Privacy Issues with Cloud Computing

The digital world is currently buzzing about Cloud Computing. Cloud Computing allows users to share information, data, applications, and software over a series of virtual networks. Essentially the need to store data on a hard drive or static server is becoming a thing of the past. Some examples of online services using Cloud Computing are:

• Second Life

• Google Apps

• Amazon’s Simple Storage Service

Most importantly, Cloud Computing allows users to:

• Collectively share information, data, and apps online,

• Access data and applications wherever they can connect online,

• Use various mobile devices to access their data and information.

Of course there are legitimate privacy concerns with so much user information stored on several virtual servers.  Current privacy laws require implementation of varied security measures depending on the nature of the information.  For example medical information, social security numbers, and tax information require a higher degree of security protection to prevent breaches. Considering the recent Twitter breach of information stored on Google Apps, there is concern about whether information stored on the “Cloud” can be adequately protected.  If companies that utilize Cloud Computing do not put adequate security measures in place, their are exposing themselves to significant liability.  Cloud Computing Service Providers should make it a standard practice to implement the same type of security measures in place as required for private networks.  Here are a few tips on adequate security measures for Cloud Computing Service Providers and Consumers.

Service Providers should:

• Require all persons having access to sensitive information sign non-disclosure/confidentiality agreements,
• Implement multiple level password protection for those having access to sensitive data.
• Require those having access to use code words,
• Restrict the amount of people having access to the personal information,
• Ensure the level of security measures implemented are consistent with current privacy laws.

Consumers should

Read privacy policies thoroughly before using a Cloud Computing Service.  Specifically consumers should thoroughly understand:

What type of personal information is collected,

What type of technology is used to collect the information,

What specific measures are in place to protect the personal information,

Where is the information stored.

Cloud Computing is definitely the future and here to stay.  However, the industry needs to tighten up their security measures in order to thrive.