Microsoft Boosts Office 365 Security To Meet European Data Protection Requirements | crn.com

Microsoft (NSDQ:MSFT) has improved the security and privacy capabilities of its Office 365 cloud applications, the company said Wednesday, in a move that will help customers comply with stringent European Union data protection regulations and the U.S. Health Insurance Portability and Accountability Act (HIPAA).

Microsoft, like rivals Google, Amazon and others, is racing to bring its cloud software into compliance with government security regulations. Earlier this year Microsoft and Google became embroiled in a dispute over whose cloud software complied with Federal Information Security Management Act (FISMA) requirements.

Meeting such requirements can be critical for winning government contracts, such as the $60 million deal to provide the U.S. Department of the Interior with e-mail and collaboration cloud software that Google (NSDQ:GOOG) and Microsoft spent much of the year fighting over in court.

Microsoft also said it has overhauled its Office 365 Trust Center, a Web site that provides detailed information about Office 365 privacy and security practices, to make it easier to use.

Microsoft said it would sign the European Union’s contractual clauses, which the vendor said would help customers comply with the EU’s stringent Data Protection Directive regulations. The contractual or “model clauses” legitimize the transfer of personal data through international networks to locations outside the European Economic Area (EEA).

via Microsoft Boosts Office 365 Security To Meet European Data Protection Requirements.

EU’s Data-Protection Reform Should Inspire U.S., Reding Says – Businessweek

European Union reforms of 16-year-old data-protection rules should inspire the U.S. to strengthen its privacy regime, the EU’s justice chief said.

The EU data privacy reforms, which the European Commission plans to present by the end of next month, should be “an inspiration for changes in the U.S. and elsewhere,” EU Justice Commissioner Viviane Reding said today. Referring to cloud companies that lure clients by promising to protect their data from the U.S. government, she urged for the free flow of information.

“I do encourage cloud computing centers in Europe. We need more innovation, more research and more investment in the ICT industry,” Reding said in prepared remarks for a speech in Brussels. “But this cannot be the only solution. We need free flow of data between our continents. It doesn’t make much sense for us to retreat from each other.”

Deutsche Telekom AG’s T-Systems information technology unit is pushing regulators to introduce a certificate for German or European cloud operators to help companies shield data from U.S. government access through the Patriot Act. Some of the surveillance powers of the act, passed after the Sept. 11, 2001, terrorist attacks, have been opposed by lawmakers and outside groups, including civil liberties activists.

via EU’s Data-Protection Reform Should Inspire U.S., Reding Says – Businessweek.

A Proposal for E.U.-Wide Data Protection Regulation – NYTimes.com

A top lawmaker on Tuesday proposed harmonizing European Union privacy rules so that an Internet company could operate across the 27-country bloc as long as its data protection policies had been approved by a single member state.

Viviane Reding, vice president of the European Commission, said unnecessary hurdles created by privacy rules that date to 1995, when the Internet was in its infancy, were costing companies €2.3 billion, or $3.1 billion, a year as regulators in 27 different nations applied their own rules.

Ms. Reding acknowledged the apparent incongruity of discussing the harmonization of E.U. rules at a time of extreme discord within the bloc over economic policy, with debt woes straining the ties that bind together the euro zone. But she said an overhaul of the privacy regulations was crucial to increasing the competitiveness of the European economy to help it surmount the crisis.

“I think I am persuaded that while bringing member states out of their debt crises, we have to do everything we can to help our companies grow,” Ms. Reding said during a speech to privacy lawyers and other data protection professionals in Paris.

Ms. Reding said she planned to detail her plans in January in what is expected to be a sweeping overhaul of the 16-year-old Data Protection Directive. Internet companies, which would be most immediately affected by the new rules, have been urging E.U. lawmakers to simplify the existing practice, and mostly welcomed her proposals Tuesday.

via A Proposal for E.U.-Wide Data Protection Regulation – NYTimes.com.

