Compliance with the relevant privacy and data protection (P & DP) laws (by geography) represents, both for customers and service providers, an essential factor for the success of any cloud computing services implementation. Cloud service customers and cloud service providers must work together to find viable solutions by implementing appropriate agreements and controls. The outcome should focus on ensuring defined roles and the attribution of due care and due diligence responsibilities. The P & DP regulations affect not just those whose personal data is processed in the cloud (the data subjects), but also those (the cloud service customers) using cloud computing to process others' data, and those providing cloud services used to process that data (the cloud service providers). Key data privacy roles are the following:
- Data subject: An identifiable subject...