Microsoft to Europe: We're setting an EU 'data boundary' from 2023
(2022/12/15)
- Reference: 1671118025
- News link: https://www.theregister.co.uk/2022/12/15/microsoft_launches_eu_data_boundary/
- Source link:
Microsoft has confirmed that from the beginning of 2023, it will introduce an EU Data Boundary solution designed to help customers in the European Union and the European Free Trade Association comply with legislation including the General Data Protection Regulation (GDPR).
From January 1st, the Redmond tech monster promises to give customers the ability to store and process their customer data within the EU Data Boundary for Microsoft 365, Azure, Power Platform and Dynamics 365 services.
The move expands on existing local storage and processing commitments, "greatly reducing data flows out of Europe and building on our industry-leading data residency solutions," said Julie Brill, corporate VP and chief privacy officer, and Erin Chapple, corporate VP, in a [1]blog posted today .
[2]
Microsoft said it would expand the EU Data Boundary to include the storage and processing of additional categories of personal data, including data provided when receiving technical support, in future phases. Although it mentioned no specific EU laws, Microsoft promised the solution would help customers meet "regulatory requirements and industry-specific standards."
[3]
[4]
Within the European Union, global businesses have had to comply with legislation such as the General Data Protection Regulation (GDPR) introduced in 2018, which protects user privacy and places restrictions on organisations that govern how they can move data across international boundaries.
While the UK currently enjoys an "adequacy" ruling allowing data sharing with the EU, the US position is more doubtful, since the so-called [5]Schrems II ruling [6]struck down the Privacy Shield arrangement .
[7]
Although EU has [8]issued a draft decision agreeing that measures taken by the United States ensure sufficient protection for personal data to be transferred from the region to US companies, Microsoft may be cognisant of the likelihood the agreement will be subject to a legal challenge.
[9]Max Schrems , the campaigner whose work led to the Schrems II ruling, has already indicated the decision does not meet the criteria set out by the Court of Justice of the European Union in that case.
[10]Privacy Shield binned after EU court rules transatlantic data protection arrangements 'inadequate'
[11]EU takes another step towards US data-sharing agreement
[12]AWS, Microsoft, Google own 72% of Euro customer cloud spending
[13]Using personal info for ads without consent puts Meta in EU's gunsights
US cloud titans AWS, Microsoft, and Google made up in 72 percent of Europe's enterprise spending on cloud in Q2, [14]according to figures from Synergy Research Group .
AWS [15]says it offers customers the ability to store their data in any one or more of its European regions, including EU regions in France, Germany, Ireland, Italy, Spain, and Sweden. In October, [16]Google Cloud promoted partnerships with EU providers including T-Systems in Germany, S3NS in France, Minsait in Spain, and Telecom Italia in Italy in an effort to assure customers' regulatory compliance in terms of data movement. ®
Get our [17]Tech Resources
[1] https://blogs.microsoft.com/eupolicy/2022/12/15/eu-data-boundary-cloud-rollout/#:~:text=Today%2C%20we%20are%20announcing%20that,Free%20Trade%20Association%20(EFTA).
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y5tSr8dnn1jctD292Dts-AAAAIE&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y5tSr8dnn1jctD292Dts-AAAAIE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y5tSr8dnn1jctD292Dts-AAAAIE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.theregister.com/Tag/Schrems%20I%20and%20Schrems%20II/
[6] https://www.theregister.com/2020/07/16/privacy_shield_struck_down/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y5tSr8dnn1jctD292Dts-AAAAIE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2022/12/14/eu_us_data_sharing_agreement/
[9] https://www.theregister.com/Tag/Max%20Schrems/
[10] https://www.theregister.com/2020/07/16/privacy_shield_struck_down/
[11] https://www.theregister.com/2022/12/14/eu_us_data_sharing_agreement/
[12] https://www.theregister.com/2022/09/29/aws_microsoft_google_european_cloud_spend/
[13] https://www.theregister.com/2022/12/08/meta_eu_personal_info/
[14] https://www.theregister.com/2022/09/29/aws_microsoft_google_european_cloud_spend/
[15] https://aws.amazon.com/compliance/eu-data-protection/
[16] https://cloud.google.com/blog/products/identity-security/advancing-digital-sovereignty-on-europes-terms
[17] https://whitepapers.theregister.com/
From January 1st, the Redmond tech monster promises to give customers the ability to store and process their customer data within the EU Data Boundary for Microsoft 365, Azure, Power Platform and Dynamics 365 services.
