Cloud Computing: Legislative and Regulatory Frameworks Presentation to AREGNET Ria M. Thomas 29 April 2014 Occid-OrientStrategies

Agenda  Introduction  Defining the Issue – Key Elements  Cloud Computing – Advantages of Adoption  Cloud Computing – Challenges / Barriers to Adoption  Jurisdiction of Telecommunications Regulators  Potential Legislative and Regulatory Frameworks – Key Issues - Cloud Readiness - Balance and Protection of Interests - Relevant Laws, Regulations and Standards - Coordination and Harmonization  Questions / Comments Occid-OrientStrategies 2

Defining the Issue “Ubiquitous, convenient and on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service- provider interaction.” ITU Definition Occid-OrientStrategies 3

Defining the Issue: Key Elements C HARACTERISTICS On-demand self- service Broad network access Resource pooling Rapid elasticity Measured service P RIMARY P LAYERS Cloud Infrastructure Provider (CIP) Cloud Service Provider (CSP) Communications Provider Consumer/Subscriber Third Party Government S ERVICE M ODELS Software as a Service (SaaS) Platform as a Service (PaaS) Infrastructure as a Service (IaaS) Others: Business Process as a Service (BPaaS), etc. D EPLOYMENT MODELS Public cloud Private cloud Community cloud (e.g., “compliant cloud”) Hybrid cloud Occid-OrientStrategies 4

Adoption of Cloud Computing: Advantages G OVERNMENT Early adopters Search engines, social networks, online use web- , data storage Smart mobility trend P RIVATE S ECTOR Lower Barriers to Entry for Small & Med Size Businesses Labor Costs Real estate/infrastructure Energy efficiencies Usage Licenses Business Agility pay as you use, instead of install and own Scalability Rapidly increase/decrease IT infrastructure I NDIVIDUALS Economic opportunities for growth For local businesses Employment – especially, youth Attract Foreign Direct Investment Adoption for government use Cost savings Encouraging private sector by setting example Occid-OrientStrategies 5

Cloud Computing: Challenges / Barriers to Adoption Technical Considerations Network Access Cross-cloud Interoperability / Compatibility with Legacy Technology User Concerns Information Security / Data Privacy Data Access: Portability, Deletion and Retention Regulatory Environment Lack of Standards and Relevant Regulation Regulatory Compliance – Multiple Jurisdictions Occid-OrientStrategies 6

Jurisdiction of Telecommunications Regulators Technical Traditional Role Market-focused Approach Occid-OrientStrategies 7

Legislative and Regulatory Frameworks: Key Issues Cloud Readiness Protection of Interests Relevant laws, regulations and standards Coordination and Harmonization Occid-OrientStrategies 8

Legislative and Regulatory Frameworks: Cloud Readiness Broad Network Access Public Investment Government Adoption Occid-OrientStrategies 9

Legislative and Regulatory Frameworks: Balance and Protection of Interests ProvidersConsumers Government 3 rd Parties Occid-OrientStrategies 10  Information Security  Data Privacy / Access  Consumer Protection  Intellectual Property  Anti-competition  Strong Economic Growth  Law Enforcement Access

Legislative and Regulatory Frameworks: Relevant Laws, Regulations and Standards Industry Driven International Bodies Government- led Occid-OrientStrategies 11

Legislative and Regulatory Frameworks: Coordination and Harmonization National Regional International Occid-OrientStrategies 12

QUESTIONS / COMMENTS? Ria M. Thomas Managing Director Occid-OrientStrategies