The latest proposal from EU cybersecurity agency ENISA concerns an EU certification scheme (EUCS) which vouches for the cybersecurity of cloud services and determines how governments and companies in the bloc select a vendor for their business. The document retains key provisions contained in earlier drafts such as a requirement that U.S. tech giants set up a joint venture with an EU-based company to qualify for the EU cybersecurity label. Another provision states that cloud service must be operated and maintained from the EU, while all cloud service customer data must be stored and processed in the EU, with EU laws taking precedence over non-EU laws regarding the cloud service provider. The latest draft sets out the possibility for these tough requirements to be extended to the third highest security level. EU countries are now reviewing the latest draft after which the European Commission will adopt a final scheme.

---

Persons: OpenAI's, CCIA, ENISA, Alexandre Roure, Foo Yun Chee, Jonathan Oatis Organizations: European, Google, Microsoft, Big Tech, EU, Tech, European Banking Federation, European Savings Banks Group, Association for Financial Markets, Federation, Insurance, Thomson Locations: BRUSSELS, European Union, EU, Europe