Data Portability & Application Portability
Cloud Expo, London 15th March 2017
Dimitra Stefanatou, Arthur’s Legal
Initiatives European Commission
 Communication a “Digital Single Market Strategy for
Europe Brussels”, 6th of May 2015
 Communication on “Building a European Data
Economy’’, 10th of January 2017
 Staff Working Document on “The free flow of data
and emerging issues of the European data
economy’’, 10th of January 2017
2
Portability: the reasoning behind
3
Exercise
choice
Maximize cloud
adoption
Foster
Competition
© 4
ImportExport Portability
Elements of Data & Application Portability
Scope : Data Portability & Application Portability
SaaS
PaaS
IaaS
 All cloud deployment models
 Personal data & non-personal data
 Business users & private users
 European Union Geo, taking into account the global context
 Off-the-shelf cloud services
× Virtual machine portability
× Online platforms
× Interoperability of applications, software, platforms, systems
Goals of the study
1. Gather evidence
2. Assess
3. Provide practical guidance
6
Ultimate objective
7
The study aims at supporting policy-making aimed at
facilitating data and application portability for cloud customers
and cloud service providers in the context of the DSM.
Aspects of the study
Legal
Economical
Technical
8
The Portability Legal Life Cycle
1. Assessment
2. Preparation
3. Negotiation & Contracting
4. Execution & Operation
5. Updates & Amendments
6. Escalation
7. Termination & Post
Repeat
10
GENERAL DATA PROTECTION REGULATION
Open questions
 Have you ever ported/or attempted to port data from
the cloud?
 Have you ever encountered any portability related
issues?
 Do you consider portability when selecting a CSP?
 Do you think an exit plan should be part of the cloud
offering?
 Which is in your opinion the biggest barrier for
portability in the cloud?
 (…)
11
Arthur’s Legal } Global Tech Law Firm by Design. Est. 2001
Arthur’s Legal: Arthur’s Legal a global tech law firm by design. Arthur’s Legal is founded in 2001 and since its
incorporation provides integrated full services, and mainly focuses on local and global private and public organizations
that are active as customer, user, vendor, integrator, consultant, legislator or policy maker in the fields of IT, licensing,
cloud computing, internet of things, data analytics, cybersecurity, robotics, distributed ledger (block chain) technology
and artificial intelligence. Arthur’s Legal is also a leading deal making expert; it has already structured and negotiated out
more than 5.000 major technology and related deals with and for global Fortune companies as well as other major
organizations in the public and private sector worldwide.
Global Digital Strategy: The counsels of Arthur’s Legal are legal experts, strategists, technologists,
standardization specialists and frequent speakers worldwide, with in-depth experience and are well-connected in the
world of technology, innovation, data, digital, cybersecurity, (personal) data protection, innovation, standardization &
global business. On these topics, its managing director Arthur van der Wees LLM is expert advisor to the European
Commission, Dutch government as well as other public and private sector organizations and institutes worldwide.
Cloud Computing, CyberSecurity, Digital Data & Internet of Things: Arthur’s Legal is
Founding Member of European Commission’s (EC) Alliance of IoT Innovation (AIOTI), Co-Chair of of AIOTI WG4
(Policy), Project Leader of both the AIOTI Security in IoT Task Force and the Privacy in IoT Task Force, co-author of
EC’s Cloud SLA Standardisation Guidelines, co-author of Cloud Security Alliance’s Privacy Level Agreement (PLA) 2.0,
co-contributor to ISO standards such as ISO/IEC 19086 (Cloud Computing), and co-author of the IERC Handbook:
Digitising the Industry, Internet of Things Connecting the Physical, Digital and Virtual Worlds. Arthur’s Legal is co-
founder of CloudQuadrants on the maturity of cloud offerings, the Cyberchess Institute that landscapes the real-life
cybersecurity arena, the Cyber Trust Institute that sets trust trajectories and orbital requirements and parameters for
technology-as-a-service, the Institute for Next Generation Compliance that promotes the restructuring and automation
of compliance and related procurement, and the Institute for Data and Evidence Based Trust that aims to build and
enhance trust and data protection in open, decentralized digital, cyber-physical and virtual ecosystems.
Connected & Hyperconnected: Arthur's Legal has an unique 3D-angle & x-by-design approach, connecting
vital topics such as usability, security, data management, (personal) data protection, compliance with technology,
infrastructure, architecture and global standardization thereof, with the capability and ability to connect those
components in hyperconnected ecosystems much earlier (read: pro-active, preventative) than the traditional policy-
making, legal and compliance practice does. For upcoming events, key notes and other activities, please check out
website, stay up to date via its social media channels, or contact us.
www.arthurslegal.com | stefanatou@arthurslegal

