DataCenterNews Asia logo
Specialist data center news for Asia
Story image

Opinion: GDPR requirements & opportunities for colocation providers

By Contributor
Mon 15 Oct 2018
FYI, this story is more than a year old

Article by Schneider Electric cloud and service provider segment president Mark Bidinger

The European General Data Protection Regulation (GDPR) law was enforced in May, but is still confusing to some colocation providers as to which requirements they must comply with and how. So, I talked to an expert on the subject and came away with a clear answer: “It depends.”

GDPR is all about ensuring the privacy of consumers’ personal data and giving them more control over how data is used and for how long.

It’s important because it applies to any organisation of any size that stores or processes any kind of personal data on EU residents.

For all intents and purposes, that means just about any EU company to the extent each holds data on its own employees. But it also applies to companies outside the EU that hold data on EU residents – again, that’s a lot of companies.

GDPR basics: Data controllers vs. data processors

Mark Bailey is a partner at the UK law firm Charles Russell Speechlys and an expert on various aspects of technology law, including data center contracts. In fact, he presented on a GDPR-related topic at the International Colocation Club event in Paris, 2016.

Bailey says the extent to which the GDPR applies to a colocation provider depends on whether the company simply houses servers for customers, or whether it provides more “hands on” services that puts it more directly in touch with customer data.

The GDPR defines two classes: data controllers and data processors.

All colocation companies are data controllers, because they provide “the purposes, conditions and means of the processing of personal data,” according to the GDPR.

But colocation companies that are controllers in relation to their own employees may nonetheless have limited responsibility under GDPR in relation to their own customer data (if you’re not doing any of these things and can’t do any of these things you may not be subject to the GDPR at all).

You may be considered a data processor if you can access, manipulate or disseminate customer data, or if you provide storage, encryption or analysis of data, even if it’s anonymised. If you can interact with and/or remove hard drives or have access to servers such as to reboot them, you’re also considered a data processor.

“Whilst not to the same extent as controllers, data processors now have far more responsibility (and liability) under GDPR,” Bailey says, “and customers are now vetting providers as to whether they’re compliant.”

GDPR basics: Compliance for colocation providers

“Ensuring compliance with GDPR can be monitored by a few basic measures which will help mitigate companies that are not,” Bailey says.

First is having the appropriate policies and procedures in place – and following them. That typically entails paying attention to standards and certifications, such as the ISO 27001 information security standard.

“We’re seeing data center providers increasingly starting to look at certifications and use them as badges of quality,” Bailey says. “Just because you have them doesn’t mean you automatically comply with GDPR. The standards need to be properly complied with, so they seamlessly operate in a chain with customer requirements.”

Physical security is another key requirement. But GDPR doesn’t spell out any specific technologies; rather, it talks in general terms about “adequate” technical and organisational means to protect data.

“Two things we look for in data centers are biometric access controls and CCTV (security cameras),” Bailey says.

The key is having proper policies in place around those controls, such as how long you keep access records and CCTV recordings.

“If your data center is next door to a public street with thousands of people walking by every day, you’ll have a different privacy impact assessment from one in the middle of the desert.”

The business opportunity GDPR brings to colocation providers

The level of security your colocation data center provides can be a differentiator that provides opportunity for customers who are concerned about GDPR.

“Operators need to be curious enough about what customers are doing, so they have the right environment in place,” says Bailey.

Industries such as healthcare and finance, for example, are likely to have more stringent requirements, as is any company that processes credit cards.

“So be aware of it, and make sure you have the right controls and the right information available to give to customers around specific controls for things like CCTV.”

Be GDPR compliant, your customers are expecting you to be

Remembering that GDPR applies to any company that processes or stores data on EU citizens – even if that company is not physically located within the EU – is necessary.

“If you maintain a marketing database or have contact with European citizens, technically the law still does apply,” Bailey says.

Responsibilities may be somewhat limited, but it’s best to check on what they are.

