As Microsoft is owned by a US company, as per US cloud act they will/might be stipulated to provide all clients data on azure, if US government requests for the same”. Customer would like to understand how their data will be protected in such a scenario.

Question

I am working one of the European Customer to Host there services in Azure. However, the customer has come back with a question from Compliance and data protection perspective.

a. Have we initiated a dialogue with the MS Azure regarding how they shall handle a request from a U.S authority if they request for customer data for European customer

b. Depending on what personal data and the amount of personal data, has the risk for the individual been assessed if the data were disclosed to the US authorities by customer?

Answer 1

Something here might help.

https://azure.microsoft.com/en-us/blog/3-reasons-why-azure-s-infrastructure-is-secure/

Answer 2

Thanks DSParrick, your link says about the how safe Infrastructure was build. My question more related about cloud act.

Answer 3

I'd suggest submitting a ticket here.

https://azure.microsoft.com/en-us/support/create-ticket/