Google: Digital Music Case Has Cloud Law Implications – Informationweek (Thomas Claburn)

In an effort to defend the legal basis of cloud computing, Google on Wednesday asked a New York court for permission to file an amicus curiae, or friend-of-the-court brief, in a record industry lawsuit against ReDigi, an online market that facilitates the resale of digital music files.

A letter from the law firm representing Google, Fenwick & West, warns against granting the preliminary injunction requested by plaintiff Capitol Records. “A premature decision on incomplete facts could create unintended uncertainties for the cloud computing industry,” the letter states.

The court, however, denied Google’s request, on the basis that the parties in the lawsuit should be able to address the issues without assistance.

ReDigi describes itself as a used record store for digital music. It offers consumers a way to buy and sell pre-owned digital songs.

Record companies don’t like this idea because they assume people purporting to sell digital songs are actually just making copies, in violation of copyright law. Capitol Records sued ReDigi last month for copyright infringement, alleging just that.

via Google: Digital Music Case Has Cloud Law Implications – Cloud-computing – Platform as a Service – Informationweek.

Can cloud unravel the data-sharing puzzle? | Cloud | ZDNet UK (Lori MacVittie)

People think the cloud can overcome the problems that have derailed big data-sharing efforts in the past. Those hopes may be misplaced, says Lori MacVittie.

The term big data has come to mean big headaches for IT organisations and big problems for consumers. Privacy is a growing concern as more and more data is not only collected but voluntarily shared by consumers in exchange for free access to applications and functionality.

Those wondering how much sites such as Facebook might know about them have to jump through hoops to find out and are likely to be surprised by how many personal details websites actually store.

The TV documentary Erasing David, screened on More 4 in 2010, detailed an attempt by film maker David Bond to do just that — find out how private his identity really is. After deliberately disappearing for a month, he hired detectives to track him down.

Before his disappearing act, Bond spent weeks trying to find out just how much information various websites held on him. Big data took on a whole new meaning as he sat at a desk, poring over more than 1,000 printed pages from Facebook alone.

via Can cloud unravel the data-sharing puzzle? | Cloud | ZDNet UK.

CIF: Data security tops cloud concerns | IT PRO (James Stirling)

This was the finding of the latest survey from the Cloud Industry Forum (CIF), which showed 62 per cent of its respondents citing the issue. Data privacy also reared its head, being quoted by 55 per cent of respondents as a significant concern.

As more legacy companies move to offer cloud computing as part of their portfolio, they have played down the concerns around security. However, even with industry heavyweights singing its security praises, customers are far from trusting the cloud model.

It is time to focus on giving customers solid answers to their security fears and removing the ‘fear, uncertainty and doubt’ from their minds, according to CIF member Simplexo.

The firm’s chief technology officer (CTO), Simon Bain, said: “I am obviously a believer in using the ‘cloud’ as a way forward for both personal and corporate life.”

“However, there are certain guidelines that I think need to be adhered to before we all start throwing our hard disks away and placing everything in to the hands of others.”

via CIF: Data security tops cloud concerns | IT PRO.

e-Discovery in The Cloud Not As Simple As You Think – Forbes

While organizations are utilizing cloud-based solutions more and more, eDiscovery from those solutions often remains an afterthought. In many cases, there is little consideration of how information in the cloud will be placed on legal hold, or how it will be accessed, reviewed and produced in response to litigation or regulatory requests. While there seems to be a widespread assumption that information in the cloud is at an organization’s fingertips at all times with the touch of a search button, that is not necessarily the case.

A large majority of respondents to our “The Cloud and eDiscovery” survey are using cloud-based solutions, ranging from hosted email archiving to popular applications like Salesforce.com and QuickBooks. Companies are knowingly or unknowingly storing discoverable information assets in the cloud. But the real question they should be asking is, “Do we have a plan in place for eDiscovery should the need arise?”

eDiscovery Plan

Overwhelmingly, the answer is no. Only 16% of respondents indicate that an eDiscovery plan is in place for cloud-based information management solutions. Granted, only 26% actually responded that they do not have an eDiscovery plan in place, but what is truly scary is the 58% who don’t even know if a plan exists. This means that many organizations, when they face an investigation or litigation, will be left scrambling in a reactive firefight to collect information from the cloud. That will inevitably lead to higher costs and more difficulty making informed legal decisions quickly.

