Law Applicable to Cloud Computing Contracts Concluded with Consumers under Regulation 593/2008, According to the CJEU Case Law
Vol.14,No.1(2020)
The undoubted popularity of cloud computing stems in particular from the fact that the provider can simultaneously offer access to his or her computing resources to an almost unlimited number of users located in different countries. Although this feature brings significant benefits to the provider, it also raises serious questions regarding the law governing the contract. The concerns become especially relevant in the case of contracts concluded between a consumer and a professional due to the limits of the choice of law and the special rules protecting consumers.
The article analyses the law applicable to cloud computing contracts concluded with consumers. The considerations focus on the special provisions regarding consumer protection. Contrary to some comments, the article claims that the current legal framework is sufficient to determine the applicable law, although this task is not without doubts.
Applicable Law; Cloud Computing; Contract Law; International Private Law
p. 83–104
Krzysztof Żok
Adam Mickiewicz University in Poznań
Department: Faculty of Law and Administration
Rank: Adjunct
[1] Andrews, C.D. and Newman, J.M. (2013) Personal Jurisdiction and Choice of Law in the Cloud. Maryland Law Review, 73. https://doi.org/10.2139/ssrn.2227671
[2] Bogdan, M. (2011) Website Accessibility as Basis for Jurisdiction under the Brussels I Regulation. Masaryk University Journal of Law and Technology, 5 (1).
[3] Bradshaw, S., Millard, Ch. and Walden, I. (2011) Contracts for Clouds: Comparison and Analysis of the Terms and Conditions of Cloud Computing Services. International Journal of Information Technology and Law, 19 (3). https://doi.org/10.1093/ijlit/ear005
[4] Brussels Convention on jurisdiction and the enforcement of judgments in civil and commercial matters, 1968, (1972/L 299/32). Available from: https://curia.europa.eu/common/recdoc/convention/en/c-textes/brux.htm [Accessed 13 January 2020].
[5] Castro, C., Reed, Ch. and de Queiroz, R. (2013) On the Applicability of the Common European Sales Law to some Models of Cloud Computing Services. European Journal of Law and Technology, 4 (3). Available from: http://ejlt.org/article/view/186/409 [Accessed 13 January 2020].
[6] Celestine, C.M. (2013) “Cloudy” Skies, Bright Futures? In Defense of a Private Regulatory Scheme for Policing Cloud Computing. Journal of Law, Technology & Policy, 1.
[7] Council Directive 93/13/EEC of 5 April 1993 on unfair terms in consumer contracts. Official Journal of the European Communities (1993/95-L-29), 21 April. Available from: http://data.europa.eu/eli/dir/1993/13/oj [Accessed 13 January 2020].
[8] Council Regulation (EC) No 44/2001 of 22 December 2000 on jurisdiction and the recognition and enforcement of judgments in civil and commercial matters. Official Journal of the European Union (2001/12-L/1), 16 January. Available from: http://data.europa.eu/eli/reg/2001/44/oj [Accessed 13 January 2020].
[9] De Filippi, P. and McCarthy, S. (2012) Cloud Computing: Centralization and Data Sovereignty. European Journal of Law and Technology, 3 (2). Available from: http://ejlt.org/article/view/101 [Accessed 13 January 2020].
[10] De Filippi, P. and Belli, L. (2012) Law of the Cloud v Law of the Land: Challenges and Opportunities for Innovation. European Journal of Law and Technology, 3 (2). Available from: http://ejlt.org/article/view/156 [Accessed 13 January 2020].
[11] Directive 2000/31/EC of the European Parliament and of the Council of 8 June 2000 on certain legal aspects of information society services, in particular electronic commerce, in the Internal Market ('Directive on electronic commerce'). Official Journal of the European Communities (2000/L-178/1), 17 July. Available from: http://data.europa.eu/eli/dir/2000/31/oj [Accessed 13 January 2020].
[12] Directive 2011/83/EU of the European Parliament and of the Council of 25 October 2011 on consumer rights, amending Council Directive 93/13/EEC and Directive 1999/44/EC of the European Parliament and of the Council and repealing Council Directive 85/577/EEC and Directive 97/7/EC of the European Parliament and of the Council. Official Journal of the European Union (2011/L-304/64), 22 November. Available from: http://data.europa.eu/eli/dir/2011/83/2018-07-01 [Accessed 13 January 2020].
[13] Directive (EU) 2019/770 of the European Parliament and of the Council of 20 May 2019 on certain aspects concerning contracts for the supply of digital content and digital services. Official Journal of the European Union (2019/L-136/1), 22 May. Available from: http://data.europa.eu/eli/dir/2019/770/oj [Accessed 13 January 2020].
[14] Dropbox. Main page. [online] Available from: https://www.dropbox.com [Accessed 13 January 2020].
