+INQ-02 Informing Cloud Service Customers about Investigation Requests
---+INQ-02.01B
---+INQ-02 Supplementary Information - Complementary Customer Criteria

INQ-02 Informing Cloud Service Customers about Investigation Requests

1. Overview

INQ-02.01B

The cloud service provider informs the affected cloud service customer(s) without undue delay, unless the applicable legal basis, on which the government agency's request is based, prohibits this or there are clear indications of illegal actions in connection with the use of the cloud service.

Supplementary information

This does not affect other legal or regulatory requirements that requires earlier information for cloud service customers.

INQ-02 Supplementary Information - Complementary Customer Criteria

Cloud service customers ensure with suitable controls that such notifications are received and assessed from a legal perspective according to their own specifications and possibilities.

1.1 References

Informing Cloud Customers about Investigation Requests

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements
Source	Requirement

3. Related Regulations

Regulations
Source	Regulation

BSI -
EN: Publications of the Bundesamt für Sicherheit in der Informationstechnik (BSI, Federal Office for Information Security), https://www.bsi.bund.de/. This is not an official BSI website. Only the versions published by the BSI are authoritative.
- Cloud Computing Compliance Criteria Catalogue C5:2026: © BSI, licensed under CC BY-ND 4.0; content unchanged, converted into the GRCA format.
- Criteria Catalogue C3A – Criteria enabling Cloud Computing Autonomy: © BSI, licensed under CC BY-ND 4.0; content unchanged, converted into the GRCA format.
- Cloud Computing Compliance Criteria Catalogue C5:2020: © BSI, licensed under CC BY 4.0 according to the BSI C5 FAQ; converted into the GRCA format.
DE: Veröffentlichungen des Bundesamts für Sicherheit in der Informationstechnik (BSI), https://www.bsi.bund.de/. Kein amtlicher Auftritt des BSI. Maßgeblich sind allein die vom BSI veröffentlichten Fassungen.
- Kriterienkatalog Cloud Computing C5:2026, englische Fassung: © BSI, lizenziert unter CC BY-ND 4.0; Inhalt unverändert, in das GRCA-Format umgewandelt.
- Kriterienkatalog C3A – Criteria enabling Cloud Computing Autonomy: © BSI, lizenziert unter CC BY-ND 4.0; Inhalt unverändert, in das GRCA-Format umgewandelt.
- Kriterienkatalog Cloud Computing C5:2020, englische Fassung: © BSI, lizenziert unter CC BY 4.0 laut C5-FAQ des BSI; in das GRCA-Format umgewandelt.