Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cloud Security

Microsoft Pledges to Store European Cloud Data in EU

US tech giant Microsoft pledged Thursday to process and store all European cloud-based client data in the European Union amid unease in the region over the reach of US legislation on personal data collection.

US tech giant Microsoft pledged Thursday to process and store all European cloud-based client data in the European Union amid unease in the region over the reach of US legislation on personal data collection.

Microsoft’s European clients have long been concerned over the legal status of data they store with US companies in the cloud and the extent to which they could be scrutinized by US authorities.

Those worries came to a head last July when the European Court of Justice struck down the EU-US Privacy Shield, a framework allowing firms to transfer personal data to the United States in compliance with Brussels’ General Data Protection Regulation.

The court found the mechanism did not adequately protect EU data from US authorities over which Europe has neither control nor right of redress.

In a blog post on Thursday, Microsoft president Brad Smith said: “If you are a commercial or public sector customer in the EU, we will go beyond our existing data storage commitments and enable you to process and store all your data in the EU.

“In other words, we will not need to move your data outside the EU.”

Smith said the commitment would apply across all of Microsoft’s core cloud services — Azure, Microsoft 365, and Dynamics 365 — and would take effect by the end of next year.

The initiative is dubbed the EU Data Boundary for the Microsoft Cloud. Smith stated Microsoft cloud services “already comply with or exceed EU guidelines even before the plan we’re announcing today”.

Advertisement. Scroll to continue reading.

“We defend our customers’ data from improper access by any government in the world,” he added.

“We hope today’s update is another step toward responding to customers that want even greater data residency commitments,” Smith wrote, pledging to continue to consult with customers and regulators on the issue and respond to their feedback.

US-dominated cloud

It remains to be seen, however, if Smith’s announcement will sufficiently assuage lingering European fears on the issue.

“The location of Europeans’ personal data in US providers’ European data centres does not always guarantee their security as they can still be subject to US law,” owing to the extra-territorial reach of the latter, financial auditors KPMG noted in a white paper on the European cloud market drawn up with French IT firms including Microsoft rival OVHCloud.

Smith stressed Microsoft was committed to the EU’s vision for a “Europe Fit for the Digital Age” and pledged compensation to customers were any of their data to be disclosed data in violation of European data protection rules.

Cloud services allow firms to store immense quantities of data on remote servers according to their needs but the sector is largely dominated by US providers — notably Amazon Web Services, Microsoft and Google.

The sector is growing exponentially. According to KPMG, the European market alone, currently estimated to be worth 53 billion euros ($63.8 billion), could grow by a factor of between five and ten times by 2030.

The US market is projected to grow from a current $76.4 billion to $390.3 billion by 2028, according to Fortune Business Insights research.

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

CISO Conversations

SecurityWeek talks to Billy Spears, CISO at Teradata (a multi-cloud analytics provider), and Lea Kissner, CISO at cloud security firm Lacework.

Cloud Security

Cloud security researcher warns that stolen Microsoft signing key was more powerful and not limited to Outlook.com and Exchange Online.

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Compliance

The three primary drivers for cyber regulations are voter privacy, the economy, and national security – with the complication that the first is often...

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...

Application Security

A CSRF vulnerability in the source control management (SCM) service Kudu could be exploited to achieve remote code execution in multiple Azure services.