{"id":482,"date":"2014-08-12T11:41:42","date_gmt":"2014-08-12T08:41:42","guid":{"rendered":"http:\/\/jlaw.ro\/law-office\/?p=482"},"modified":"2014-08-12T11:43:29","modified_gmt":"2014-08-12T08:43:29","slug":"servicii-de-cloud-in-voga-dar-nu-lipsite-de-riscuri-juridice","status":"publish","type":"post","link":"https:\/\/jlaw.ro\/law-office\/servicii-de-cloud-in-voga-dar-nu-lipsite-de-riscuri-juridice\/","title":{"rendered":"Serviciile de cloud – \u00een vog\u0103, dar nu lipsite de riscuri juridice"},"content":{"rendered":"

\"cloud_computing_by_anxiousnut-d3racdu\"<\/a><\/p>\n

 <\/p>\n

C<\/i>loud computing <\/i>este un concept cool<\/i>, vehiculat des in domeniul IT \u0219i cu o cre\u0219tere vertiginoas\u0103. Potrivit unui raport al IHS Technology<\/span><\/a><\/span>\u00a0din februarie 2014, se estimeaz\u0103 c\u0103, p\u00e2n\u0103 \u00een 2017, companiile vor pl\u0103ti 235.1 mld.$ pentru servicii de cloud<\/i> \u2013 adic\u0103 de trei ori mai mult dec\u00e2t \u00een 2011. Printre gigan\u021bii care \u00ee\u0219i \u00eempart pia\u021ba de cloud<\/i> se num\u0103r\u0103\u00a0Amazon,\u00a0Google, Microsoft, Barracuda Networks, Dropbox, etc. \u2013 fiecare cu \u201especializarea\u201d sa de cloud<\/i>.<\/p>\n

Microsoft Azure la\u00a0ITCamp<\/span><\/strong><\/p>\n

\u00cen luna mai 2014, am participat \u00een calitate de speaker<\/em>\u00a0 la evenimentul de ni\u0219\u0103 ITCamp<\/span><\/a><\/span>\u00a0organizat la Cluj. Printre altele, o tem\u0103 intens abordat\u0103 de participan\u021bi\u00a0a fost folosirea Microsoft Azure. Iar exper\u021bii prezen\u021bi au dezb\u0103tut pe larg provoc\u0103rile de natura tehnic\u0103 privind aceast\u0103 platform\u0103 de cloud<\/i>.<\/p>\n

Dar este bine de \u0219tiut c\u0103, pe l\u00e2ng\u0103 cele tehnice, exist\u0103 \u0219i provoc\u0103ri legale deloc de neglijat \u0219i care pot influen\u021ba masiv activitatea \u201cjuc\u0103torilor\u201d din industrie. Motivul? Furnizorii de cloud<\/i> se confrunt\u0103 constant cu o dilem\u0103: ei trebuie s\u0103 furnizeze solu\u021bii c\u00e2t mai avantajoase \u0219i inovatoare din punct de vedere tehnic \u0219i comercial; dar, \u00een acela\u0219i timp, trebuie s\u0103 se conformeze regulilor privind protec\u021bia \u0219i securitatea datelor cu caracter personal (adic\u0103 cele care vizeaz\u0103 persoanele fizice). Or acest echilibru este uneori greu de atins.<\/p>\n

Evenimentul Microsoft de la Bucure\u0219ti<\/strong><\/span><\/p>\n

Microsoft Rom\u00e2nia\u00a0a v\u0103zut necesitatea de a aborda problematica datelor personale \u00een cloud<\/i>. Pe 4 iunie 2014, a organizat la Bucure\u0219ti un eveniment dedicat cloud computing<\/i>-ului, invit\u00e2nd chiar \u0219i un reprezentant al ANSPDCP<\/span><\/a><\/span> (autoritatea competent\u0103 \u00een domeniul datelor personale). \u00cen principiu, s-au abordat unele provoc\u0103ri din perspectiva serviciilor enterprise<\/i> oferite de Microsoft (Azure, Dynamics CRM Online \u0219i Office 365).<\/p>\n

Din experien\u021ba clien\u021bilor mei, \u0219tiu c\u0103 exist\u0103 unele aspecte controversate; \u0219i, a\u0219a cum m\u0103 a\u0219teptam, au fost multe \u00eentreb\u0103ri din sal\u0103. Iar la unele dintre acestea, r\u0103spunsurile reprezentantului ANSPDCP au ar\u0103tat clar faptul c\u0103, \u0219i \u00een viziunea autorit\u0103\u021bii, cloud<\/i>-ul are \u00een practic\u0103 unele \u201ezone gri\u201d care r\u0103m\u00e2n a fi interpretate de la caz la caz de c\u0103tre exper\u021bi.<\/p>\n

Dar ce ar trebui re\u021binut, pe scurt?<\/b><\/span><\/p>\n

Faptul ca exist\u0103 tipuri diferite de servicii \u0219i modele de cloud<\/i> care, \u00een practic\u0103, atrag consecin\u021be diferite, cu obliga\u021bii legale diferite. F\u0103r\u0103 o analiz\u0103 a principalelor caracteristici ale respectivei platforme de cloud<\/em>, nu pot fi identificate corect responsabilit\u0103\u021bile legale ale furnizorului.<\/span><\/p>\n

