“Legal, regulatory and technical aspects
of Cloud Computing
in international data transfers”
15 – 22 June 2020
The target group of this workshop include representatives of regulatory bodies, dealing with clould computing matters, telecommunications issues, consumer protection issues, cyber security issues, data protection issues.
At the end of the training, the participant should have gained an understanding
of the key aspects of:
- The concept of “cloud computing”
- The relevant legal framework relating to cloud computing
- Meaning of standardization in the context of securing cloud services
- Risk-based analysis of the application of cloud computing
- Description of participants to cloud contracts and its role in relation to personal data transfers outside the EU
- Adequate level of personal data protection
- The role of regulatory authorities in supervising the transfer of personal data by means of cloud services
- Modelling self-regulation of cloud services
- Methods of cloud audits
- Applications of Binding Corporate Rules to international data transfers based on cloud services
Lecture 1. Description of “cloud computing” in light of its technical characteristics and common definitions
Lecture 2. Identification of the relevant legal framework relating to cloud computing in the context of international data transfers
Lecture 3. Meaning of standardization in the context of securing cloud services on international level
Lecture 4. Risk-based analysis of the application of cloud computing in international data transfers – case studies
Lecture 5. Description of participants to cloud contracts and its role in relation to personal data transfers outside the EU
Lecture 6. Legal, regulatory and practical aspects in determining the “adequate level of personal data protection” of the recipient of personal data
Lecture 7. The role of regulatory authorities in supervising the transfer of personal data by means of cloud services – co-operation including joint inspections of EU and non-EU supervising authorities
Lecture 8. Modelling self-regulation of cloud services – discussing existing and future requirements of cloud providers and cloud clients
Lecture 9. Methods of cloud audits – the aim, scope, procedure and results
Lecture 10. Legal and practical aspects of the applications of Binding Corporate Rules to international data transfers based on cloud services
Andrzej Krasuski PhD, Legal advisor
Andrzej Krasuski holds a PhD degree in law and is a legal counsel (radca prawny) with twenty years of experience. He specializes in regulations referring to the telecommunications market, and in particular in telecommunications law, media law and personal data protection law. In his current work, he advises on complex matters regarding regulations on the telecommunications market (i.e. the imposition, change and lifting of regulatory obligations on specific telecommunications markets), co-operation between telecommunications companies, management of scarce resources, protection of data under telecommunications secrecy rules.
Another area of Andrzej Krasuski’s specialization is personal data protection and outsourcing. Andrzej’s experience includes, among other things, the optimization of data flow structures from a data protection point of view, single data protection verifications as well as complex and continuing compliance audits, legal assistance in preparation of documents evidencing the processing of data, and providing security for processed data. In addition, he has extensive experience in a broad range of aspects regarding international data transfers, including transfers beyond the European Economic Area. He has advised on various models of co-operation on the market, where personal data plays a key role. In addition, he has advised many clients on data protection in complex regulatory proceedings. He has experience in the implementation of SOX regulations and has advised on data protection aspects in FCPA proceedings.
In September 2015, the fourth edition of the Commentary to the Telecommunications Law in Poland, the author of which is Andrzej Krasuski, was published by Wolters Kluwer. He is the author of many other books and scientific publications on telecommunications, outsourcing and data protection subject, including inter alia: Umowa o świadczenie usług telekomunikacyjnych (Agreement for the provision of telecommunications services) (LexisNexis 2005), Outsourcing danych osobowych w działalności przedsiębiorstw (Personal data outsourcing in business operations) (LexisNexis 2010), Dane osobowe w obrocie tradycyjnym i elektronicznym. Praktyczne problemy (Personal data in traditional and electronic trading. Practical problems) (WoltersKluwer 2012).
He has extensive experience in proceedings before the President of the Office of Electronic Communications in Poland, Inspector General for Personal Data Protection and the President of the Office of Competition and Consumer Protection as well as the European Commission. Andrzej Krasuski has extensive experience in proceedings before administrative courts and universal courts on matters related to telecommunications activity and data protection matters.
Andrzej Krasuski was a partner in international law firms, heading for many years telecommunications and data protection practices. He combines his law practice with lecturing activity, co-operating inter alia with the National Institute of Telecommunications. He has been praised for many years in international rankings as one of the leading lawyers specializing in telecommunications law, media law and personal data protection law.
Course Date (Duration)
15 – 22 June 2020 (8 days)
E-Learning Course. The course methodology will be as follows:
15 – 22 June 2020
- Each day from 15 to 19 June 2020 there will be made available two recorded video lectures, which are recorded in the face-to-face ITU Centre of Excellence workshop organised by National Institute of Telecommunications in Poland. In total there are 10 video lectures during the course.
- Discussion forum will be organized based on discussion topics given on a daily basis, where students are highly encouraged to participate and interact with instructors and other students.
- Quiz test will be assigned on the last day of the course, 22 June 2020.
- All announcements for all events (lectures, quiz and forum) will be given in a timely manner (prior to the event) by the course tutor.
At the end of the course participants will take part in a written test checking the level of knowledge gained during the training.
Registration and Payments
STEP 1 – Login into ITU Academy
In order to access this course you need to have a valid account in ITU Academy. First, you should login into the ITU Academy with your ITU Academy account via the login page: https://academy.itu.int
If you have no valid account in ITU Academy Create new account
STEP 2 – Registration into this course
After login into ITU Academy, select the course “Legal, regulatory and technical aspects of Cloud Computing in international data transfers” by using the link:
1. Invitation letter
2. Training Outline
Subskrybuj nasz Newsletter
Otrzymasz dostęp do darmowych materiałów szkoleniowych
i nie przegapisz żadnej z istotnych naszych inicjatyw.