CISPE

CISPE (Cloud Infrastructure Services Providers in Europe) is a coalition of cloud computing leaders serving millions of European customers. CISPE has developed in collaboration with the French Data Protection Authority (CNIL) the CISPE Data Protection Code of Conduct (CISPE Code), the first pan-European data protection code of conduct focused on cloud infrastructure services. The CISPE code is endorsed by the European Data Protection Board approved by CNIL.

The CISPE Code helps customers ensure that their cloud infrastructure service provider offers appropriate operational assurances to demonstrate compliance with the General Data Protection Regulation (GDPR) and protect customer data.

The CISPE Code also goes beyond GDPR compliance by requiring cloud infrastructure service providers to give customers the choice to select services that store and process customer data – that is, any personal data processed on behalf of the customer using the cloud infrastructure service - entirely within the European Economic Area. Cloud infrastructure service providers must also commit that they will not access or use any customer data, except as necessary to provide and maintain the declared services, nor for their own purposes, including for data mining, profiling or direct marketing.