Data Protection in the Light of Third Country Transfer, Hyperscalers and DORA
summary
Argues there are no ready European replacements for US hyperscalers and Europe faces political pressure over sovereignty while US-EU transfer rules force companies to add measures and reassess contracts within months; ISO 27001 vs ISO 27701 creates duplicated work with 47 changes between them and 27701 still lacking full certification; hyperscalers supply extensive automation — e.g. 423 tools with 116 included in one tenant and 32% of security requirements done by Azure; DORA extends IT supervision to roughly 20 types of companies.
AI-written summary · about
chapters (10)
- 0:00Data protection challenges
- 1:46Politics technology factors
- 5:25EU-US data transfer uncertainties
- 7:56Sovereign cloud alternatives risks
- 9:22ISO 27701 limits for GDPR
- 13:42ISO 27001 duplication issues
- 15:30Data protection management approach
- 16:57Hyperscalers and ISMS compliance
- 20:56DORA requirements and ISMS
- 22:20Summary and resources
related talks
08h 05mThe European Sovereign Cloud Day
40mDigital sovereignty - shaping regulatory responses to technological dominance
01h 16mHow to Reconcile Data Protection, Resilience and Cybersecurity Goals in Today's ..
27mKeynote - Sovereign Cloud Definitions, Drivers, and Solutions
58mGlobal Data Flows and Perspective – Keynote & Panel
45mData Privacy Legislation and the Impact on SRE
47mNew Developments in the Field of Data Protection For a More Successful Data Economy
01h 59mDeep Dive Workshop – Data Security and Data Protection