Safer cloud computing with new data protection law
Although it carries inevitable advantages, the spread of cloud computing raises several legal concerns in Hungary. Experts hope that new legislation on data security will bring solution to most of them.
One of the most sensitive issues in cloud computing is data security. With the introduction of a new act on data protection, million forints fines could be imposed in certain cases, said law office Horváth és Társai DLA Piper.
Hungary’s current data protection law, compared to EU legislations, is quite strict.
“Just a simple example: if a company wants to store its employees’ data in cloud computing sytem, and the cloud provider happens to be located in abroad, Hungarian legislation requires the consent of all the given employees. It can be a huge administrative burden on a company employing several thousands of people,” explained Zoltán Kozma, legal expert of DLA Piper.
The legal environment can sometimes be deceiving, the law firm said. For example, when a cloud provider and its client are based in different countries, the law remains agnostic to which country’s jurisdiction should be taken into consideration.
It is also unclear what a cloud service provider should be from a legal point of view: whether it is data manager or data processor, as different rules apply to the two.
“A data manager can forward data for a data processor within the European Economic Area without permission by the user, but transferring it outside the EEA requires such permission,” Kozma said.
Contracts with cloud providers are another touchy issue, the DLA Piper analysis pointed out. Cloud providers typically use standard contacts which allow little room for negotiation and customizing. Companies using services by cloud providers should be increasingly aware of analyzing possible risks before signing such a standardized contract, the law office warned. “One should clarify whom to blame in case of losing data, who is obliged to recover them, and what compensation a client is entitled to in such cases,” Kozma noted.
Companies should also pay attention to conditions on which a contract can be terminated, and should find out in advance what happens to their data in case of termination, he added.
Legal challenges connected with cloud computing has been in the focus in EU law making process: a statement issued by the European Commission at the end of last year initiated the review of EU’s data protection regulations.
“The situation is controversial in Hungary,” said Kozma. “While regulations on data protection are, in general, stricter than EU regulations, the data protection commissioner does not have strong licenses for sanctioning possible rule-breaking behavior.” The paradox situation has forced several companies to find legal loopholes in their data managing processes, he added.
The recently submitted amendments to Hungary’s data protection law, however, might bring a solution, Kozma said.
The legislation would provide stronger sanctioning licenses for a new authority on national data protection and freedom of information, yet to be set up. According to the draft bill, the authority might fine companies reluctant to oblige the legislation with fines up to several millions of forints.
“For the time being, it is unclear how the new authority would translate paragraphs on data transmission in the new law, but we hope that it will positively move forward the spread of cloud computing in Hungary and will successfully deal with problematic legal issues,” the DLA expert said.
The Hungarian government submitted to the Parliament the new legislation on data protection early this month.
SUPPORT THE BUDAPEST BUSINESS JOURNAL
Producing journalism that is worthy of the name is a costly business. For 27 years, the publishers, editors and reporters of the Budapest Business Journal have striven to bring you business news that works, information that you can trust, that is factual, accurate and presented without fear or favor.
Newspaper organizations across the globe have struggled to find a business model that allows them to continue to excel, without compromising their ability to perform. Most recently, some have experimented with the idea of involving their most important stakeholders, their readers.
We would like to offer that same opportunity to our readers. We would like to invite you to help us deliver the quality business journalism you require. Hit our Support the BBJ button and you can choose the how much and how often you send us your contributions.