Any organization utilizing cloud-based solutions to store information needs to have eDiscovery plans for each one of those solutions. Such plans need to define access protocols, service-level agreements for how quickly information can be produced, documentation for chain of custody and any kind of advanced functionality (e.g., content analytics for Early Case Assessment) that will be included.

via e-Discovery in The Cloud Not As Simple As You Think – Forbes.

Law Firms Limit Use of Cloud Computing Due To Security Concerns | JD Journal

Security is important no matter what field you are in. When it comes to law firms this is especially important. Law firms use several types of technology to handle their documents and other processes. While technology managers in law firms were previously interested in cloud computing they are reducing their drive towards it citing security concerns. They are focusing on the security of their information more according to the studies done by The American Lawyer. One of the driving forces behind this is clients asking the firms to detail their policies in security whenever they are working with the firm.

When a survey was done of the ones using the cloud computing, the main functions used are items that are non-core . For example e-discovery and human resources are the bulk of the applications used. Of those surveyed only 8% say they are using the cloud for document management. The biggest drawback sited was their concerns for security. Among the findings that the survey produced the budgets for technology are averaging around $4.7 million for the firms. This is an increase of 7% from last year.

A problem that seems to be complicating security is the increased use of personal devices in the workplace. The CIOS are managing this successfully they report by using the new generation of management software for the mobile devices. One example of that is Good Technology INC’s Good For Enterprise and MobileIron’s Virtual Smartphone Management Platform. These help to deal with the issues that arise in the office because of more occurrences of using mobile data in the offices. This is likely to increase as well each year as more and more new mobile devices come out.

While all the firms that were surveyed still use the BlackBerry phones, there are 96% of those surveyed that have users on iOS systems. Those numbers are up from 2010 with those numbers were only 77%. Android devices have also gone up from 43% to 67% this year. This shows that more and more law firms are increasing their use of the iPhone and iPad as well as other options in the mobile industry.

via Law Firms Limit Use of Cloud Computing Due To Security Concerns | JD Journal.

Corporations and Their Lawyers Look to the Cloud for DIY E-discovery | Law.com

When it comes to e-discovery, corporations and law firms are constantly seeking new ways to drive up efficiency while keeping their costs low. A new survey released by legal technology firm Kroll Ontrack reveals that many are looking to do-it-yourself (DIY) discovery platforms to achieve that balance.

The firm conducted the survey in September in preparation for this week’s launch of its Verve e-discovery DIY platform. Respondents included 100 of the Fortune 1000 companies and 100 medium-to-large law firms. The survey looked at the factors driving corporate decisions to outsource versus keeping e-discovery inside.

“We’ve seen the e-discovery market evolve and mature, and organizations are increasingly looking toward DIY e-discovery software platforms,” says Michele Lange, director of product line management for legal technologies at Kroll.

“Corporations and law firms are increasingly doing some of it in-house,” says Lange.

Eighty-six percent of respondents said they are conducting some aspect of e-discovery on their own. “I think this is a much higher percentage than most people that follow the market would guess,” she says.

via Corporations and Their Lawyers Look to the Cloud for DIY E-discovery.

Embracing Cloud Data Protection and Recovery | SYS-CON MEDIA

Cloud Computing Journal: How fast will the last remaining barriers to enterprise-wide cloud adoption melt away – are secure public clouds feasible, for example, or only private ones?

Alan Dayley: Cloud computing has been on the fringe for many years and with different names. But like any monumental shift in technology, the momentum has been slowly building and is on the verge of exploding. Secure public clouds are very feasible, and may be more secure than a local IT environment, as cloud providers understand the importance of ensuring the privacy of customers’ data and information and can do so in a more scalable way. SMB/SMEs will continue to look to public cloud computing to reduce overhead and to better manage their IT needs. A key need and current headache is data protection. Small businesses can embrace cloud data protection and recovery through a company like i365 to ensure that their data is secure and always available.

Cloud Computing Journal: What is the biggest new dimension of consumer cloud computing? Is it Cloud Telecoms, Cloud TV, Cloud Music, or what?

