Abstract
Disclosing personal data for a purpose not known by data subjects is a practice that the 2018 EU General Data Protection Regulation (GDPR) is supposed to prevent. This article overviews the major aspects of the GDPR related to provision, use, and maintenance of Cloud services and technologies.