Provider\u27s obligations for data protection and personal data protection in cloud computing

Uporaba računalništva v oblaku zaradi številnih prednosti, ki jih prinaša, sunkovito narašča. Uporabniki so v pretežni meri podjetja, saj jim fleksibilnost storitve olajšuje delo, obenem pa privarčujejo pri delovni sili, računalniški in programski opremi, za katero obveznost vzdrževanja in stalnega posodabljanja nosi ponudnik. Pri tem je zaskrbljujoče dejstvo, da s prehodom v oblak uporabnik izgubi nadzor nad podatki v oblaku. Varnost podatkov v oblaku je ključna problematika, ki se odpira v zvezi z računalništvom v oblaku. Poleg tega se pojavljajo pravna vprašanja glede porazdelitve odgovornosti med ponudnikom in uporabnikom. V magistrskem diplomskem delu je uvodoma predstavljena pogodba o računalništvu v oblaku, njene značilnosti ter značilnosti same storitve. Sledi prikaz tveganj za varnost podatkov, iskanje možnih rešitev in obravnava vidika odgovornosti za varnost podatkov v oblaku. Teoretični del naloge je podkrepljen z analizo splošnih pogojev pogodb o računalništvu v oblaku treh priljubljenih javnih oblakov. Posebna pozornost je namenjena tematiki varstva osebnih podatkov v oblaku s krajšo predstavitvijo Splošne uredbe o varstvu podatkov in analizo splošnih pogojev pogodb.Due to numerous benefits, usage of cloud computing is rapidly growing. Cloud computing customers are mainly enterprises because of flexibility of the service, which facilitates work, saving on manpower, computing equipment and software, while the obligation for maintenance and constant updating is on the provider. It is a matter of concern that with the transition to cloud the customer loses control over data in the cloud. Data protection is the key issue regarding cloud computing. Furthermore, legal questions arise related to the distribution of liabilities between a provider and a customer. Master’s thesis initially describes a cloud computing contract, its features and characteristics of the service. Afterwards, risks for data security are present, with finding possible solution and addressing the liability for data protection in the cloud. The theoretical element of the master’ thesis is supported by analysis of terms and conditions of cloud computing contracts, which covers three most popular public clouds. Special attention is given to personal data protection with a short presentation of General Data Protection Regulation and analysis of terms and conditions from this point of view