Cloud Security Alliance Presents Privacy Level Agreement Initiative
Hong Kong's ASTRI partners with the Cloud Security Alliance (CSA), as the CSA forms a Privacy Level Agreement group in the EU.The Cloud Security Alliance (CSA), a nonprofit organization dedicated to promoting the use of best practices for providing security assurance within cloud computing, and to provide education on the uses of cloud computing to help secure all other forms of computing, launched a Privacy Level Agreement (PLA) Working Group in the EU and a partnership with the Hong Kong Applied Science and Technology Research Institute (ASTRI) to advance cloud computing security and build capabilities that will accelerate the development of the cloud ecosystem in Hong Kong. The PLA Working Group includes independent privacy and data protection subject matter experts, privacy officers and representatives from data protection authorities. The group will work to define compliance baselines for data protection legislation and establish best practices for defining a standard for communicating the level of privacy measures such as data protection and data security that it agrees to maintain while hosting third-party data.
"The goal of this Working Group is to create a structure for privacy disclosures that will provide both cloud providers and their customers with an objective and comparable way by which to communicate their personal data handling practices," Daniele Catteddu, managing director, EMEA (Europe Middle East and Africa) for CSA, said in prepared remarks. "This is especially problematic in the EU, which maintains the most stringent regulations on privacy as compared to the rest of the world. The PLA Working Group represents an important first step in establishing global standards for communicating the measures taken for protecting personal data in the cloud."