[15] Dropbox. (2019) Dropbox Terms of Service. [online] Dropbox. Available from: https://www.dropbox.com/terms?view_en#terms [Accessed 13 January 2020].
[16] Dropbox. (2019) Join Us Around the World. [online] Available from: https://www.dropbox.com/jobs/locations [Accessed 13 January 2020].
[17] Dropbox. (2020) Contact Dropbox Support. [online] Dropbox. Available from: https://www.dropbox.com/support [Accessed 13 January 2020].
[18] Facebook. (2019) Terms of Service. [online] Facebook. Available from: https://www.facebook.com/legal/terms [Accessed 13 January 2020].
[19] Facebook. (2020) Facebook. [online] Facebook. Available from: https://www.facebook.com [Accessed 13 January 2020].
[20] Google. (2019) Google Cloud Platform Terms of Service. [online] Available from: https://cloud.google.com/terms/ [Accessed 13 January 2020].
[21] Haibach, G. (2015) Cloud computing and European Union private international law. Journal of Private International Law, 11 (2). https://doi.org/10.1080/17441048.2015.1067994
[22] Irion, K. (2015) Your Digital Home is No Longer Your Castle: How Cloud Computing Transforms the (Legal) Relationship Between Individuals and Their Personal Records. International Journal of Law and Information Technology, 23. https://doi.org/10.2139/ssrn.2628598
[23] Judgment of 16 October 2008, Bundesverband, C-298/07, EU:C:2008:572.
[24] Judgment of 14 May 2009, Ilsinger, C-180/06, EU:C:2009:303.
[25] Judgment of 7 December 2010, Hotel Alpenhof, C-585/08 and C-144/09, EU:C:2010:740.
[26] Judgment of 6 September 2012, C-190/11, Mühlleitner, EU:C:2012:542. https://doi.org/10.7328/jurpcb2012279148
[27] Judgment of 14 March 2013, Česká spořitelna, C-419/11, EU:C:2013:165.
[28] Judgment of 17 October 2013, Emrek, C-218/12, EU:C:2013:666.
[29] Judgment of 28 January 2015, Kolassa, C-375/13, EU:C:2015:37. https://doi.org/10.1097/01.COT.0000469376.29114.0b
[30] Judgment of 25 January 2018, Schrems, C-498/16, EU:C:2018:37.
[31] McGillivray, K. (2016) A Right Too Far? Requiring Cloud Service Providers to Deliver Adequate Data Security to Consumers. International Journal of Law and Information Technology, 25. https://doi.org/10.1093/ijlit/eaw011
[32] Mell, P. and Grance, T. (2011) The NIST Definition of Cloud Computing. Recommendations of the National Institute of Standards and Technology. [online] Gaithersburg: National Institute of Standards and Technology. Available from: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-145.pdf [Accessed 13 January 2020]. https://doi.org/10.6028/NIST.SP.800-145
[33] Microsoft. (2019) Microsoft Cloud Agreements by Region and Language. [online] Available from: https://docs.microsoft.com/en-us/partner-center/agreements [Accessed 13 January 2020].
[34] Microsoft. (2020) Microsoft Office Locations Around the World. [online] Available from: https://www.microsoft.com/en-us/worldwide.aspx [Accessed 13 January 2020].
[35] Microsoft. (2020) Microsoft. [online] Available from: https://onedrive.live.com/about/engb/ [Accessed 13 January 2020].
[36] Regulation (EC) No 593/2008 of the European Parliament and of the Council of 17 June 2008 on the law applicable to contractual obligations (Rome I). Official Journal of the European Union (2008/177-L/6), 4 July. Available from: http://data.europa.eu/eli/reg/2008/593/oj [Accessed 13 January 2020].
[37] Regulation (EU) No 1215/2012 of the European Parliament and of the Council of 12 December 2012 on jurisdiction and the recognition and enforcement of judgments in civil and commercial matters (recast). Official Journal of the European Union (2012/351-L/1), 20 December. Available from: http://data.europa.eu/eli/reg/2012/1215/2015-02-26 [Accessed 13 January 2020].
[38] Rustad, M.L. and Onufario, M.V. (2012) Reconceptualizing Consumer Terms of Use for a Globalized Knowledge Economy. University of Pennsylvania Journal of Business Law, 14 (4).
[39] Spotify. (2019) Spotify Terms and Conditions of Use. [online] Available from: https://www.spotify.com/legal/end-user-agreement/ [Accessed 13 January 2020].
[40] Spotify. (2020) About Us. [online] Available from: https://www.spotify.com/about-us/contact/ [Accessed 13 January 2020].
[41] Wauters, E., Lievens, E. and Valcke, P. (2014) Towards a Better Protection of Social Media Users: a Legal Perspective on the Terms of Use of Social Networking Sites. International Journal of Law and Information Technology, 22. https://doi.org/10.1093/ijlit/eau002
Copyright © 2020 Masaryk University Journal of Law and Technology