Today, my brother shared a standard called ISO/IEC 19944:2017 with me. You can download it for free. Here is the brief introduction of this standard.
ISO/IEC 19944:2017,Information technology — Cloud computing — Cloud services and devices: Data flow, data categories and data use.
This document is applicable primarily to cloud service providers, cloud service customers and cloud service users, but also to any person or organization involved in legal, policy, technical or other implications of data flows between devices and cloud services.
ISO/IEC 19944:2017 provides a description of the ecosystem of devices and cloud services and the related flows of data between cloud services, cloud service customers cloud service users and their devices.These are necessary to provide guidance about how data is used on the devices in the context of the cloud computing ecosystem and the associated location and identity issues that emerge from such use.
This document proposes a scheme for the structure of data use statements that can be used by cloud service providers to help cloud service customers understand and protect the privacy and confidentiality of their data and their users’ data through increased transparency of policies and practices.
Download ISO/IEC 19944:2017 pdf now.