A t a time when cloud computing industry is developing rapidly, mainly due to the fl exibility and the cost minimization cloud computing off ers, ISO and IEC developed a new standard on cloud computing to deal with issues of protection of PII and security of information. Th e new standard aims to address the down-sides of cloud computing and the concerns of the cloud clients, mainly the lack of trust and transparency, by developing controls and recommendations for cloud service providers acting as PII processors. Th e article examines the strengths and weaknesses of the new standard, its added value to the cloud computing landscape and to data protection, as well as its relation to the European Personal Data Protection framework.
The International Organization for Standardization (ISO/IEC JTC 1/SC 27) has developed a set of standards aiming to address risk management for cloud computing REF .