The move expands on existing local storage and processing commitments, "greatly reducing data flows out of Europe and building on our industry-leading data residency solutions," said Julie Brill, corporate VP and chief privacy officer, and Erin Chapple, corporate VP, in a [1]blog posted today .
[2]
Microsoft said it would expand the EU Data Boundary to include the storage and processing of additional categories of personal data, including data provided when receiving technical support, in future phases. Although it mentioned no specific EU laws, Microsoft promised the solution would help customers meet "regulatory requirements and industry-specific standards."
[3]
[4]
Within the European Union, global businesses have had to comply with legislation such as the General Data Protection Regulation (GDPR) introduced in 2018, which protects user privacy and places restrictions on organisations that govern how they can move data across international boundaries.
While the UK currently enjoys an "adequacy" ruling allowing data sharing with the EU, the US position is more doubtful, since the so-called [5]Schrems II ruling [6]struck down the Privacy Shield arrangement .
[7]
Although EU has [8]issued a draft decision agreeing that measures taken by the United States ensure sufficient protection for personal data to be transferred from the region to US companies, Microsoft may be cognisant of the likelihood the agreement will be subject to a legal challenge.
[9]Max Schrems , the campaigner whose work led to the Schrems II ruling, has already indicated the decision does not meet the criteria set out by the Court of Justice of the European Union in that case.
[10]Privacy Shield binned after EU court rules transatlantic data protection arrangements 'inadequate'
[11]EU takes another step towards US data-sharing agreement
[12]AWS, Microsoft, Google own 72% of Euro customer cloud spending
[13]Using personal info for ads without consent puts Meta in EU's gunsights
US cloud titans AWS, Microsoft, and Google made up in 72 percent of Europe's enterprise spending on cloud in Q2, [14]according to figures from Synergy Research Group .
AWS [15]says it offers customers the ability to store their data in any one or more of its European regions, including EU regions in France, Germany, Ireland, Italy, Spain, and Sweden. In October, [16]Google Cloud promoted partnerships with EU providers including T-Systems in Germany, S3NS in France, Minsait in Spain, and Telecom Italia in Italy in an effort to assure customers' regulatory compliance in terms of data movement. ®
Get our [17]Tech Resources
[1] https://blogs.microsoft.com/eupolicy/2022/12/15/eu-data-boundary-cloud-rollout/#:~:text=Today%2C%20we%20are%20announcing%20that,Free%20Trade%20Association%20(EFTA).
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y5tSr8dnn1jctD292Dts-AAAAIE&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y5tSr8dnn1jctD292Dts-AAAAIE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y5tSr8dnn1jctD292Dts-AAAAIE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.theregister.com/Tag/Schrems%20I%20and%20Schrems%20II/
[6] https://www.theregister.com/2020/07/16/privacy_shield_struck_down/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y5tSr8dnn1jctD292Dts-AAAAIE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2022/12/14/eu_us_data_sharing_agreement/
[9] https://www.theregister.com/Tag/Max%20Schrems/
[10] https://www.theregister.com/2020/07/16/privacy_shield_struck_down/
[11] https://www.theregister.com/2022/12/14/eu_us_data_sharing_agreement/
[12] https://www.theregister.com/2022/09/29/aws_microsoft_google_european_cloud_spend/
[13] https://www.theregister.com/2022/12/08/meta_eu_personal_info/
[14] https://www.theregister.com/2022/09/29/aws_microsoft_google_european_cloud_spend/
[15] https://aws.amazon.com/compliance/eu-data-protection/
[16] https://cloud.google.com/blog/products/identity-security/advancing-digital-sovereignty-on-europes-terms
[17] https://whitepapers.theregister.com/
The data boundary will be breached
alain williams
Biden says that data will still be got using the Cloud Act if it is "necessary and proportionate to protect national security". So: anything at all really will become a matter of national security.
Re: The data boundary will be breached
localzuk
And ultimately, unless the US govt changes its laws, then GDPR is incompatible with using US companies for any data processing.
The only way round it that I can see is local licensing - companies in the EU, not owned by US companies or people, license the technology and run it here, paying MS a licensing fee.
This is all very well, but where is the UK
data boundary ?
And if you think people aren't already choosing not to do business with the UK because they aren't 100% convinced that the current crop of Brexit boneheads know anything, then have I got a bridge for you.