The GDS (Government Digital Service) is reviewing the cloud policy and guidance in consideration of the Schrems 2 judgement in July which destroyed the EU-US Privacy Shield Agreement.

Schrems 2 means that there is insufficient framework to ensure compliance with EU data protection laws as the EU-US Privacy Shield Agreement has been destroyed. 

The review will identify relevant cross-border data flows and ensure that appropriate mitigation is implemented if necessary, following the guidance from the IPO (information commissioner’s officer) and the EDPB (European Data Protection Board).

Read the full article here: https://www.computerweekly.com/news/252489400/GDS-reviewing-Cloud-First-policy-post-Schrems-II