Clouds with data protection certificate
Versicherungswirtschaftlicher Datendienst GmbH (VDG) and Uniscon GmbH are the first companies to be certified according to the Trusted Cloud Data Protection Profile (TCDP). They received the certificates issued by TÜV Informationstechnik GmbH (TÜViT).
The Trusted Cloud Data Protection Profile is a new testing standard for data protection certification. It was developed as part of the "Trusted Cloud" program of the German Federal Ministry for Economic Affairs and Energy (BMWi).
The foundations for the Trusted Cloud Data Protection Profile (TCDP) for cloud services were developed by data protection experts on behalf of the BMWi within two years. The TCDP follows the data protection certification according to the Federal Data Protection Act. It maps the legal requirements for commissioned data processing in a test standard.
TCDP certificate creates legal certainty
Thanks to TCDP certification, companies can easily see whether the cloud services they use comply with the legal data protection guidelines. According to the current legal situation, companies must check their cloud service providers themselves for data protection compliance, for example when they participate in tenders.
Since this is usually too time-consuming for medium-sized companies in particular, the TCDP certification of cloud services represents a considerable relief for user companies. It automatically creates legal certainty and thus makes own audits superfluous.
The TCDP is currently being further developed in a pilot project called "Data protection certification for cloud services". The consortium responsible for this has been working since September 2015 on behalf of the BMWi and under the direction of TÜViT. All relevant players in the field of data protection certification are involved in the consortium, in particular data protection supervisory authorities, providers of cloud services of different sizes, providers of testing and certification services as well as IT and data protection associations and institutions.
The services of VDG and Uniscon tested within the framework of the TÜViT certification received a certificate valid for two years in each case, which proves data protection conformity in accordance with TCDP.
For more information, see: www.tuvit.de