Data Portability & Application Portability - Cloud Security Expo 2017

  • 1.
    Data Portability &Application Portability Cloud Expo, London 15th March 2017 Dimitra Stefanatou, Arthur’s Legal
  • 2.
    Initiatives European Commission Communication a “Digital Single Market Strategy for Europe Brussels”, 6th of May 2015  Communication on “Building a European Data Economy’’, 10th of January 2017  Staff Working Document on “The free flow of data and emerging issues of the European data economy’’, 10th of January 2017 2
  • 3.
    Portability: the reasoningbehind 3 Exercise choice Maximize cloud adoption Foster Competition
  • 4.
    © 4 ImportExport Portability Elementsof Data & Application Portability
  • 5.
    Scope : DataPortability & Application Portability SaaS PaaS IaaS  All cloud deployment models  Personal data & non-personal data  Business users & private users  European Union Geo, taking into account the global context  Off-the-shelf cloud services × Virtual machine portability × Online platforms × Interoperability of applications, software, platforms, systems
  • 6.
    Goals of thestudy 1. Gather evidence 2. Assess 3. Provide practical guidance 6
  • 7.
    Ultimate objective 7 The studyaims at supporting policy-making aimed at facilitating data and application portability for cloud customers and cloud service providers in the context of the DSM.
  • 8.
    Aspects of thestudy Legal Economical Technical 8
  • 9.
    The Portability LegalLife Cycle 1. Assessment 2. Preparation 3. Negotiation & Contracting 4. Execution & Operation 5. Updates & Amendments 6. Escalation 7. Termination & Post Repeat
  • 10.
  • 11.
    Open questions  Haveyou ever ported/or attempted to port data from the cloud?  Have you ever encountered any portability related issues?  Do you consider portability when selecting a CSP?  Do you think an exit plan should be part of the cloud offering?  Which is in your opinion the biggest barrier for portability in the cloud?  (…) 11
  • 12.
    Arthur’s Legal }Global Tech Law Firm by Design. Est. 2001 Arthur’s Legal: Arthur’s Legal a global tech law firm by design. Arthur’s Legal is founded in 2001 and since its incorporation provides integrated full services, and mainly focuses on local and global private and public organizations that are active as customer, user, vendor, integrator, consultant, legislator or policy maker in the fields of IT, licensing, cloud computing, internet of things, data analytics, cybersecurity, robotics, distributed ledger (block chain) technology and artificial intelligence. Arthur’s Legal is also a leading deal making expert; it has already structured and negotiated out more than 5.000 major technology and related deals with and for global Fortune companies as well as other major organizations in the public and private sector worldwide. Global Digital Strategy: The counsels of Arthur’s Legal are legal experts, strategists, technologists, standardization specialists and frequent speakers worldwide, with in-depth experience and are well-connected in the world of technology, innovation, data, digital, cybersecurity, (personal) data protection, innovation, standardization & global business. On these topics, its managing director Arthur van der Wees LLM is expert advisor to the European Commission, Dutch government as well as other public and private sector organizations and institutes worldwide. Cloud Computing, CyberSecurity, Digital Data & Internet of Things: Arthur’s Legal is Founding Member of European Commission’s (EC) Alliance of IoT Innovation (AIOTI), Co-Chair of of AIOTI WG4 (Policy), Project Leader of both the AIOTI Security in IoT Task Force and the Privacy in IoT Task Force, co-author of EC’s Cloud SLA Standardisation Guidelines, co-author of Cloud Security Alliance’s Privacy Level Agreement (PLA) 2.0, co-contributor to ISO standards such as ISO/IEC 19086 (Cloud Computing), and co-author of the IERC Handbook: Digitising the Industry, Internet of Things Connecting the Physical, Digital and Virtual Worlds. Arthur’s Legal is co- founder of CloudQuadrants on the maturity of cloud offerings, the Cyberchess Institute that landscapes the real-life cybersecurity arena, the Cyber Trust Institute that sets trust trajectories and orbital requirements and parameters for technology-as-a-service, the Institute for Next Generation Compliance that promotes the restructuring and automation of compliance and related procurement, and the Institute for Data and Evidence Based Trust that aims to build and enhance trust and data protection in open, decentralized digital, cyber-physical and virtual ecosystems. Connected & Hyperconnected: Arthur's Legal has an unique 3D-angle & x-by-design approach, connecting vital topics such as usability, security, data management, (personal) data protection, compliance with technology, infrastructure, architecture and global standardization thereof, with the capability and ability to connect those components in hyperconnected ecosystems much earlier (read: pro-active, preventative) than the traditional policy- making, legal and compliance practice does. For upcoming events, key notes and other activities, please check out website, stay up to date via its social media channels, or contact us. www.arthurslegal.com | stefanatou@arthurslegal

Editor's Notes

  • #5 Use ‘’portability’’ not switching title
  • #7 The main objective of this study is to gather evidence on practices relating to data portability with a focus on the barriers potentially preventing data portability and/or application portability, and the policy measures needed to overcome these barriers.