Data Protection Code of Conduct for Cloud Infrastructure Service Providers
- Scope
- Transnational
- Type
- Code for Controllers/Processors subject to GDPR
- Code Owner
- Cloud Infrastructure Service Providers Europe (CISPE)
- Monitoring body
EY CERTIFYPOINT BV (accredited by decision of French DPA of 17/06/2021, n° 2021-76)<br />
Laboratoire national de métrologie et d’essai (LNE) (accredited by decision of French DPA of 23/09/2021, n°2021-112)<br />
Bureau Veritas Italia Spa (accredited by decision of French DPA of 07/10/2021, n°2021-117)
Coordinated Enforcement Action, implementation of the right to erasure by controllers
Go to
Coordinated Enforcement Action, implementation of the right to erasure by controllers
EDPBI:SE:OSS:D:2022:381
EDPBI:SE:OSS:D:2022:381
- CSA
-
-
fi
-
fr
-
de
-
dk
-
nl
-
no
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 15 (Right of access by the data subject)
- Article 16 (Right to rectification)
- Relevant topics
- Outcome
- Reprimand
INTERNATIONAL SOS
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
- Other third parties as part of the Group’s respective regular business activities
Dokument EDPB o koordinovanom rámci presadzovania práva podľa nariadenia 2016/679
Go to
Dokument EDPB o koordinovanom rámci presadzovania práva podľa nariadenia 2016/679
Opinion 02/2022 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the WEBHELP Group
Go to
Opinion 02/2022 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the WEBHELP Group
Cooperation and consistency procedures under the GDPR
Go to Cooperation and consistency procedures under the GDPR
EDPBI:LU:OSS:D:2025:3426
EDPBI:LU:OSS:D:2025:3426
- CSA
-
-
es
-
- Main legal reference
- Article 6 (Lawfulness of processing)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Outcome
- No sanction
Fujikura Automotive Europe Group (FAE Group)
- Type of BCR
- Controller
- Categories of data subjects
- Employees and business contacts
Mercans
- Type of BCR
- Processor
- Categories of data subjects
- Employees
- Other third parties as part of the Group’s regular business activities