Europe Sets Five-Year Internet Strategy – BusinessWeek

European flag outside the Commission
Image via Wikipedia

Half of Europeans subscribing to ultra-high-speed broadband by 2020, bringing an end to the phenomenon of ‘digital virgins’ and the creation of a European cyber-attack rapid response system – these are just some of the ambitious goals contained in the EU’s five-year plan for the online world, unveiled on Wednesday (19 May).

Anxious that the US, Japan and South Korea – still in parts classified as a developing country – are stealing a march on the old continent, where almost a third of people have still never accessed the worldwide web, the European Commission says it is time for a digital revolution.

While today, just one percent of Europeans are signed up to fast fibre-based internet, 12 percent of Japanese have such connections and 15 percent of South Koreans.

“Can you imagine that there are still some 30 percent of Europeans who have never used the internet? Digital virgins, so to say,” Dutch commissioner Neelie Kroes said in announcing the wide-ranging plans. “We want to ensure they all have the opportunity to discover the wonders of the digital world.”

By 2013, Brussels wants all Europeans to have basic broadband and by 2020, for everyone to have access high-speed broadband above 30Mbps, with 50 percent of Europeans able to subscribe to ultra-high-speed rates of above 100Mbps.

via Europe Sets Five-Year Internet Strategy – BusinessWeek.

MEPs call for improved data security  |  European Voice

The European Parliament has called on EU negotiators to make sure they get enough safeguards in upcoming talks with the United States to protect the data rights of EU citizens.

MEPs voted through two resolutions today (5 May) that called for a more limited use of personal data collected by US authorities, fearing the data could be abused.

At issue are two separate transfers of data. One is the so-called Passenger Name Records collected by airlines about passengers on transatlantic flights, which are used by US customs and border control agents to screen people who travel to the US.

The Parliament decided to postpone its approval of a 2007 EU-US accord on the transfer of PNR, and a similar arrangement with Australia. They did so to give Cecilia Malmström, the European commissioner for home affairs, time to draft a new proposal that would answer calls by MEPs for a global agreement setting out how passenger data can be used and what legal redress citizens have over the use of their data.

The MEPs also want a separate effort to negotiate a deal with the US that would cover all data transfer deals between the two sides.

The other data transfer issue voted on today dealt with information collected on bank transfers from Europe that the US Treasury screens to weed out terrorist financiers. Negotiations on a new so-called Terrorist Tracking Finance Programme between the EU and the US are expected to start later this month. The Parliament rejected an interim deal in February because of concerns that it did no

via MEPs call for improved data security  |  Policies  |  Justice  |  Rights | European Voice.

European Commission may create new cybercrime unit – Computerworld

European flag outside the Commission
Image via Wikipedia

European ministers are considering establishing a new agency that would tie together law enforcement agencies and other entities dedicated to fighting cybercrime.

The Council of the European Union, composed of ministers from 27 countries, issued a document earlier this week calling for the European Commission to draw up a feasibility study on the idea.

The ministers released a set of goals they’d like to achieve over time. One of those is to gain more ratifications of the Council of Europe&’s Cybercrime Convention, the only international treaty covering computer crime.

The treaty requires countries to adopt cybercrime laws, have contacts available 24 hours a day for fast-breaking investigations and other measures.

Another medium-term goal focuses on revocation of domain names and IP (Internet protocol) addresses. The document doesn’t spell out exactly the ministers’ objectives there, as it is already standard procedure for many ISPs to shut down Web sites linked with bad behavior.

The new agency would also be tasked with forging stronger bonds between various law enforcement and other organizations that deal with cybercrime, including Europol, Eurojust, Interpol and others.

via European Commission may create new cybercrime unit – Computerworld.

European Union E-Discovery Rules: What Every Attorney Should Know

SUMMARY: This article provides a concise overview of E-Discovery Rules in the European Union. Any litigation reaching the European continent promises to frustrate and confound with a level of complexity not normally present in a purely American lawsuit. It is imperative that attorneys become familiar with the laws that will govern data created in the EU so that the clients can properly set up their IT structures and a select a mode of procedure to streamline the flow of data should litigation ever occur.

[continued] JD Supra: Legal Articles – European Union E-Discovery Rules: What Every Attorney Should Know.