<p><span style="font-family:Microsoft Yahei">ISO 27018 is the first international protection standard for private data in the cloud. Cloud service providers (CSPs) using the ISO / IEC 27018 standard must operate under the following five basic principles:<br /> <strong>1. Consent:</strong> CSPs may not use the personal data received for advertising and marketing unless expressly permitted by customers. In addition, CSPs will not tie the agreement to use the services to the CSP&#39;s use of personal data for advertising and marketing;<br /> <strong>2. Control: </strong>customers have clear and detailed control over how their information is used;<br /> <strong>3. Transparency:</strong> CSPs must inform customers of where their data is stored, and the purpose of the subcontractor to process personal authentication information, and make a clear commitment on how their personal data is processed; &nbsp;<br /> <strong>4. Communication:</strong> in case of any default, the CSPs should inform customers of the default, save the complete record of the default event and respond to the event;<br /> <strong>5. Independence and yearly audit:</strong> audits on CSPs&#39; compliance documents by third-party institutions must maintain the consistency of service and standards. Besides, the supervision obligations of the audit institutions need to be trusted by customers. To maintain compliance, CSPs must undergo audits by third-party institutions each year.</span></p> <p>&nbsp;</p> <p><span style="font-family:Microsoft Yahei"><strong>Ping An Cloud is the first financial cloud that passes the ISO 27018 certification, the most authoritative, most stringent, most widely accepted and applied information security standard in the world. It also marks the birth of a cloud platform with the highest security standards and subject to the most stringent </strong><strong>supervision</strong><strong>.</strong></span></p> <p>&nbsp;</p> <p><span style="font-family:Microsoft Yahei">ISO27018 is an international code of practice that focuses on the protection of personal data in the cloud. Ping An Cloud complies with this internationally accepted code of practice and has passed the independent third-party assessment, which reflects Ping An&#39;s commitment to customers in respecting privacy and protecting customer data.</span></p>