{"id":17820,"date":"2022-01-28T19:20:00","date_gmt":"2022-01-28T19:20:00","guid":{"rendered":"https:\/\/www.2b-advice.com\/?post_type=post&p=17820"},"modified":"2024-05-25T14:53:54","modified_gmt":"2024-05-25T14:53:54","slug":"data-protection-aws-dsgvo","status":"publish","type":"post","link":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/datenschutz-aws-dsgvo\/","title":{"rendered":"Data protection at AWS"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Are Amazon servers GDPR-compliant?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Cloud computing is becoming increasingly popular. The dominant providers in this market are all based in the USA, including Amazon Web Services (AWS). If personal data is transferred from German and European companies to the USA, this always requires a legal basis. After the European Court of Justice declared the Privacy Shield invalid in its ruling on July 16, 2020, standard contractual clauses are generally used for data transfers. However, these alone are not sufficient. <\/strong><\/p>\n

In its ruling, the ECJ emphasized the responsibility of the controller to assess whether the rights of data subjects in the USA (or other third countries) actually enjoy an equivalent level of protection as in the EU with the conclusion of the standard contractual clauses. In fact, the European supervisory authorities expect additional measures such as anonymization or encryption of the data to be transferred. Whether and how AWS Data protection<\/a> seriously and supports its customers in the implementation process is highlighted in this blog post.<\/p>\n

\u00a0<\/h3>\n

AWS<\/h3>\n

\u00a0<\/p>\n

Amazon Web Services (AWS) is an American cloud computing provider. It was founded in 2006 as a subsidiary of the online mail order company Amazon.com. Since then, AWS has been growing rapidly. In 2017, Gartner named AWS as the leading international provider in cloud computing. A few years ago, the turnover of AWS was 46 billion dollars.<\/p>\n

\u00a0<\/p>\n

\u00a0<\/h3>\n

AWS and data protection<\/h3>\n

\u00a0<\/p>\n

As a US company, Amazon Web Services, like comparable services, has been criticized for years with regard to data protection. To compensate for this problem, AWS offers so-called regions, which in turn are divided into availability zones and correspond to physical locations for storing data. For example, the regions Ireland (eu-west-1) and Frankfurt am Main (eu-central-1) can be selected so that instances are only executed there. The problem with this is that servers located in the EU do not protect against access by US authorities under the Cloud Act. This is a problem for AWS and data protection in Germany.<\/p>\n

Amazon offers its customers preconfigured standard contractual clauses and also refers to a Data Processing Addendum. However, both documents are designed according to a \"high-level approach\". They do not really support the customer in carrying out the transfer impact assessment required in the standard contractual clauses. For example, the following description of the processed data categories from the addendum: \"Customer Data uploaded to the Services under Customer's AWS accounts.\" is of course far too superficial to carry out an adequate transfer impact assessment.<\/p>\n

To improve data protection, Amazon offers developers the option of encrypting data stored on AWS themselves - even when using an official software development kit. Large customers are offered the use of hardware encryption with individual components.<\/p>\n

\u00a0<\/strong><\/p>\n

Conclusion<\/strong>
According to AWS's self-presentation, requests from US authorities are always carefully checked and, if necessary, rejected. With regard to data protection, Amazon AWS also emphasizes that data encrypted by the customer will only be released to US authorities in encrypted form.<\/p>\n

For AWS services with encryption, AWS's own KMS service is used, which ensures that AWS itself has no way of decrypting the plaintext.<\/p>\n

This means that AWS can be used in compliance with data protection regulations, but only if encryption is actually used and possible residual risks have been assessed as acceptable as part of the transfer impact assessment.<\/p>\n

Do you need support with the professional implementation of a transfer impact assessment? Please contact us. We look forward to supporting you with our many years of data protection expertise.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

