Download Publication
.png)
Who it's for:
- Cloud service providers that need to comply with GDPR requirements
- Cloud customers that need to evaluate GDPR compliance
CSA Code of Conduct to EU Cloud Code of Conduct Mapping
Release Date: 03/24/2025
Updated On: 07/16/2025
Navigating General Data Protection Regulation (GDPR) compliance requirements can be challenging. Fortunately, Codes of Conduct (CoCs) provide a straightforward way for organizations to showcase their compliance.
The EU Cloud CoC for GDPR Compliance includes 86 provisions detailing best practices for ensuring compliance with GDPR. Similarly, the CSA CoC for GDPR Compliance includes 15 requirements broken into several best practices. It also provides guidelines on how to conduct a self assessment for GDPR compliance regulations.
CSA's Privacy Level Agreement (PLA) Working Group has conducted a mapping between the CSA CoC and the EU Cloud CoC. This mapping identifies the controls of both frameworks, how they overlap, and remediation actions to cover the gaps.
Key Takeaways:
- How to use a Code of Conduct (CoC) to comply with GDPR
- The overlaps between the CSA CoC for GDPR Compliance and the EU Cloud CoC for GDPR Compliance
- How to address the gaps between the two CoCs
Download this Resource
Prefer to access this resource without
an account?
Download the publication. Download the presentation.
Share
Related resources
Related Resources
.jpeg)
.jpeg)
.jpeg)
Are you a research volunteer? Request to have your profile displayed on the website here.
Interested in helping develop research with CSA?
Related Certificates & Training
Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
Learn more