IBM Cloud 2015 - GDPR 欧盟数据保护

分类

L2

描述

GDPR

DPA 协议

客户询问SL官方对GDPR的 理解和文档，IDC供应商有 DRA协议文档， 可以下载

You can download a copy of IBM Data Processing Addendum at

https://www-05.ibm.com/support/operations/zz/en/dpa.html

Doc

IBM网站关于GDPR的阐述和给客户的ppt

GDPR www.ibm.com/gdpr

Cloud GDPR www.ibm.com/cloud/info/gdpr

ppt to customer 链接: https://pan.baidu.com/s/1w0TOK2r6zTpt-XRmdzI-kA 密码: n4h8

Links and information available to be used with customers

Trust the security and privacy of IBM Cloud: https://www.ibm.com/cloud-computing/learn-more/why-ibm-cloud/security/

Bluemix Security and Compliance - Your data is safe in the cloud: https://www.ibm.com/cloud-computing/bluemix/trust-security-privacy

IBM Cloud Services Data Security & Privacy Principles published here (you can attach this document to a contract)

Data Hosting and Processing Locations - Lists the hosting locations and processing locations for every IBM offering. All listed locations are covered by our EUMCs. Publicly posted here: https://ibm.biz/BdHTNj

Bluemix Security Documentation: https://console.bluemix.net/docs/security/index.html#security   

IBM Cloud Architecture Center - Securing workloads on IBM Cloud: https://developer.ibm.com/cloudarchitecture/docs/security/securing-workloads-ibm-cloud/

个人理解

个人理解：https://www.eugdpr.org/

GDPR 规定了 数据，用户，数据拥有者(例如电商服务商)，数据处理者（例如外包大数据分析商）。

IDC都不是数据的拥有者和使用者，不接触数据。 IDC一般提供DPA文档来应对客户关于GDPR咨询。

IDC已经获得相关认证机房类 ISO27001, 安全运维 SOC2, 银行支付 PCI, 保险和健康 HIPPA 等，都大于GDPR的要求。

但是没有针对GDPA 特别描述，为此提供DPA文档来回应这个政策。