Le\u00a0European Data Protection Supervisor (EDPS) vient de rendre ses conclusions et recommandations sur l’utilisation des produits et services Microsoft par les institutions de l’UE et s’inqui\u00e8te notamment de la localisation des donn\u00e9es, des transferts internationaux et du risque de fuite de donn\u00e9es.<\/p>\n
<\/p>\n
<\/p>\n
“EU institutions needed to put in place a comprehensive and compliant controller-processor agreement and documented instructions of the EU institutions to the processors. Their lack of control<\/strong> over which sub-processors Microsoft used and lack of meaningful audit rights<\/strong> also presented significant issues (…) EU institutions faced a number of linked issues concerning data location, international transfers and the risk of unlawful disclosure of data<\/strong>. They were unable to control the location of a large portion of the data processed by Microsoft. Nor did they properly control what was transferred out of the EU\/EEA and how. There was also a lack of proper safeguards to protect data<\/strong> that left the EU\/EEA. EU institutions also had few guarantees at their disposal to defend their privileges and immunities and ensure that Microsoft would only disclose personal data insofar as permitted by EU law (…) The EU institutions had insufficient clarity as to the nature, scope and purposes of the processing<\/strong> and the risks to data subjects to be able to meet their transparency obligations towards data subjects<\/strong>“<\/em><\/p><\/blockquote>\n
<\/p>\n
Rappelons que par l’artifice du Privacy Shield qui est venu palier \u00e0 la non conformit\u00e9 des US au Safe Harbour suite notamment \u00e0 l’affaire Snowden ayant r\u00e9v\u00e9l\u00e9 que les US ont ill\u00e9galement espionn\u00e9 leurs citoyens et ceux du monde entier, y compris leurs dirigeants, avec la complicit\u00e9 des GAFAM (cf. Prism), les US ne sont consid\u00e9r\u00e9s que comme un pays en ad\u00e9quation partielle<\/strong> avec le niveau de protection de donn\u00e9es \u00e9xig\u00e9 au sein de l’UE.<\/p>\n
<\/p>\n
Peut-on encore consid\u00e9rer que les US assurent un niveau de protection ad\u00e9quate ?<\/p>\n
<\/p>\n