Tools·SCOPE Europe (monitoring body)EN
Export
EU Cloud Code of Conduct (Art. 40 GDPR)
A transnational code of conduct for cloud providers acting as processors, approved by the Belgian DPA in May 2021 after the EDPB’s opinion, with a public register of the services verified against it. Business-to-business only; not (yet) a safeguard for transfers under Article 46.
When to use itYou check whether a cloud provider’s guarantees under Article 28 are backed by an approved code.
- Published by
- SCOPE Europe (monitoring body) (sector or standards body)
- Written for
- EU
- For
- processors, controllers
- Cost
- free
- Languages
- English
- Provisions
- GDPR Art. 40, GDPR Art. 28
View the standardeucoc.cloud
Description by overview.legal; the tool itself is the publisher’s.
How it connects
Other tools for the same task
AEPD Facilita RGPD (AEPD) The Spanish DPA’s questionnaire for businesses that process personal data with little risk (customers, staff, suppliers): from the answers it produces the minimum documents, such… ES ·calculator
Standard Baseline Informatiebeveiliging Overheid (BIO2) The information security baseline for all Dutch public bodies, BIO2 version 1.3 (January 2026), built on ISO/IEC 27001 and 27002:2022 with government-specific measures. Suppliers… NL ·Ministerie van BZK ·in Dutch
Standard Standard Data Protection Model (SDM), German DPAs The German supervisory authorities’ method for turning the GDPR’s requirements into technical and organisational measures, through seven protection goals (data minimisation,… DE ·Datenschutzkonferenz (DSK)
Standard Europrivacy: European Data Protection Seal (Art. 42 GDPR) The first certification scheme the EDPB approved as a European Data Protection Seal (Opinion 28/2022, submitted by the Luxembourg DPA), extended in 2026 to organisations outside… ECCP (Europrivacy) ·paid
Standard NIST Privacy Framework The US National Institute of Standards and Technology’s voluntary framework for managing privacy risk in an organisation, organised in functions (identify, govern, control,… US ·NIST