AUDITOR - European Cloud Service Data Protection Certification
The aim of the research project AUDITOR (European Cloud Service Data Protection Certification) is the conceptual design, exemplary implementation and testing of a sustainable EU-wide data protection certification of cloud services.
Certification in accordance with the EU data protection basic regulation (DSGVO) is in the interest of all parties involved:
- The cloud customer, who may only work with those cloud providers who can provide sufficient guarantees of data protection compliance;
- The cloud providers who can offer precisely this security with certification;
- The certifier, for whose business area the DSGVO provides mandatory rules.
For the conception of a sustainable data protection certification, the project partners will first develop a catalogue of criteria for the certification of cloud services according to the DSGVO and strive for a corresponding standardization. In addition, suitable organisational structures and procedures for the implementation of a Europe-wide recognised data protection certification will be designed. This includes in particular the specification of modular certification and auditing processes.
Finally, in order to ensure a sustainable use and widespread distribution of AUDITOR, business models for a sustainably successful AUDITOR procedure will be investigated. The developed certification procedure and the criteria developed in the AUDITOR project and prepared for a standardization will finally be tested and validated in practice.
Partners: University of Kassel, Department of Business Informatics and System Development (consortium leader); CLOUD&HEAT Technologies GmbH; datenschutz cert GmbH; DIN-Normenausschuss Informationstechnik und Anwendungen (NIA), DIN e.V.; ecsec GmbH; EuroCloud Deutschland_eco e.V., eco - Verband der Internetwirtschaft; University of Kassel, Department of Public Law with focus on the law of technology and environmental protection
Associated partners: Federal Office for Information Security (BSI); Hornetsecurity GmbH; SCOPE Europe b.v.b.a/s.p.r.l.; Trusted Cloud e.V.; TÜV Informationstechnik GmbH; Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein; VOICE-Bundesverband der IT-Anwender e. V.
Coordinator: University of Kassel, Department of Business Informatics and Systems Development, Director of the Research Center for Information Technology Design (ITeG)
Prof. Dr. Ali Sunyaev
Phone: +49 721 608-46037
Project duration: 2017 - 2021
Total volume: EUR 2.1 million
Funding volume: EUR 1.8 million