1. International Cloud Symposium October 11, 2011 CLOUD COMPUTING PRIVACY: THE USER PERSPECTIVE Alissa Cooper Chief Computer Scientist, CDT

2. What new privacy issues does cloud computing raise?

3. User Interests  Authorized access  Can third parties obtain my data?  Unauthorized access  Is my data protected against intrusion and loss?  User access  When can I not obtain my data?  Government access  Can governments obtain my data?

4. User Interests  Authorized access  Can third parties obtain my data?  Unauthorized access  Is my data protected against intrusion and loss?  User access  When can I not obtain my data?  Government access  Can governments obtain my data?

5. Authorized access  Adoption of frameworks that put service providers and users in control  Opportunity for outside audit – no black boxes  Harmonization of privacy laws – DPD review, calls for US baseline privacy law  Promotion of strong rule of law

6. Government access  Multiple approaches suggested for resolving jurisdictional conflicts: harmonization, defining “reasonable” demands, defining “exorbitant” demands  Key: promotion of strong standards for government access (e.g., digitaldueprocess.org) digitaldueprocess.org  Resist mandates for jurisdiction- specific storage

7. What new privacy issues does cloud computing raise?

8. Alissa Cooper acooper@cdt.org