Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?

The General Data Protection Regulation (GDPR) is the primary legal framework governing data protection and privacy for all individual citizens of the European Union (EU) and the European Economic Area (EEA). Prisma Cloud provides a dedicated, out-of-the-box compliance standard specifically for GDPR. This standard includes a set of policies that map to GDPR articles and requirements, enabling organizations to continuously monitor their Amazon Web Services (AWS) workloads and other cloud environments for compliance with EU data privacy regulations.

B. EU Data Protection Directive 95/46/EC: This directive was superseded by the GDPR on May 25, 2018, and is no longer the active regulatory framework for EU data privacy.
C. ISO 27001: This is an international standard for Information Security Management Systems (ISMS). While it supports data protection, it is not specific to EU data privacy law.
D. Payment Card Industry 3.0: This refers to the PCI Data Security Standard (DSS), which is a global standard for securing payment card data, not general EU data privacy.

1. Palo Alto Networks, Prisma Cloud Administrator's Guide (Cloud Security Posture Management): "Compliance Standards and Frameworks". This official documentation lists "GDPR" as a supported, out-of-the-box compliance standard. It states, "Prisma Cloud offers the following predefined compliance standards and industry benchmarks that you can use to monitor your cloud deployments." The list explicitly includes GDPR.

2. Palo Alto Networks, Prisma Cloud Administrator's Guide (Cloud Security Posture Management): "View Compliance Details". This section explains how to use the compliance dashboard to assess adherence to standards like GDPR. It details how policies are mapped to specific sections of the chosen framework, demonstrating direct measurement against the regulation.

3. Official Journal of the European Union, REGULATION (EU) 2016/679 (General Data Protection Regulation): Article 1, Subject-matter and objectives. "This Regulation lays down rules relating to the protection of natural persons with regard to the processing of personal data and rules relating to the free movement of personal data." This confirms GDPR as the official EU regulation for data privacy.