Thema4561
Aus Aifbportal
Abschlussarbeitstyp: Bachelor, Master
Betreuer: Malte Greulich
Forschungsgruppe: Critical Information Infrastructures
Archivierungsnummer: 4561
Abschlussarbeitsstatus: Offen
Beginn:
23. Februar 2020
Abgabe: unbekannt
Motivation
More than one year after the enactment of the European General Data Protection Regulation (GDPR) in mid of 2018, many firms in the European economic area are still uncertain about how to interpret and fulfill its data protection requirements. The consequences of GDPR non-compliance can be severe. Just recently, a German data protection authority ordered a 14.5 million EUR fine because personal customer data was not deleted but stored forever, which is against the data protection principles of the GDPR.
This uncertainty is especially true for cloud providers who store and process vast amount of customer data. The news is full of articles on data leaks at cloud providers making data protection and GDPR compliance a major concern.
Objectives
Identify cloud provider’s challenges with GDPR compliance
Identify and analyze cloud provider’s mitigation strategies to address these challenges
Methods
Conduct expert interviews with cloud providers (semi-structured interviews)
Introductory Literature
- Amazon Web Services (2019). Navigating GDPR Compliance on AWS. https://d1.awsstatic.com/whitepapers/compliance/GDPR_Compliance_on_AWS.pdf
- Tankard (2016). What the GDPR means for businesses. https://doi.org/10.1016/S1353-4858(16)30056-3
- Tolsma (2018). GDPR and the impact on cloud computing. The effect on agreements between enterprises and cloud service providers. https://www2.deloitte.com/nl/nl/pages/risk/articles/cyber-security-privacy-gdpr-update-the-impact-on-cloud-computing.html
