The French government's "Commission nationale de l'informatique et des libertés" (CNIL--National Commission for Information and Freedoms) has published a Reference Model for digital lockbox services.

The Reference Model describes the required characteristics of the products or services which offer individuals (as opposed to organisations) the ability to securely store personal data.

All "cloud services" are covered by this document.

The digital lockbox services covered by this Reference Model must guarantee the integrity, the accessibility, and the confidentiality of the stored data with appropriate security measures.

To conform to the document, the product or service must conform to all 22 requirements of the Reference Model.

Some basic requirements:

·         The data and metadata stored in the digital lockbox are required to be encrypted and under the exclusive control of the user and his/her delegates.

·         Access to the contents of the digital lockbox must be protected by a strong authentication mechanism.

·         Recovery of the content must be a standard, cost-free offering of the service.

This Reference Model applies solely to digital lockbox products and services offered in France, its territories and its dominions. Its requirements conform with the French national standards NF Z42-013 and NF Z42-020, with ISO 14641-1, and with the Council of Europe "Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data" (no. 108).

The Reference Model may be found at the URL http://bit.ly/MtMuBE
(http://www.legifrance.gouv.fr/affichTexte.do;jsessionid=CF3A7394F851E34E0F85212B683EF6CC.tpdjo13v_1?cidTexte=JORFTEXT000028569235&dateTexte=&oldAction=rechJO&categorieLien=id&idJO=JORFCONT000028568705).


Best regards,

Fred
------------------------------------------------------------------------------------
Frederic J. Grevin
Vice-President, Records Management
New York City Economic Development Corporation
www.nycedc.com<http://www.nycedc.com/>
[log in to unmask]<mailto:[log in to unmask]>
212-312-3903 (w)
212-618-5722 (f)


List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]