![cvria.png](https://steemitimages.com/DQmXPGUERfu68y6tLRzYyyNYvq16mnYmtXD9vnjffviCJKD/cvria.png)

The Datenschutzgrundverordnung (DSGVO) is called [GDPR](https://www.eugdpr.org/) (EU General Data Protection Regulation) in English and will replace the [Directive 95/46/EC](http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:31995L0046:en:HTML) formerly in place on **25. May 2018**. If you did not know that before you are most likely not prepared, right? The [GDPR](https://www.eugdpr.org/) requires processors of personal data in [Article 32](http://www.privacy-regulation.eu/en/article-32-security-of-processing-GDPR.htm) to “take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk”. There is no further specification, but the [GDPR](https://www.eugdpr.org/) has some protection goals instead:

* the pseudonymisation and encryption of personal data

* the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services

* the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident

* a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing

Cloud services are regulated via [Auftragsdatenverarbeitung](https://webdevtrust.com/auftragsdatenverarbeitung/) in Germany by the way. The cloud user must therefore check the data protection level and the data security of the cloud provider. For example, are subcontractors used or is the data transmitted to or through third countries? For cloud users who want to comply with the European data protection guidelines, the only option is to choose European cloud providers with a data center within the EU.