Dayley: At the end of the day what’s important to technology users are their applications and their data, whether this be personal pictures and music files or corporate databases. The newest trend is ensuring access to these applications and data in the way the customer wants to access it. i365 helps customers achieve peace of mind that their data is always available, no matter what the circumstance or even possible disaster may happen at the customer site.

Cloud Computing Journal: How much of an influence on cloud adoption is the US Government’s continuing support of cloud strategies for all government agencies?

Dayley: The US Government has historically been slow to adopt technology (except in the case of defense and intelligence) so seeing the rapid move to adopt cloud computing for other departments with the promise of cost savings and availability reinforces not only the viability of the cloud but readily helps adoption.

via Embracing Cloud Data Protection and Recovery | SYS-CON MEDIA.

French Data Protection Authority Launches Public Consultation on Cloud Computing : : Privacy and Information Security Law Blog

On October 17, 2011, the French Data Protection Authority (the “CNIL”) launched a public consultation on cloud computing (the “Consultation”). The Consultation seeks to gather opinions from stakeholders (clients, providers, consultants) regarding cloud computing services for businesses, to identify legal and technical solutions that address data protection concerns while taking into account the economic interests involved.

  • The Consultation addresses several specific topics about personal data protection in the cloud computing context, including:
  • The definition of cloud computing
  • Cloud computing providers as data processors
  • Applicable law (i.e., what law applies to cloud computing stakeholders?)
  • Regulation of data transfers (e.g., what legal instruments are best suited to regulate cloud computing? Would binding corporate rules for data processors be an appropriate legal mechanism for transferring personal data to cloud computing service providers?)
  • Data security (e.g., cloud-specific risks and proposed security measures)

via French Data Protection Authority Launches Public Consultation on Cloud Computing : : Privacy and Information Security Law Blog.

How global laws protect your data | Cloud technology | guardian.co.uk

In February last year, three Google executives were handed suspended six month prison sentences by an Italian court for violating the privacy of a boy with Down’s Syndrome by allowing the website to broadcast video of him being bullied in a school in Turin. Although the video had been uploaded in Italy back in 2006, it had been processed by servers in the US and Ireland. No content had been hosted in Italy, but Google’s Italian office was enough to give the Italian courts jurisdiction.

For companies wanting to store data in the cloud there is a minefield of data protection laws to negotiate, so it is essential to know which country your data is physically stored in. “Most organisations don’t even know what data they have,” says Tony Lock, programme director at IT services consultancy Freeform Dynamics. “They are unsure where all the data is and once they’ve found it they are unsure how to protect it.”

The European Union’s Data Privacy Directive is crucial for UK firms. Created to facilitate the free movement of sensitive private information within Europe, it also makes it hard for data to be moved outside the region. Implemented across Europe but with local variations, the requirement for UK firms is to take “appropriate technical and organisational measures” to protect data. Italy goes further and sets out what those measures should be and Denmark requires internet transmission of such data to be encrypted.

But which laws apply, for example, to a British company storing data about UK customers via a contract with a US cloud provider whose servers are located in Poland? At the moment – all three. Within the EU, a company can be prosecuted if it has an established presence in the form of an office and staff, equipment it owns or operates or if it just makes use of a data centre or equipment in a European country.

via How global laws protect your data | Cloud technology | guardian.co.uk.

Cloud Computing Case Clarifies Applicability of U.S. Privacy Law to Non-U.S. Nationals : Electronic Discovery Law

The Ninth Circuit Court of Appeals, in its October 3, 2011 decision in Suzlon Energy Ltd v. Microsoft Corporation, has taken another step in defining the rights of people to protect their emails from being disclosed in civil court proceedings.  The question before the Suzlon court was whether a party can require a U.S. electronic communication service provider to produce emails stored on a U.S. server for the account of a non-U.S. national without regard to the safeguards and restrictions imposed by the Electronic Communications Privacy Act of 1986 (ECPA).  The court answered with a clear “no,” stating that the protections of the ECPA against unrestricted disclosure of emails by an electronic communication service provider apply to non-U.S. nationals as well as to U.S. citizens.

via Cloud Computing Case Clarifies Applicability of U.S. Privacy Law to Non-U.S. Nationals : Electronic Discovery Law.