4 ms·
> Also, since SAP as a company isn't handling any of that data, SAP isn't really affected. I am not sure that is completely correct, considering SAP's cloud of
by generic92034 3y ago
> Also, since SAP as a company isn't handling any of that data, SAP isn't really affected.
I am not sure that is completely correct, considering SAP's cloud offerings.
- hef19898 3y agoWith EU based servers? Sure, GDPR applies. But so far I didn't hear anything about SAP not being compliant.
- generic92034 3y agoThat is correct, as far as I know. I was just objecting to SAP not being responsible for any PII data of their customers, in all cases.
- latortuga 3y agoI don't think the location of servers is relevant to GDPR. It's about storing and processing data of citizens of any EU member country.
- hef19898 3y agoServer location matters a lot.
- throwaway74902 3y agoIf I run my app on Azure, is Microsoft responsible for me breaking GDPR? SAP runs your instance, but isn't responsible for what you do with it.
- adra 3y agoIf they're deemed a data processors then yes in fact they do need to care about the application of the laws. SAP has user management at least in terms of companys' own users which will likely have PII.
- hef19898 3y agoThe personal data handled by SAP, the ERP system not the company, is very well compartementalized and accessible only need-to-know. Assuming proper user rights policies and roles are in place, but that is on SAPs client, amd not SAP themselves.
- generic92034 3y agohttps://www.sap.com/about/trust-center/data-privacy.html#active_tab_item_1621444195189 https://www.sap.com/about/trust-center/data-privacy.html#act...