+Dealing with investigation requests from government agencies (INQ)
---+Legal Assessment of Investigative Inquiries
---+Informing Cloud Customers about Investigation Requests
---+Conditions for Access to or Disclosure of Data in Investigation Requests
---+Limiting Access to or Disclosure of Data in Investigation Requests

Dealing with investigation requests from government agencies (INQ)

None

1. Yleiskatsaus

Otsikko Standardi
Legal Assessment of Investigative Inquiries Investigation requests from government agencies are subjected to a legal assessment by subject matter experts of the Cloud Service Provider. The assessment determines whether the government agency has an applicable and legally valid legal basis and what further steps need to be taken.
Additonal Criteria-
Supplementary Information - About the Criteria-
Informing Cloud Customers about Investigation Requests The Cloud Service Provider informs the affected Cloud Customer(s) without undue delay, unless the applicable legal basis on which the government agency is based prohibits this or there are clear indications of illegal actions in connection with the use of the Cloud Service.
Additonal Criteria-
Supplementary Information - About the CriteriaThis does not affect other legal or regulatory requirements that requires earlier information for cloud customers.
Conditions for Access to or Disclosure of Data in Investigation Requests Access to or disclosure of cloud customer data in connection with government investigation requests is subject to the proviso that the Cloud Service Provider's legal assessment has shown that an applicable and valid legal basis exists and that the investigation request must be granted on that basis.
Additonal Criteria-
Supplementary Information - About the Criteria-
Limiting Access to or Disclosure of Data in Investigation Requests The Cloud Service Provider's procedures establishing access to or disclosing data of cloud customers in the context of investigation requests from governmental agencies ensure that the agencies only gain access to or insight into the data that is the subject of the investigation request.
If no clear limitation of the data is possible, the Cloud Service Provider anonymises or pseudonymises the data so that government agencies can only assign it to those cloud customers who are subject of the investigation request.
Additonal Criteria-
Supplementary Information - About the Criteria-

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

Vaatimukset
Lähde Vaatimus

3. Liittyvät säädökset

Säädökset
Lähde Sääntely