EU sets to tighten legislation against U.S. cloud services

An earlier proposal for the establishment of a certification system in the EU that defines rules for cloud service providers came from the EU agency for cybersecurity (ENISA). According to the document, a company’s headquarters must be specifically located in an EU member state.

"Amazon, Google, Microsoft and other non-EU cloud service providers that wish to obtain EU cybersecurity certification for handling sensitive data can only do so through a joint partnership with an EU-based company," the organization said in a statement.

The agency cited a passage from the draft policy that stated, "Enterprises whose registered head office or headquarters are not located in an EU member state shall not, directly or indirectly, alone or jointly, exercise positive or negative effective control over the CSP."

source: reuters.com