PLA Code of Practice Template Annex 1 (Updated - May 2019)

CSA PLA Code of Conduct for GDPR Compliance provides a consistent and comprehensive framework for complying with the EU’s GDPR. The CSA PLA Code of Conduct for GDPR Compliance is designed to be an appendix to a Cloud Services Agreement to describe the level of privacy protection that a Cloud Service Provider will provide. Note: The current version of of the CSA Code of Practice is 3.2 (which replaces 3.1), the updates were to be in compliance and align with the Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679 adopted February 12, 2019.

Release Date: 06/03/2019

Artifact Request


Address Information


Having read and understood the CSA’s Privacy Policy,

I specifically consent to receive marketing messages via the following channels: