art_28__para_1
1. Providers of data processing services shall make the following information available on their websites, and keep that information up to date: the jurisdiction to which the ICT infrastructure deployed for data processing of their individual services is subject; a general description of the technical, organisational and contractual measures adopted by the provider of data processing services in order to prevent international governmental access to or transfer of non-personal data held in the Union where such access or transfer would create a conflict with Union law or the national law of the relevant Member State.
← Article 28 · All articles · (a) →
Source: EUR-Lex (Cellar) · retrieved 2026-10-13 · Text as adopted (Official Journal); later amendments are not incorporated in this text.