Cloud Services

[IKWeb]

Hi All

 

I have a school who wants to use Amazon AWS services, but they have asked about data security. I remember a website a while back which had a list of companies on, and if they ticked all the boxes for UK Data Protection.

 

Does anyone know where I can find this?

 

TIA

[cpjitservices]

Not sure AWS can be used to store any sensitive corporate data, as it's not UK Based ? It falls under European ? or to something of that ilk anyway.

[IrritableTech]

Have a look here... Sending personal data outside the European Economic Area (Principle 8) - ICO

 

The DPA covers data held within the EEA - you can transfer and hold data in other countries as long as they have adequate levels of protection. Officially one of these territories is the USA under their safe harbor agreement.

 

Amazons safe harbor registration is here... Safe Harbor - Organization Information but it doesn't specifically state the AWS service.

 

You must inform the ICO if you intend to hold data outside of the EEA and have it mentioned on your registration.

[IKWeb]

Thanks guys, Amazon has a Data Centre in Ireland which is the one I plan to use, would this be classed as inside the EEA?

[IrritableTech]

Yep, Ireland is in the EEA - what you might need assurances on is where backups and disaster recovery solutions are placed. I don't know too much about AWS I'm afraid.