On July 1st, 2012, the Article 29 Working Party (WP29), a group consisting of data protection authorities of all EU Member States, adopted a long-awaited opinion on cloud computing. While acknowledging the advantages of cloud computing, the opinion sets out a number of data protection issues that may arise from the wide-scale deployment of cloud computing services by both businesses and administrations. The opinion highlights that, in most scenarios, the cloud client is the controller of the personal data stored in the cloud and, therefore, it is the responsibility of the client to select a cloud service provider that can guarantee compliance with EU data protection legislation. The opinion then sets out a number of recommendations that cloud clients should bear in mind when selecting a cloud service provider.