# INQ-02 Informing Cloud Service Customers about Investigation Requests

- Domain: INQ – Dealing with Investigation Requests from Government Agencies
- Since C5:2020: changed
- Web page: https://c5.patrickscheid.de/en/inq-02/

## Basic criterion

### INQ-02.01B

The cloud service provider informs the affected cloud service customer(s) without undue delay, unless the applicable legal basis, on which the government agency's request is based, prohibits this or there are clear indications of illegal actions in connection with the use of the cloud service.

**Supplementary information:**

This does not affect other legal or regulatory requirements that requires earlier information for cloud service customers.

## Complementary customer criteria

Cloud service customers ensure with suitable controls that such notifications are received and assessed from a legal perspective according to their own specifications and possibilities.

## Changes since C5:2020

From BSI's C5:2026 changelog.

**Basic criterion:**

Specified that it is the government agency's request that is based on the applicable legal basis.

---

Source: BSI C5:2026, machine-readable edition v1.0.1, © Federal Office for Information Security (BSI) 2026, reproduced unchanged under CC BY-ND 4.0 (https://creativecommons.org/licenses/by-nd/4.0/). Change notes: BSI C5:2026 Changelog, © BSI 2026, CC BY-ND 4.0. Unofficial presentation, not affiliated with BSI.