A right too far? Requiring cloud service providers to deliver adequate data security to consumers. (24th September 2016)

• Record Type: Journal Article
• Authors: McGillivray, Kevin
• Is Part Of: International journal of law and information technology. Volume 25:Number 1(2017)
• Page Start: 1
• Page End: 25
• Publication Date: 2016-09-24
• Subjects: consumer protection -- contracts -- cloud computing -- data security -- digital content -- unfair contract terms; Computers -- Law and legislation -- Periodicals; Legal research -- Data processing -- Periodicals; Information storage and retrieval systems -- Law -- Periodicals; Information technology -- Periodicals; 343.0999
• DOI: 10.1093/ijlit/eaw011
• Languages: English
• ISSNs: 0967-0769

Abstract

Abstract: The European consumer has substantial rights when contracting for goods or services online. Nevertheless, unlike European data protection law, specific requirements for adequate data security practices are largely absent from European legislation governing Business-to-Consumer (B2C) transactions. The following article evaluates the application of current EU consumer protection requirements and appraises the extent to which they oblige service providers to include data security or information regarding data security practices in contract terms. In addition to considering the core European consumer protection instruments currently in place, the article evaluates proposed legislation for digital goods and assesses its potential application to contract terms commonly offered by cloud service providers (CSPs). Furthermore, the article provides some comparative analysis of data security requirements from the USA.