the data?
Indicate and specify the location of the data centres
• Preference Europe
• Transfer outside the EEA?
• Location support services?
Segregate the ‘duties’ sufficiently
• Division of cloud project in various lots
![Page 18: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/18.jpg)
18
Key attention points
Define language requirements
Pay specific attention to the danger of ‘lock-in’
• stand-by Cloud Provider?
Encrypt all data and ensure the encryption key sits with the public authorities
Choose a Cloud Provider that complies with data protection legislation (third party
certification)
Define appropriate minimum SLA’s
Sign an appropriate contractual framework addressing both general contract and data
privacy requirements
• Negotiate
• Unlimited access to the data
• Accountability rules
• Data protection concerns
Address Cloud End User concerns
• Security/confidentiality/IPR/privacy protection – data protection policy
• Redress mechanisms
![Page 19: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/19.jpg)
Source ?
19
![Page 20: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/20.jpg)
• http://www.cloudforeurope.eu/
• Downloads: Legal Implications of Cloud Computing
• Contact: [email protected]
20
![Page 21: Government Use of Cloud Computing Legal Challenges … use of... · Government Use of Cloud Computing ... Cloud for Europe project 2. ... -Procedural law (criminal and social) -Medical](https://reader031.vdocuments.us/reader031/viewer/2022030501/5aad5b027f8b9aa06a8e3236/html5/thumbnails/21.jpg)