Related stories
Top stories
Story image
Sustainability
Legrand unveils Nexpand, a data center cabinet platform
Legrand has unveiled a new data center cabinet platform, Nexpand, to offer the necessary scalability and future-proof architecture for digital transformation.
Story image
Sustainability
Daikin and SP Group to build new energy efficient district cooling system
The project, set to be complete by 2025, will create a system with a cooling capacity of up to 36,000 refrigerant tonnes (RT). 
Story image
Sisense
Data and analytics could be key to higher selling prices in APAC
Sisense's latest report has found that almost half of data professionals in APAC think customised data and analytics can create better selling prices for their products.
Story image
Colocation
Digital Edge chooses Nortek’s StatePoint for new data center
Digital Edge will use Nortek's StatePoint liquid cooling technology in its new data center, the first commercial colocation operator in Asia to do so.
Story image
SaaS
Cisco reveals new tech, intends to prevent network issues
Cisco has revealed new technology intended to mitigate costly disruptions by aiding IT teams in learning, predicting and planning.
Story image
Hyperscale
SpaceDC partners with Aofei for data center sales in Asia
SpaceDC has partnered with Aofei Data International to sell Aofei's data centers, CDN and SDN in China.
Story image
BitTitan
Why tenant consolidation is critical to cloud success
Consolidating tenants can improve cost management, security and engagement after a flurry of reactive activity following the widespread shift to remote operations.
Story image
Tech Data
Tech Data to use Pluribus Networks’ cloud solutions in APAC
Tech Data says using Pluribus Networks' Unified Cloud Fabric solution will be a "game-changer" for its data center infrastructure customers and partners.
Story image
Sustainability
RDA and MVGX partner for sustainable data center development
Red Dot Analytics (RDA) and MetaVerse Green Exchange (MVGX) have entered a strategic partnership to make Singapore's data center development and operations more sustainable.
Story image
Talend
Talend introduces new data health solutions for businesses
Talend has announced its latest version of Talend Data Fabric, with the release of Talend Trust Score enabling data teams to establish a foundation for data health.
Story image
Power / Energy
DigitalBridge makes $30 million equity investment in LEDC
Leading Edge Data Centres (LEDC) has announced it has secured an AUD$30 million equity investment in its regional edge network from an affiliate of DigitalBridge Group, DigitalBridge.
Story image
Data Center
Preventing downtime costs and damage with Distributed Infrastructure Management
Distributed Infrastructure Management (DIM) can often be a lifeline for many enterprises that work with highly critical ICT infrastructure and power sources.
Story image
Sustainability
ABB unlocks sustainable energy upgrades for data centers
ABB says its new microgrid solutions will get data centers ready for the green revolution and use their own energy sources with a reduced carbon footprint.
Story image
Sustainability
Grasping the opportunity to rethink the metrics of a sustainable data centre
A data centre traditionally has two distinct operations teams: the Facility Operations team, and the IT Operations team. Collaboration between them is the key to defining, measuring, and delivering long-term efficiency and sustainability improvements.
Story image
Microsoft
SAS Viya on Microsoft Azure to deliver 204% return - study
The Forrester Total Economic Impact study finds SAS Viya on Microsoft Azure brings a 204% return on investment over three years.
Softiron
For every 10PB of storage run on HyperDrive vs. comparable alternatives, an estimated 6,656 tonnes of CO₂ are saved by reduced energy consumption alone over its lifespan. That’s the equivalent of taking nearly 1,500 cars off the road for a year.
Link image
Story image
Data Center
Digital Edge to build South Korea's largest commercial data center
The project will be the largest commercial data center project in South Korea with total IT power of 120MW and a capital investment of more than KWR$1 trillion.
Story image
Power / Energy
Keysight Technologies introduces new next-gen DPT solution
Keysight Technologies has announced its new next-generation Double-Pulse Tester (DPT) with the PD1550A Advanced Dynamic Power Device Analyser.
Story image
Hyperscale
Seagate, Phison partnership to improve data center offering
Seagate and Phison have announced plans to expand their SSD portfolio to assist data center customers in reducing total cost ownership (TCO).
Story image
Surveillance
Genetec launches new enclosure management system for data centers
Genetec has released a new enclosure management solution that will give data centers the ability to secure, monitor and manage access to racks and cabinets remotely.
Story image
Sustainability
NTT launches IoT Services for Sustainability offering
"We know what actions are needed to build a more sustainable future and have a robust suite of technologies available to help deliver this impact."
Story image
Digital Transformation
EdgeConneX enters Indonesia, plans for data center campus
