Privacy Regulatory Model for the Cloud: A Case Study

Abstract

As more organizations move toward the use of cloud computing, inevitably they’ll be storing and/or processing personal data on the cloud. Organizations are putting themselves at risk if they’re not in tune with the privacy protection and legal requirements associated with the use of the cloud. Jurisdictions with omnibus privacy legislation that follows broadly the privacy guidelines developed by the Organisation for Economic Cooperation and Development (OECD) in 1980 usually have a number of legal provisions and regulatory guidance that can be used to protect and govern the processing of personal data on the cloud.

Using Hong Kong’s regulatory environment as an example, this article illustrates how these provisions and guidance can apply to the cloud.

Keywords: Cloud Hong Kong