Are Amazon servers GDPR-compliant? Cloud computing is becoming increasingly popular. The dominant providers in this market are all based in the USA, including Amazon Web Services (AWS). If personal data is transferred from German and European companies to the USA, this always requires a legal basis. After the European Court of Justice declared the so-called Privacy Shield invalid in its ruling of 16.7.2020, the ...<\/p>","protected":false},"author":1,"featured_media":18359,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[],"class_list":["post-17820","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-datenschutz-unternehmen"],"yoast_head":"\nDatenschutz bei der AWS Cloud: DSGVO-konform?| 2B Advice Blog<\/title>\n<meta name=\"description\" content=\"Amazon Web Services, wie viele vergleichbare Dienste auch, seit Jahren in Bezug auf den Datenschutz in der Kritik. Ist AWS DSGVO konform?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/2b-advice.com\/en\/2022\/01\/28\/data-protection-aws-dsgvo\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Datenschutz bei der AWS Cloud: DSGVO-konform?| 2B Advice Blog\" \/>\n<meta property=\"og:description\" content=\"Amazon Web Services, wie viele vergleichbare Dienste auch, seit Jahren in Bezug auf den Datenschutz in der Kritik. Ist AWS DSGVO konform?\" \/>\n<meta property=\"og:url\" content=\"https:\/\/2b-advice.com\/en\/2022\/01\/28\/data-protection-aws-dsgvo\/\" \/>\n<meta property=\"og:site_name\" content=\"Ailance\" \/>\n<meta property=\"article:published_time\" content=\"2022-01-28T19:20:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-25T14:53:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/2b-advice.com\/wp-content\/uploads\/2022\/01\/AWS-Datenschutz-DSGVO.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"395\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"2BAdviceAilance\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"2BAdviceAilance\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2022\\\/01\\\/28\\\/datenschutz-aws-dsgvo\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2022\\\/01\\\/28\\\/datenschutz-aws-dsgvo\\\/\"},\"author\":{\"name\":\"2BAdviceAilance\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/person\\\/3288798779afc19fd56581c31f3b8ff8\"},\"headline\":\"Datenschutz bei AWS\",\"datePublished\":\"2022-01-28T19:20:00+00:00\",\"dateModified\":\"2024-05-25T14:53:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2022\\\/01\\\/28\\\/datenschutz-aws-dsgvo\\\/\"},\"wordCount\":577,\"publisher\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2022\\\/01\\\/28\\\/datenschutz-aws-dsgvo\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/AWS-Datenschutz-DSGVO.jpg\",\"articleSection\":[\"Datenschutz\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2022\\\/01\\\/28\\\/datenschutz-aws-dsgvo\\\/\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2022\\\/01\\\/28\\\/datenschutz-aws-dsgvo\\\/\",\"name\":\"Datenschutz bei der AWS Cloud: DSGVO-konform?| 2B Advice Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2022\\\/01\\\/28\\\/datenschutz-aws-dsgvo\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2022\\\/01\\\/28\\\/datenschutz-aws-dsgvo\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/AWS-Datenschutz-DSGVO.jpg\",\"datePublished\":\"2022-01-28T19:20:00+00:00\",\"dateModified\":\"2024-05-25T14:53:54+00:00\",\"description\":\"Amazon Web Services, wie viele vergleichbare Dienste auch, seit Jahren in Bezug auf den Datenschutz in der Kritik. Ist AWS DSGVO konform?\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2022\\\/01\\\/28\\\/datenschutz-aws-dsgvo\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/2b-advice.com\\\/en\\\/2022\\\/01\\\/28\\\/datenschutz-aws-dsgvo\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2022\\\/01\\\/28\\\/datenschutz-aws-dsgvo\\\/#primaryimage\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/AWS-Datenschutz-DSGVO.jpg\",\"contentUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/AWS-Datenschutz-DSGVO.jpg\",\"width\":1920,\"height\":395,\"caption\":\"AWS und Datenschutz mit DSGVO\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2022\\\/01\\\/28\\\/datenschutz-aws-dsgvo\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/2b-advice.com\\\/de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Datenschutz bei AWS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/\",\"name\":\"2B Advice\",\"description\":\"By 2B Advice\",\"publisher\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\",\"name\":\"2B Advice GmbH\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Ailance_Logo_Yellow_White_large_RGB.png\",\"contentUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Ailance_Logo_Yellow_White_large_RGB.png\",\"width\":287,\"height\":401,\"caption\":\"2B Advice GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/2b-advice-group\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/person\\\/3288798779afc19fd56581c31f3b8ff8\",\"name\":\"2BAdviceAilance\",\"sameAs\":[\"https:\\\/\\\/2b-advice.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Data protection in the AWS Cloud: GDPR-compliant?