Data Protection Frequently Asked Questions

Huawei Cloud processes the following types of data:

● Personal data: various types of information recorded electronically or otherwise relating to an identified or identifiable natural person, excluding information that has been anonymized. When you are interacting with Huawei Cloud, Huawei Cloud collects personal data that is sometimes required, for example, to provide you with certain services. We collect your personal data in the following scenarios: When you use a Huawei ID, we collect your username, mobile number, email address, and account information; when you use the address management service, we collect your recipient name, detailed address, postal code, and mobile number. For more scenarios, see the Privacy Statement.

Huawei Cloud respects and protects your personal data in accordance with Huawei Cloud Privacy Statement and other applicable laws. Huawei Cloud collects, stores, and uses your personal data in compliance with the data minimization principle, and takes comprehensive measures to secure your personal data.

● Content data: data stored or processed during the use of Huawei Cloud services, including but not limited to documents, software, images, and audio and video files. You have the control over your content data. You are responsible for the authenticity, accuracy, legality, and security of your content data. Huawei Cloud provides a wide range of security services for you to improve security and reduce data security risks.

Huawei Cloud has many regions and AZs deployed around the world and offers high-speed global network connections and localized services. You can select a region to purchase and deploy services as needed. The region you select is where your content data is stored. We will never move your content data across regions without your express authorization. For example, if your services are in a city around Singapore and you want to store your content data only in Singapore, you can select the Singapore region to purchase and deploy services.

For more information about Huawei Cloud regions and AZs, see the global infrastructure distribution on Huawei Cloud website.

Content data: You can decide where your content data is stored. Huawei Cloud will not transfer your content data to other regions unless required by applicable laws or explicitly authorized by you. If you need to transfer your content data across borders and need assistance from Huawei Cloud, you can contact us and authorize Huawei Cloud to transfer your content data. We will then provide necessary assistance in compliance with applicable laws and regulations.

As a cloud infrastructure and service provider, we understand your concerns about data security. We always comply with local laws and regulations on data security. Without your explicit consent, we will never use, or even access, your non-public content data.

Huawei Cloud has created a sound, trustworthy, sustainable data security governance system based on the shared responsibility model, in compliance with laws, regulations, and obligations specified in "Your Content" and "Your Security" in Huawei Cloud Customer Agreement, and by referring to international and industry data security standards and best practices. The system includes organization responsibilities, regulatory requirements, process guidance, technical tools, and measurement and verification of security controls. We will take appropriate management, physical, and technical measures to ensure the security of our cloud infrastructure and cloud services and provide systematic and effective security and compliance capabilities for your content data on the cloud.

However, you also need to understand that you have control over your content data on the cloud, and Huawei Cloud is only the trustee for it. Building a cloud data security system depends on the security capabilities provided by the cloud service provider and appropriate security measures you take in the cloud. You shall be responsible for the legitimacy, security, accuracy, integrity, and reliability of your content data, including but not limited to developing and implementing appropriate security regulations (such as user management and access control), deploying appropriate cloud security services, implementing appropriate security configurations, and installing vulnerability patches in a timely manner. You are responsible for obtaining and maintaining any notice, consent, or authorization related to your content. We will not assume any obligations or liabilities related to your content, unless otherwise specified in laws.

You can use cloud security services and features, such as Data Security Center (DSC), Data Encryption Workshop (DEW) , Database Security Service (DBSS), Cloud Bastion Host (CBH) and Cloud Certificate Manager (CCM) to help you manage data security. To improve security and compliance, you can count on our security services and solutions, such as Managed Detection Response(MDR) and the DJCP solution.

Huawei Cloud uses security channels or protocols, such as Virtual Private Network (VPN) and TLS, at the application layer, and certificate management, to safeguard data in transit over the Internet.

Huawei Cloud not only ensures the security of data transmission on the cloud, but also provides you with high-performance, high-reliability, and low-latency network transmission. Huawei Cloud uses private lines provided by different carriers to establish connections for high reliability. If one private line fails or the entire network of a carrier fails, traffic automatically fails over to another private line provided by another carrier, to ensure service continuity.

When you delete content data stored in a Huawei Cloud service, the service will delete the data immediately. However, some services that provide a recycle bin or other function to protect your data from accidental deletion. These features will retain the data for a certain period of time. For more details, see the user guide of related services on the Huawei Cloud website. You can search for keywords such as Recycle Bin and Data Destruction on the Huawei Cloud website to view the data deletion retention periods specified for different services.

You can view more details about "Grace Period and Retention Period" on our website. If yearly/monthly resources are not renewed or pay-per-use resources are unpaid after the retention period ends, the data stored in the resources will be deleted. The yearly/monthly resources will be released, and the pay-per-use resources will be deleted. More details are available at https://support.huaweicloud.com/intl/en-us/usermanual-billing/en-us_topic_0083039587.html.

Before deleting an account, you need to close the account. After the account is closed, the account enters the retention period, and, after the retention period expires, the data stored in Huawei Cloud will be deleted and cannot be restored. The retention period for different services is explicitly described in the corresponding user guide. During this retention period, you can still use your account to log in to Huawei Cloud and view the account and expenditure details. After the retention period expires, your account will be automatically deleted and can no longer be used. More details are available at https://support.huaweicloud.com/intl/en-us/usermanual-account/en-us_topic_0149890045.html.

When the lifecycle of a storage medium ends, it will be degaussed or physically shredded to destroy data securely.