ICO Welcomes STAR Registry, Urges Caution
CLOUD COMPUTING—UKJuly 26, 2012
The Information Commissioner’s Office (ICO) has welcomed a new online platform for prospective cloud computing users but cautions that organisations not simply rely upon provider suggestions, Out-Law.com reports. The Security, Trust & Assurance Registry (STAR), operated by the Cloud Security Alliance, allows providers to submit “self-assessment reports” to document their compliance with best practices. An ICO spokesman said because a provider may be registered with STAR “does not absolve the organisation who collected the data of the legal responsibilities.” The ICO is also developing guidance on legal requirements for organisations storing data in the cloud, the report states, and is reminding firms to notify the agency if they plan to process personal data.