EdgeConnex has announced it is expanding its presence in Asia with the acquisition of GTN Data Center in Indonesia.
Story image
Sustainability
Siemens showcases new automated solutions for data centers
Siemens has implemented new automated solutions and AI in the Baltic region's largest data center, providing insight into the future of data center management.
Story image
APAC
Odaseva expands in APAC and UK with more security features
Odaseva, a data platform for Salesforce, is establishing new headquarters in London as well as a new data center in India.
Story image
Research
New strategies for cloud-native attacks - Aqua Security
New research from Aqua Security reveals attackers are using more sophisticated techniques to target cloud-native environments.
Story image
Sustainability
AyalaLand and FLOW partner for data center development
AyalaLand Logistics Holdings Corp (ALLHC) and FLOW Digital Infrastructure have entered into a framework agreement to bolster the development of carrier-neutral data centers in the Philippines.
Story image
Sustainability
Power at the edge: the role of data centers in sustainability
The Singaporean moratorium on new data center projects was recently lifted, with one of the conditions being an increased focus on power efficiency and sustainability.
Story image
Data Center
Equinix enters Africa, closing US$320 million acquisition of MainOne
The completion of the acquisition augments Equinix's long-term strategy to become a leading African carrier-neutral digital infrastructure company.
Story image
Red Hat
Red Hat expands capabilities to provide streamlined application development in cloud
"Application development is undergoing significant change and developers need tools to support this transformation."
Story image
Cybersecurity
A10 Networks finds over 15 million DDoS weapons in 2021
A10 Networks notes that in the 2H 2021 reporting period, its security research team tracked more than 15.4 million Distributed Denial-of-Service (DDoS) weapons.
Story image
Microsoft
Microsoft unveils adaptive accessories for disability access
Microsoft is introducing an expansive Inclusive Tech Lab to give people with disabilities greater access to technology through new software features and adaptive accessories.
Story image
Akamai
Akamai announces new products across security, computing
Akamai has announced a series of new products and updates to existing products across its security and compute product lines, including its entry into the infrastructure as a service (IaaS) market.
Story image
Infrastructure
Report - Data investment the key to better business growth
New research from Digital Realty has revealed that almost half (47%) of IT leaders globally believe their business investment in data systems and infrastructure is a key obstacle or concern.
Story image
Disaster Recovery
Kacific launches emergency connectivity offering, CommsBox
Kacific has announced the release of a new emergency connectivity offering designed to rapidly provide broadband service in emergency or disaster zones.
Story image
Digital Transformation
Multiplex, NEXTDC making strong progress on S3 data centre
Multiplex has made a significant achievement on Stage 1 of NEXTDC’s S3 data centre, ‘topping out’ the structure in the Artarmon on Sydney’s lower North Shore.
Story image
Storage
Energy storage demand momentum continues, says BYD
BYD has announced an expansion of its production capacities and will deliver 250,000 units of its energy storage system, BYD Battery-Box Premium.
Story image
Sustainability
AirTrunk boosts Japan presence with West Tokyo data center
AirTrunk is planning to build TOK2, a new hyperscale data center in Japan which will strengthen the company’s presence in the country.
Story image
Sustainability
YTL unveils development of solar-powered data center campus
YTL Power (YTL) has announced the development of a 500MW data center campus in Johor, the first data center park in Malaysia to be powered by solar energy.
Story image
Kacific
Kacific launches service to combat enterprise power outages
Kacific Broadband Satellites Group has launched Enterprise Backup, a new service intended to protect organisations against frequent power outages.
Story image
Sustainability
Video: 10 Minute IT Jams - SoftIron CMO on Data Center Sustainability
In a special Power/Energy feature week presentation, we are joined by SoftIron CMO Andrew Moloney.
Exabeam
Find out how a behavioural analytics-driven approach can transform security operations with the new Exabeam commissioned Forrester study.
Link image
Story image
Data Center
CBRE finds record levels of investment in APAC data centers
CBRE's new report finds direct investment in the sector more than doubled in 2021, surpassing investment volumes for the past four years combined
Story image
Telstra
Telstra expands business offerings in the Philippines
The expansion aims to offer more choice for customers and enhance connectivity into the Philippines, and within the country.
Story image
Data Center
Tier III Ready Datacenter solutions shortlisted for major awards
"These designs will accelerate data center clients' own Tier III certification, reduce the cost, and fast-track their time to market."