Welcome!

@CloudExpo Authors: Yeshim Deniz, Carmen Gonzalez, Zakia Bouachraoui, Pat Romanski, Liz McMillan

Related Topics: @CloudExpo, Agile Computing, @DXWorldExpo

@CloudExpo: Article

Who Owns Your Customer Database in the Cloud | @CloudExpo #Cloud

It is important to identify the various kinds of cloud hosting services presently available

The question of who owns the data is partly determined by the kind of cloud infrastructure that is in place for your business.

The advantages that cloud based hosting brings needs to reiteration. Cloud hosting is infinitely scalable, needs radically lower CapEx and with distributed hosting, it is much more fail-proof than data hosted on your premise. But the recent legal spar between Apple and the US government has brought the limelight once again back on the debate about ownership of data. In the case of Apple, the fight is over decrypting the iPhone used by a criminal in order for the government to hack in. But the case may as well be between law enforcement and a web host over data stored by your customers on your startup service.

In such a case, who owns the data? Before we discuss this, it is important to identify the various kinds of cloud hosting services presently available. The first and the most popular among start-ups is the public cloud. In this instance, start-ups host data over virtualized servers located across the world. This is best suited for web services that anticipate server crashes due to peak volume loads. Since the cloud is distributed, there is very little chance for websites to crash due to a sudden influx of visitors. The second is a private cloud where you own or rent the infrastructure from a third party provider, but the data itself belongs to yours and no third party has access to it. The final alternative is the hybrid cloud which is essentially a mix of public and private clouds - part of the data is located on your own server while the rest is on public clouds.

As you may have guessed, the question of who owns the data is partly determined by the kind of cloud infrastructure that is in place for your business. But even before we try to tackle this question, the first thing to look at is who creates the data. If your customer data includes information patently created by the customer (like photos, videos, text documents, etc.), then the original creators of these documents continue to own copyrights of such data. However, this does not automatically mean protection of this data which continues to be determined by where it is hosted.

In the case of a private cloud server, the web host provides with only the infrastructure and the company renting the cloud owns all the data that resides in the server. However, this line begins to get fuzzy in the case of public and hybrid clouds. As a matter of fact, one of the major reasons hybrid cloud servers exist is to comply with local government regulations on data ownership. For instance, if you operate a business in Indonesia and use Microsoft Azure for hosting data, then it is likely that the data itself is hosted in a country like Singapore. In order to meet local compliance, you may be required to host a private server in Indonesia that stores a part of the customer database locally in your private server. This way, you own complete ownership of the data in your private server which local governments may demand access to depending on local laws.

In terms of data ownership, public clouds have the least confidentiality. Depending on the service you sign up to, the web host may own rights to at least part of your data. Even if your startup does legally own the data hosted on your behalf, a lot of providers still hold rights to what are called "emergent data" - that is, the manipulation of data hosted by the customer into distinct datasets that may be used by the provider for their own marketing or business purposes.

Cloud computing and storage is still an evolving segment and the laws surrounding this are not as robust as you may want them to be. While it may take years before sophisticated regulations are built around data ownership, it is always a good idea for start-ups and businesses to consult their lawyer before signing the terms of service of independent third party providers.

More Stories By Harry Trott

Harry Trott is an IT consultant from Perth, WA. He is currently working on a long term project in Bangalore, India. Harry has over 7 years of work experience on cloud and networking based projects. He is also working on a SaaS based startup which is currently in stealth mode.

CloudEXPO Stories
The Crypto community has run out of anarchists, libertarians and almost absorbed all the speculators it can handle, the next 100m users to join Crypto need a world class application to use. What will it be? Alex Mashinsky, a 7X founder & CEO of Celsius Network will discuss his view of the future of Crypto.
In an age of borderless networks, security for the cloud and security for the corporate network can no longer be separated. Security teams are now presented with the challenge of monitoring and controlling access to these cloud environments, as they represent yet another frontier for cyber-attacks. Complete visibility has never been more important-or more difficult. Powered by AI, Darktrace's Enterprise Immune System technology is the only solution to offer real-time visibility and insight into all parts of a network, regardless of its configuration. By learning a ‘pattern of life' for all networks, devices, and users, Darktrace can detect threats as they arise and autonomously respond in real time - all without impacting server performance.
Today, Kubernetes is the defacto standard if you want to run container workloads in a production environment. As we set out to build our next generation of products, and run them smoothly in the cloud, we needed to move to Kubernetes too! In the process of building tools like KubeXray and GoCenter we learned a whole bunch. Join this talk to learn how to get started with Kubernetes and how we got started at JFrog building our new tools. After the session you will know: How we got to Kubernetes (and why we chose it)
In a recent survey, Sumo Logic surveyed 1,500 customers who employ cloud services such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). According to the survey, a quarter of the respondents have already deployed Docker containers and nearly as many (23 percent) are employing the AWS Lambda serverless computing framework. It's clear: serverless is here to stay. The adoption does come with some needed changes, within both application development and operations. That means serverless is also changing the way we leverage public clouds. Truth-be-told, many enterprise IT shops were so happy to get out of the management of physical servers within a data center that many limitations of the existing public IaaS clouds were forgiven. However, now that we've lived a few years with public IaaS clouds, developers and CloudOps pros are giving a huge thumbs down to the...
10ZiG Technology is a leading provider of endpoints for a Virtual Desktop Infrastructure environment. Our fast and reliable hardware is VMware, Citrix and Microsoft ready and designed to handle all ranges of usage - from task-based to sophisticated CAD/CAM users. 10ZiG prides itself in being one of the only companies whose sole focus is in Thin Clients and Zero Clients for VDI. This focus allows us to provide a truly unique level of personal service and customization that is a rare find in the industry. We offer a multitude of custom embedding options and hardware configurations to ensure our devices are tailor-made to fit seamlessly into the environments of our customers.