What is "CISPE"? CISPE is an association of cloud infrastructure providers operating in Europe. The current members and their declared services are listed in the public register at codeofconduct.cloud.
What is the data protection Code of Conduct? The CISPE Data Protection Code of Conduct is a set of rules for cloud infrastructure providers, approved under Article 40 of the GDPR. It describes how a provider processes customers' personal data and what guarantees it gives.
What is the purpose of the Code of Conduct? The CISPE Code of Conduct tells customers whether the cloud infrastructure services on offer are suitable for processing personal data. Services that meet the criteria carry a Trust Mark, which cloud providers can use to show their customers that their services meet the requirements of the Code. Organisations that meet the criteria are published on the CISPE website. Under the CISPE Code of Conduct, customers of cloud services can be sure that cloud infrastructure providers do not process their personal data for their own purposes or for sale to third parties, for example for data profiling, marketing or similar activities. Providers certified under the CISPE Code must also offer their customers the option to process and store their data exclusively within the EU or EEA. This means that industrial customers and software vendors can control where their data is processed and physically stored, knowing that their provider will not reuse or resell it.