http://goo.gl/5TZ7J

We've spoken about this a lot of times- the risks and benefits of using
'the ubiquitous cloud" for storage of business AND personal data.  Here'a a
piece specifically about using it for personal data and it lays out some
assurances you should seek.

"The client must obtain from the service provider, in a written contract,
all assurances for compliance with personal data protection regulations.
Particularly important among these are compliance with data integrity,
confidentiality, transparency towards data subjects, data isolation,
intervention on behalf of data subjects and portability. The client must
also ensure that it has the means of checking, for example by means of an
audit, the compliance by the service provider with all its obligations."

Along with this, and I've emphasized this before, receiving assurances that
YOUR DATA has the same level of protection if it is "tossed over the wall"
to a third party provider.

"The client must also ensure that the obligations which are incumbent upon
the cloud computing service provider are not weakened by the fact that the
latter itself uses subcontractors."

Larry
[log in to unmask]

-- 
*Lawrence J. Medina
Danville, CA
RIM Professional since 1972*

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]