Compatibility of the European Certification Scheme for Cyber Security for Cloud Services (EUCS) with Schrems II

Letter from EDPB to ENISA


The EDPB (European Data Protection Board) has published a letter to ENISA (European Union Agency for Cybersecurity) regarding the compatibility of the European Certification Scheme for Cybersecurity for Cloud Services (EUCS) with Schrems II. 
In the letter, the EDPS reiterates his position from the May 19 letter to ENISA that the final certification scheme should be consistent with the obligations set out in the GDPR and facilitate compliance with the GDPR by cloud service providers and their customers, also taking into account the Schrems II ruling.

The letter can be accessed at this link.