De exemplu, \u00een timp ce Microsoft Dynamics CRM\u00a0 e Software as a Service<\/i> (SaaS), Microsoft Azure e Platform as a Service<\/i> (PaaS) \u0219i Infrastructure as a Service<\/i> (IaaS) pentru Virtual Machines<\/i>.<\/p>\n

Deosebirile lor tehnice atrag \u0219i diferen\u021be din punct de vedere legal. Una dintre diferen\u021be este c\u0103, \u00een principiu, \u00een PaaS datele nu sunt re\u021binute \u0219i prelucrate de c\u0103tre furnizorul de cloud<\/i>. Ceea ce \u00eenseamn\u0103 c\u0103, de exemplu, clientul enterprise<\/i> al Microsoft (care, de obicei, doar pune platforma Azure la dispozi\u021bia clien\u021bilor proprii) nu colecteaz\u0103 datele cu caracter personal furnizate atunci c\u00e2nd ace\u0219tia creeaz\u0103 aplica\u021bii sau stocheaz\u0103 informa\u021bii \u00een Azure. \u00cen consecin\u021b\u0103, dac\u0103 acesta nu are acces \u0219i nu folose\u0219te datele personale stocate de propriii s\u0103i clien\u021bi \u00een Azure, nu ar trebui s\u0103 fie \u021binut de obliga\u021biile privind notificarea la autoritatea competent\u0103, implementarea unor anumite m\u0103suri de securitate sau a unor condi\u021bii speciale \u00een care datele pot fi dezv\u0103luite altor persoane, etc.<\/p>\n

\u00cen final \u00a0<\/span><\/b><\/span><\/p>\n

De multe ori, folosirea serviciilor de tip\u00a0cloud\u00a0<\/i>poate fi o zon\u0103 a nisipurilor mi\u0219c\u0103toare, din punct de vedere juridic. De aceea, e necesar\u0103 con\u0219tientizarea faptului c\u0103 implic\u0103 anumite riscuri. Dac\u0103 \u0219i cum pot fi acestea eliminate sau m\u0103car minimalizate, depinde de la caz la caz \u2013 \u00een func\u021bie de tipul de serviciu\u00a0cloud\u00a0<\/i>\u0219i de puterea de negociere a clientului.<\/p>\n

Ca regul\u0103, contractele de adeziune (de exemplu, cum sunt contractele\u00a0enterprise\u00a0<\/i>propuse de Microsoft clien\u021bilor s\u0103i-companii)\u00a0<\/i>\u00a0nu pot fi negociate. Dar \u00een cazul acelor servicii\u00a0cloud<\/i>\u00a0pentru care\u00a0nu<\/span>\u00a0se \u00eencheie contracte de adeziune, este indicat ca furnizorul de\u00a0cloud<\/em>\u00a0\u0219i clientul s\u0103 \u00eencerce s\u0103 negocieze unele clauze privind, de exemplu: func\u021bionalitatea \u0219i disponibilitatea serviciilor, locul stoc\u0103rii datelor, responsabilit\u0103\u021bile ambelor p\u0103r\u021bi privind datele personale, \u00a0proprietatea intelectual\u0103 \u0219i limitarea r\u0103spunderii.<\/p>\n

<\/div>\n
<\/div>\n
Imagine:\u00a0Licen\u021b\u0103 Creative Commons (CC)<\/span><\/a><\/span>, AnxiousNut pe\u00a0deviantart<\/span><\/a><\/span>.<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n
Acest articol a fost ini\u021bial publicat \u00een num\u0103rul 26<\/span><\/a><\/span> al revistei Today Software Magazine.<\/b><\/span><\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n
\n
\n

 <\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

  Cloud computing este un concept cool, vehiculat des in domeniul IT \u0219i cu o cre\u0219tere vertiginoas\u0103. Potrivit unui raport al IHS Technology\u00a0din februarie 2014, se estimeaz\u0103 c\u0103, p\u00e2n\u0103 \u00een 2017, companiile vor pl\u0103ti 235.1 mld.$ pentru servicii de cloud \u2013 adic\u0103 de trei ori mai mult dec\u00e2t \u00een 2011. Printre gigan\u021bii care \u00ee\u0219i \u00eempart […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,19,8,3,53,1],"tags":[91,90,61,60,49,59,62,63],"class_list":["post-482","post","type-post","status-publish","format-standard","hentry","category-aplicatii-mobile","category-contracte","category-itc","category-law","category-startups","category-uncategorized","tag-cloud","tag-contracte","tag-date-personale","tag-furnizor-de-cloud","tag-itcamp","tag-microsoft-azure","tag-paas","tag-saas"],"_links":{"self":[{"href":"https:\/\/jlaw.ro\/law-office\/wp-json\/wp\/v2\/posts\/482","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jlaw.ro\/law-office\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jlaw.ro\/law-office\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jlaw.ro\/law-office\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jlaw.ro\/law-office\/wp-json\/wp\/v2\/comments?post=482"}],"version-history":[{"count":27,"href":"https:\/\/jlaw.ro\/law-office\/wp-json\/wp\/v2\/posts\/482\/revisions"}],"predecessor-version":[{"id":511,"href":"https:\/\/jlaw.ro\/law-office\/wp-json\/wp\/v2\/posts\/482\/revisions\/511"}],"wp:attachment":[{"href":"https:\/\/jlaw.ro\/law-office\/wp-json\/wp\/v2\/media?parent=482"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jlaw.ro\/law-office\/wp-json\/wp\/v2\/categories?post=482"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jlaw.ro\/law-office\/wp-json\/wp\/v2\/tags?post=482"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}