news image

IT-GRC Congress 2026: Cloud Compliance Under Regulatory Stress Testing

In modern IT governance, there is now virtually no alternative to using U.S. hyperscalers, even though their implementation continues to involve legal hurdles. As part of this year’s IT-GRC Congress, taking place June 29–30 in Berlin, our expert Bernd Kohler (Senior Security Consultant) will deliver an in-depth presentation addressing the complex tension between functional requirements and regulatory restrictions.

Under the title “Clouds Over the Atlantic: Cloud Computing and Data Protection in the Tension Between the GDPR, the US CLOUD Act, and the EU Data Act” (in German) he and his co-presenter will analyze the current legal landscape for European companies.

The presentation will focus on the profound dilemma facing today’s IT infrastructures: Functional dependence on U.S. hyperscalers is increasingly colliding with strict European data protection standards. In this context, Bernd Kohler examines in detail the risks that arise when the U.S. CLOUD Act claims far-reaching access rights for U.S. authorities, while the GDPR, as a direct counterpoint, demands strict sovereignty over European data sets. In addition, appropriate measures for risk mitigation as well as the central importance of the EU Data Act for ensuring interoperability and legally compliant cloud exit strategies will be presented.

For more information about the lecture and the event (in German), please click here: https://www.grc-kongress.de/veranstaltung-88756-0-wolken-ueber-dem-atlantik-cloud-computing-und-datenschutz-im-spannungsfeld-von-dsgvo-us-cloud-act-und-eu-data-act.html