The French Data Protection Authority (CNIL) adopted a recommendation on January 23, which provides a frame of reference for the concept of a “digital safe” and for the implementation of a certification label in relation to these storage services.
The term “digital safe” is now defined by the CNIL as “secure data storage space, accessible online, allowing storage of electronic documents under various formats (texts, photos, scanned papers).” The emergence of this new storage system raises many issues, especially in terms of the integrity and confidentiality of personal data stored there.
The Commission, which specializes in the protection of personal data, has created this trust indicator in order to show the high level of protection of personal data provided by online data storage services when they implement appropriate measures.
In order to benefit from the label, two cumulative requirements have to be met by service providers: the provider must operate the online data storage service and offer services directly to the general public.
In its recommendation, the CNIL also provided a specific regime in relation to health data. Due to their sensitivity, the storage of such data requires prior certification of the provider by the CNIL.
This certification label is the first label made in relation to products, following the path of the pre-existing labels created by the CNIL in relation to training and audit practices.