Cybersecurity in Cloud Industry: Legal Obligations and Liabilities under European Regulations & Technological Advancements

Absztrakt

Aim: This article examines the cybersecurity weaknesses associated with cloud computing and the relevant legal regulations within the European Union that address these issues. The topic looks into the responsibilities and legal issues surrounding cloud cybersecurity. It explains the roles of cloud actors, such as controllers and processors, and how contracts—such as Service Level Agreements (SLAs)—can help mitigate cybersecurity threats. Finally, the paper addresses the contemporary trends shaping cloud security, such as artificial intelligence (AI) and blockchain technology.

Methodology: This article utilizes a doctrinal legal analysis method, systematically reviewing relevant European regulations (GDPR, NIS2 Directive, Cybersecurity Act), contractual frameworks, and academic literature. Sources were selected based on their authority, relevance, and currency, focusing specifically on cybersecurity obligations, liability issues, and emerging technologies like AI and Blockchain. Through comparative analysis and synthesis, the research identifies key legal interpretations and technological impacts on cloud cybersecurity.

Findings: Ensuring cybersecurity in the cloud environment is possible, but it remains a complex task. It is a shared responsibility of the cloud parties. However, many gaps and challenges may still exist. That is why employing technological innovations would enhance the security levels in the cloud thanks to the capabilities they offer. Generally, when applied properly, these measures and techniques would improve the overall security of the cloud environment, leading to crucial legal and economic outcomes for the cloud stakeholders in the market.

Value: Recently, cloud-computing technology has been evolving as a general-purpose technology whose impact and adoption spans all sectors of the economy. Crucially, its overall cybersecurity is a pivotal concern. While regulations and technologies offer exciting potential pathways for detecting and proving cybersecurity threats and malicious behaviors in the cloud ecosystem, their deployment raises new legal and technical concerns. This article calls attention to the need for several cloud security requirements, such as pre-contractual risk assessments, improved regulatory effectiveness, and the establishment of credible cybersecurity certification systems. Ultimately, this contributes to enhancing the overall security of the cloud environment.