[ad_1]
Two years into the worldwide pandemic, video conferencing has not solely change into a part of our every day routines, nevertheless it has additionally change into the way in which we do enterprise, how we study, and the way in which we keep near family and friends. It has gone from being a useful gizmo, to changing into mission essential.
Shifting a big a part of our lives on-line and embarking on the hybrid work journey additionally brings up questions: akin to which video convention system is most suited to a corporation’s or particular person’s wants, and what degree of information safety and privateness is obtainable. Prospects, customers, and knowledge safety authorities throughout Europe wish to be sure that private knowledge is protected – and rightfully so.
To assist organizations make these necessary choices, forward of Worldwide Privateness Day, we needed to handle 5 key subjects referring to Webex by Cisco and privateness.
Cisco Webex: compliance with the GDPR
Webex was engineered with knowledge safety by design and default, and can be utilized by prospects in compliance with the GDPR and related privateness legal guidelines world wide.
Webex has been declared adherent to the EU Cloud Code of conduct (EU Cloud CoC), demonstrating it may be utilized in compliance with the GDPR. The EU Cloud CoC solidifies the authorized necessities of Article 28 of the GDPR for its sensible implementation inside the cloud market. The European Information Safety Board (EDBP), which incorporates all EU Member State Information Safety Authorities, has reviewed and accredited the EU Cloud CoC. SCOPE Europe, an unbiased monitoring physique, confirmed Webex meets all the necessities of the EU Cloud CoC.
For extra details about Webex and the EU Cloud CoC, see Webex by Cisco earns adherence to the EU Cloud Code of Conduct.
EU knowledge residency: forward of schedule
Localized knowledge processing within the EU will not be an express regulatory requirement – GDPR permits for worldwide knowledge switch mechanisms, derogations, and exceptions. Nonetheless, we offer prospects with an acceptable degree of selection and management over their knowledge, together with the place knowledge is saved and processed.
In July 2021, we opened a brand new knowledge heart in Frankfurt, Germany. For our EU prospects, which means all user-generated content material (like messages, recordings, and recordsdata), for Webex alongside person profiles, and analytics are saved within the EU, in our knowledge heart in Frankfurt, with a back-up in Amsterdam, Netherlands. We’re on observe to ship knowledge residency for any remaining knowledge as properly within the EU in 2022.
Learn extra about our knowledge migration course of on our Webex Weblog, Celebrating main strides in direction of full EU knowledge residency for Webex prospects.
Webex: a 360-degree method to safety
Safety and privateness are core to Cisco. Defending buyer knowledge is an ongoing precedence and we repeatedly put money into compliance capabilities and in assembly worldwide safety and privateness requirements.
Webex has a 360-degree method to safety, together with robust encryption, extremely safe search, gadget and browser safety, and retention and archiving outlined by prospects’ coverage. Solely authenticated customers can view messages and recordsdata in Webex areas.
We combine safety and privateness from the earliest phases of growth, ensuring they’re inbuilt by design, not bolted on after the actual fact. The Cisco Safe Improvement Lifecycle (CSDL) follows a secure-by-design philosophy from product ideation, by means of operation, to end-of-life. Privateness Influence Assessments (PIAs) are a required step within the CSDL course of and should be accomplished earlier than merchandise are accredited for launch.
As well as, Cisco has a longstanding “no backdoor” coverage. We prohibit undisclosed product options which might be designed to permit unauthorized gadget or community entry, expose delicate gadget info, or bypass security measures or restrictions.
Webex was constructed to comply with extremely acknowledged privateness frameworks akin to:
- EU Binding Company Guidelines – Controller
- C5 certification by the German BSI (defining safety degree for cloud computing)
- ISO 27001 (info safety administration)
- ISO 27017 (implementing info safety processes)
- ISO 27018 (defending personally identifiable info in public clouds)
- ISO 27701 (privateness info administration)
- SOC 2 Sort II (controls for safeguarding buyer knowledge)
- APEC Cross Border Privateness Guidelines
- APEC Privateness Recognition for Processors
Safeguard measures according to the Schrems II ruling
The processing of non-public knowledge throughout worldwide borders by Webex complies with the necessities of the Courtroom of Justice of the European Union’s (CJEU) Schrems II ruling. We use accredited switch mechanisms listed within the GDPR, akin to Binding Company Guidelines (BCR)–Controller and the brand new Customary Contractual Clauses (SCCs) along with extra technical, contractual and organizational measures. These extra safeguards comply with the EDPB’s Suggestions for worldwide knowledge transfers in mild of the Schrems II determination.
Learn extra about our response to Schrems II.
Notice that the GDPR doesn’t prohibit cross-border knowledge transfers. It helps and promotes the protected and safe, international free stream of non-public knowledge, so long as the processing adheres to the EU normal of care. Because the CJEU clarified in Schrems II, GDPR switch mechanisms with extra safeguards can be utilized to legally switch and course of EU private knowledge exterior of the EU.
Webex, Third Events and our Principled Method
We don’t promote, monetize, or share buyer private knowledge with third events for advertising or promoting functions.
In some circumstances, Cisco engages with service suppliers to help in providing providers for Webex. As sub-processors, these service suppliers function solely upon written directions from Cisco and keep the identical degree of safety and privateness as we do. We’re clear with our prospects about how their knowledge is processed through our Privateness Information Sheets.
All Cisco sub-processors bear a rigorous safety and privateness evaluation to verify their compliance with our necessities. They’re additional certain by an information processing settlement which includes the EU Customary Contractual Clauses and locations strict limits on their use and processing of any knowledge offered by us or our Webex prospects and customers. Our Provider Information Safety Settlement templates have been a part of the submission bundle for our BCR-Controller approval and Webex’s adherence to the EU Cloud Code of Conduct verification. EU regulators and unbiased assessors have confirmed our compliance.
Lastly, if any authorities requests entry to buyer knowledge, akin to in case of a legislation enforcement course of, we apply our ‘Principled Method’. This states that, if we have been to obtain a authorities request to entry knowledge, Cisco doesn’t routinely hand over knowledge in response. First, we’ll search to inform the shopper and redirect the request to them as the info controller. We’ve publicly declared these commitments as a signatory to the Trusted Cloud Rules and included them in our buyer contracts.
Twice a yr, we publish transparency experiences and publicly disclose details about the quantity and kinds of authorities calls for for buyer knowledge we obtained for the related time interval, and our responses.
Our dedication
We’re dedicated to guard knowledge, respect privateness, and ship safe applied sciences and options to satisfy our prospects’ wants. We welcome a dialog on privateness and safety with prospects, customers, and knowledge safety authorities alike. We hope our solutions above assist make clear our method, our dedication to privateness and safety, and the concrete actions we take to assist that dedication.
For extra info, go to the Webex Belief Middle or get in contact with us.
Share:
[ad_2]