| 2B Advice Blog","description":"Amazon Web Services, like many comparable services, has been criticized for years with regard to data protection. Is AWS GDPR compliant?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/data-protection-aws-dsgvo\/","og_locale":"en_US","og_type":"article","og_title":"Datenschutz bei der AWS Cloud: DSGVO-konform?| 2B Advice Blog","og_description":"Amazon Web Services, wie viele vergleichbare Dienste auch, seit Jahren in Bezug auf den Datenschutz in der Kritik. Ist AWS DSGVO konform?","og_url":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/data-protection-aws-dsgvo\/","og_site_name":"Ailance","article_published_time":"2022-01-28T19:20:00+00:00","article_modified_time":"2024-05-25T14:53:54+00:00","og_image":[{"width":1920,"height":395,"url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2022\/01\/AWS-Datenschutz-DSGVO.jpg","type":"image\/jpeg"}],"author":"2BAdviceAilance","twitter_card":"summary_large_image","twitter_misc":{"Written by":"2BAdviceAilance","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/datenschutz-aws-dsgvo\/#article","isPartOf":{"@id":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/datenschutz-aws-dsgvo\/"},"author":{"name":"2BAdviceAilance","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/person\/3288798779afc19fd56581c31f3b8ff8"},"headline":"Datenschutz bei AWS","datePublished":"2022-01-28T19:20:00+00:00","dateModified":"2024-05-25T14:53:54+00:00","mainEntityOfPage":{"@id":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/datenschutz-aws-dsgvo\/"},"wordCount":577,"publisher":{"@id":"https:\/\/2b-advice.com\/en\/#organization"},"image":{"@id":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/datenschutz-aws-dsgvo\/#primaryimage"},"thumbnailUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2022\/01\/AWS-Datenschutz-DSGVO.jpg","articleSection":["Datenschutz"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/datenschutz-aws-dsgvo\/","url":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/datenschutz-aws-dsgvo\/","name":"Data protection in the AWS Cloud: GDPR-compliant?| 2B Advice Blog","isPartOf":{"@id":"https:\/\/2b-advice.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/datenschutz-aws-dsgvo\/#primaryimage"},"image":{"@id":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/datenschutz-aws-dsgvo\/#primaryimage"},"thumbnailUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2022\/01\/AWS-Datenschutz-DSGVO.jpg","datePublished":"2022-01-28T19:20:00+00:00","dateModified":"2024-05-25T14:53:54+00:00","description":"Amazon Web Services, like many comparable services, has been criticized for years with regard to data protection. Is AWS GDPR compliant?","breadcrumb":{"@id":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/datenschutz-aws-dsgvo\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/2b-advice.com\/en\/2022\/01\/28\/datenschutz-aws-dsgvo\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/datenschutz-aws-dsgvo\/#primaryimage","url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2022\/01\/AWS-Datenschutz-DSGVO.jpg","contentUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2022\/01\/AWS-Datenschutz-DSGVO.jpg","width":1920,"height":395,"caption":"AWS und Datenschutz mit DSGVO"},{"@type":"BreadcrumbList","@id":"https:\/\/2b-advice.com\/en\/2022\/01\/28\/datenschutz-aws-dsgvo\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/2b-advice.com\/de\/"},{"@type":"ListItem","position":2,"name":"Datenschutz bei AWS"}]},{"@type":"WebSite","@id":"https:\/\/2b-advice.com\/en\/#website","url":"https:\/\/2b-advice.com\/en\/","name":"2B Advice","description":"By 2B Advice","publisher":{"@id":"https:\/\/2b-advice.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/2b-advice.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/2b-advice.com\/en\/#organization","name":"2B Advice GmbH","url":"https:\/\/2b-advice.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2024\/02\/Ailance_Logo_Yellow_White_large_RGB.png","contentUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2024\/02\/Ailance_Logo_Yellow_White_large_RGB.png","width":287,"height":401,"caption":"2B Advice GmbH"},"image":{"@id":"https:\/\/2b-advice.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/2b-advice-group\/"]},{"@type":"Person","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/person\/3288798779afc19fd56581c31f3b8ff8","name":"2BAdviceAilance","sameAs":["https:\/\/2b-advice.com"]}]}},"_links":{"self":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/17820","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/comments?post=17820"}],"version-history":[{"count":1,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/17820\/revisions"}],"predecessor-version":[{"id":29811,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/17820\/revisions\/29811"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/media\/18359"}],"wp:attachment":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/media?parent=17820"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/categories?post=17820"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/tags?post=17820"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}