The term cloud computing was popularized in 2006 by Google CEO Eric Schmidt. We have been dealing with cloud computing issues since 2004, as we were already advising on business continuity, information security and data protection as legal aspects of outsourcing. Our consulting to the European Commission and the Article 29 Working Party (predecessor of the European Data Protection Board) has influenced the shape of cloud computing regulations in Europe.
What we offer
- Regulatory implementation of cloud services – verification and development of a report on compliance with data protection law, cybersecurity regulations, sector regulations (e.g., financial sector, critical infrastructure) of contracts and architecture of cloud services, support of communication between service recipient and service provider, especially foreign, obtaining opinions required by some regulations as to foreign law,
- Detailed assessment of public service compliance.
- Editing cloud service regulations for cloud providers.
- Design and negotiate private cloud contracts and implementations, especially SaaS.
Selected experience
- Supported hundreds of cloud service implementations in banking, critical infrastructure, and other industries (MS 365, identity verification services, cybersecurity, e-signature, marketing etc), including regulatory and operational security assessment and evaluation of data transfers.
- Evaluated video conferencing (Zoom, Teams, Webex) and email (MS Exchange, Gmail, iCloud Mail) services for the Polish Bar of Attorneys-at-law, published as part of the Book of Security of Electronic Communications of Attorneys-at-law, Part I and Part II.
- SaaS banking system implementation project where we developed a comprehensive implementation contract for a central banking IT system for a national bank.
- Developed terms of service in SaaS model for a satellite imagery provider.
- Advised the European Commission on the development of cloud computing contract standards and reference SLAs, and advising the Article 29 Working Party (predecessor to the European Data Protection Board) on data transfer rules outside the EU.
- Developed an analysis of the application of the cloud computing model in public administration.
Reputation
- We advised the European Commission on the development of cloud computing contract standards and reference SLAs, and also advised the Article 29 Working Party (the predecessor to the European Data Protection Board) on rules for data transfers outside the EU-contributing to Articles 20, 28.9, and 82.1 of the GDPR
- We contributed to The Attorneys-at-Law Electronic Communication Security Book, published by the Polish Bar of Attorneys-at-Law in 2022
- We lectured on cloud computing law in postgraduate courses at the Warsaw School of Economics for many years
- Cloud Computing in the Polish Banking Sector: Regulations and Standards (2011) edited by M. Gawroński, is the first acclaimed cross-sectional analysis of the legal aspects of cloud computing in Poland
- We have authored over twenty publications on the legal aspects of cloud computing