European Union: French DPA submits CISPE Code of Conduct for IaaS

The Cloud Infrastructure Service Provider Europe (CISPE) Code of Conduct submitted by the French Data Protection Authority for approval addresses cloud infrastructure service providers and is specifically applicable for IaaS cloud offerings. The sector-specific Code of Conduct has pan-European effect and invokes various requirements for IaaS in order for them to be compliant with the GDPR. The code consists of remarks concerning scope definitions, data protection requirements, transparency duties, adherence, and governance obligations.