Vranaki, Asma A.I. --- "Cloud investigations by European data protection authorities: An empirical account" [2016] ELECD 1191; in Rothchild, A. John (ed), "Research Handbook on Electronic Commerce Law" (Edward Elgar Publishing, 2016) 518

Book Title: Research Handbook on Electronic Commerce Law

Editor(s): Rothchild, A. John

Publisher: Edward Elgar Publishing

ISBN (hard cover): 9781783479917

Section: Chapter 21

Section Title: Cloud investigations by European data protection authorities: An empirical account

Author(s): Vranaki, Asma A.I.

Number of pages: 25

Abstract/Description:

This chapter draws on qualitative interviews, documentary analysis, and observation data to analyze how European data protection authorities (“EU DPAs”) exercise one of their statutory enforcement powers, namely, investigations to determine the compliance of cloud providers with the relevant data protection laws. The empirical analysis presented in this chapter supports two arguments. Firstly, the investigations of cloud providers by EU DPAs (“Cloud Investigations”) are complex regulatory processes that often involve different co-operative relationships between various actors, such as DPAs. In reality, manifold interactions and practices, such as facilitative instruments, are deployed to form and perform such collaborations which are vital in ensuring the consistent application and enforcement of common data protection principles in an increasingly globalized context. Secondly, Cloud Investigations are also dynamic as they can involve continually evolving regulatory enforcement styles and compliance attitudes. Providers of cloud services can often resist the attempts of the EU DPAs to direct the investigative process in specific ways. How such resistance is resolved is very much context-dependent.