Cloud Legal Guidelines: Technical Implementation of Legal Requirements, Exploitation of the Toolkit in Use Cases and Component Licenses

TY - RPRT

T1 - Cloud Legal Guidelines

T2 - Technical Implementation of Legal Requirements, Exploitation of the Toolkit in Use Cases and Component Licenses

AU - Chulani, Ilknur

AU - Corrales Compagnucci, Marcelo

AU - Ejarque, Jorge

AU - Ferrer, Ana Juan

AU - Forgó, Nikolaus

AU - Kirkham, Tomas

AU - Kousiouris, George

AU - Nair, Srijith

AU - Nwankwo, Iheanyi

AU - Prieto, Juan Luis

AU - Stoklas, Jonathan

PY - 2012

Y1 - 2012

N2 - Our aim in this report is twofold. On the one hand, it is to ensure that no legal barriers are going to hinder the way of accomplishment of the OPTIMIS project goals. On the other hand, it gives research driven guidance about legal issues of cloud computing in OPTIMIS (and in similar projects). Specifically, this report shows how some of the legal requirements identified in the project have been technically implemented. It also gives guidance about legal issues arising from the exploitation of the toolkit in various use cases involving cloud bursting, the uses of the programming model to construct a genomic application and cloud brokerage. A very topical issue that usually arises in cloud environment is concerning data transfer to third countries. As this will no less be the case when the toolkit is in use, either by the service provider or infrastructure provider, we have reviewed the avenues for making such international personal data transfer legally compliant with the Data Protection Directive. For internal purposes, licensing issues within the components were equally x-rayed. In the end, a series of recommendations to political and legal stakeholders, among them, the European Commission about regulating data protection and data security in cloud transformations are given.While our main focus, following the Description of Work (DoW), has been on data protection and data security requirements in OPTIMIS and ownership of information and domestic green legislation, we follow a high level approach by assessing the observed legal problems at European level in order to ensure compliance across the various jurisdictions of the Member States. We offer further analysis on the national situation where this is necessary for a judgement of the legality of a service.

AB - Our aim in this report is twofold. On the one hand, it is to ensure that no legal barriers are going to hinder the way of accomplishment of the OPTIMIS project goals. On the other hand, it gives research driven guidance about legal issues of cloud computing in OPTIMIS (and in similar projects). Specifically, this report shows how some of the legal requirements identified in the project have been technically implemented. It also gives guidance about legal issues arising from the exploitation of the toolkit in various use cases involving cloud bursting, the uses of the programming model to construct a genomic application and cloud brokerage. A very topical issue that usually arises in cloud environment is concerning data transfer to third countries. As this will no less be the case when the toolkit is in use, either by the service provider or infrastructure provider, we have reviewed the avenues for making such international personal data transfer legally compliant with the Data Protection Directive. For internal purposes, licensing issues within the components were equally x-rayed. In the end, a series of recommendations to political and legal stakeholders, among them, the European Commission about regulating data protection and data security in cloud transformations are given.While our main focus, following the Description of Work (DoW), has been on data protection and data security requirements in OPTIMIS and ownership of information and domestic green legislation, we follow a high level approach by assessing the observed legal problems at European level in order to ensure compliance across the various jurisdictions of the Member States. We offer further analysis on the national situation where this is necessary for a judgement of the legality of a service.

M3 - Report

BT - Cloud Legal Guidelines

PB - OPTIMIS project consortium - EU Funded Project within the Seventh Framework Program

ER -