When it comes to computing in the cloud, the default contract from many major cloud providers puts the onus for any privacy problems on the customer--even if the provider is at fault for the breach, Steven J. Vaughan-Nichols writes in a report published in the San Francisco Chronicle. "You should ask questions about data security and privacy during the preliminary stages, even before you get to the contract," warns Tanya Forsheit, CIPP, of Info Law Group. "You should ask them what kind of privacy and security controls they have, whether they'll let you audit their security and what they will agree to in regards to liability." Vaughan-Nichols notes that "when it comes to cloud computing, it's better to be safe than sorry regarding both the legal and technical issues." Editor's Note: This year's Privacy Academy will feature multiple breakout sessions related to cloud computing.
Full Story