@misc{Wiewiórowski_Wojciech_Rafał_Administrator_2021, author={Wiewiórowski, Wojciech Rafał}, copyright={Copyright by Wydawnictwo Uniwersytetu Wrocławskiego Sp. z o.o., Wrocław 2021}, copyright={Copyright by CNS}, address={Wrocław}, howpublished={online}, year={2021}, publisher={Wydawnictwo Uniwersytetu Wrocławskiego}, language={pol}, abstract={Contractual safeguarding of the rights of the data controller and the rights of data subjects forms one of the most serious issues concerning cloud-based e-services of public administration. Cooperation between public authorities in the EU member states, EU institutions, and international organizations has contributed in 2019–2021 to the significant change of contractual terms, technical safeguards, and default settings of cloud services created for public administrations by the most powerful software developers and internet service providers. The article discusses the results of an investigation that the European Data Protection Supervisor (EDPS) undertook in 2019 to assess the legal and practical implications of the use of Microsoft products and services by European Union institutions, bodies, offices and agencies. The investigation made several key findings. Most importantly, it found that the licensing agreement between Microsoft and the EU institutions allowed Microsoft to unilaterally define and change certain parameters for processing data on behalf of the institutions and to amend its contractual data protection obligations. It also assessed technical measures the European Commission had put in place to stem the flow of personal data generated by Microsoft’s products and services — mainly telemetry data — being sent to the company. The assessment led to a general recommendation that all EU institutions test a revised and comprehensive approach, share the knowledge and technical solutions they have developed to prevent unauthorized data flows to Microsoft, and inform each other of any data protection issues they identify with products or services.}, type={text}, title={Administrator i podmiot przetwarzający w usługach chmurowych dla administracji publicznej : wnioski ze sporu między administracją unijną a Microsoftem}, keywords={personal data, controller, processor, cloud, e-government}, }