Sunday, December 2, 2012

CLOUD COMPUTING AND DATA PROTECTION


by Raul Bernardino
Introduction

Nowadays, the cloud computing makes almost no boundary of the flow communications across the countries and nations. We can easily accessing any type of information that, we wish to have by using Google or other searching engines. We can also access as much as information for the shake solutions decisions from any information source or data source, from anywhere means from location of source and accessing from, and at any time.

It is quite difficult to talk about data protection over today cloud computing. The cloud computing is services that available over internet. These services can be accessed from anywhere by using the web browsers and where the users can easily to store their own data into the web-servers. Sometimes those services are available free and others have to pay base on what we have subscripted. For example Face- book, the social networking, where users of this site can log in to the site and uploading their pictures and videos for other members of the site (face-book) to view them or downloaded, sent messages and chatting among the members. The other examples of buying subscriptions are domains.

The advantages of cloud computing are flexible and easy to access, including saving a lot of Information Technology infrastructure cost, and contribute to the green environment.

The disadvantages are maybe about data security and data protection. Even we have very strong passwords to protect our data, the data still store in third party location.

Looking from the business perspective in the cloud computing, we can categorize the relevance issues into three main topics: They are data protection responsibility and compliance, data security and data location (Hazel Grant & Tessa Finlayson, 2009)

The data protection responsibility and compliance: If the business is located in the in UK, personal data will be subjected to the Data Protection Act 1998. All cloud computing services must comply with this Act. Other issue is data transferring across multi jurisdiction. The customer will be as a data controller and responsible for compliance, while cloud computing service as a data processor. Both must be clear who responsible on what. The customer responsible on the contain or material while cloud computing service responsible on the accessing (security), data lost recovery (data insurance) etc. These all should be stated or presented in the agreement or contracts.

Data security: far before sign of the contract, the data controller should have necessary information on how third part could access the data from different jurisdictions; get warranty from the service provider in which to protect personal data, have their own data security policy etc. 

Data location: The data controller has to aware that, local law may apply from where the data center servers are exists. Data will be moving geographical. Therefore service provider has no guarantee that the data to be restricted in one location or certain country only.

There are two approaches of data protection from the western world: US approach use self-regulation and market force while EU approach use government regulation and strict law. In EU where agreed the principle of data protection where base on idea of allowing appropriate data processing of personal information however with strict control on the permission or necessity, accuracy and accountability. In USA the data privacy is quite different from EU. By keeping market driven Federal Trade Commission has general guidance which appropriate privacy policies and enforce adherence to public policies.

References:

  • Federal Trade Commission [Online] Available from:  http://www.ftc.gov/     (Accessed Date: January 15, 2011) 

8 comments:

  1. Luckily in Timor-Leste, the constitution has mentioned about the privacies and data protection in articles 36-38.

    ReplyDelete
  2. Luckily in Timor-Leste, the constitution has mentioned about the privacies and data protection in articles 36-38.

    ReplyDelete
  3. Do you need Cloud Services? We are a Virtual IT MSP Company specializing in Technology Services that allow individuals, entrepreneurs and small businesses to simplify IT. Due to fast growing internet technologies, more and more companies rely on virtual services as opposed to traditional in-house staff and infrastructure. Utilizing virtual services will not only reduce your overhead expenses by over 50%, but it also eliminates the need for large investments and lessens any financial liability.

    ReplyDelete
  4. Of course there are lot of advantages of cloud computing, as everyone is able to access information anywhere. But security is the main disadvantage of it.
    online accounting software

    ReplyDelete
  5. I do appreciate your comments. Moreover I agree with Aldus's.

    ReplyDelete
  6. Cloud computing has drastically changed the way web developers used to work. Now with the multitude of server grids at the disposal of a user, web developers get an edge in procuring the functionality their online presences require.

    Cloud Migration
    Cloud Monitoring
    Multi Cloud
    Ecommerce Hosting

    ReplyDelete
    Replies
    1. You are totally right. I do appreciate your full insights of cloud computing. However security and law enforcement will be a huge challenges.

      Delete