Assuring Data Privacy in Cloud Transformations

TY - GEN

T1 - Assuring Data Privacy in Cloud Transformations

AU - Kirkham, Tom

AU - Armstrong, Django

AU - Djemame, Karim

AU - Corrales Compagnucci, Marcelo

AU - Kiran, Mariam

AU - Nwankwo, Iheanyi

AU - Jiang, Ming

AU - Forgó, Nikolaus

PY - 2012

Y1 - 2012

N2 - Cloud transformations require dynamic redistribution of resources across cloud infrastructure. From a legal perspective this movement of data from one data processor to another without the explicit consent of the data subject is a threat to data privacy. Levels of assurance and accountability have to be provided from the cloud infrastructure providers to the data subject in order to maintain trust. In cases of Cloud Transformation multiple providers are present and passing accountability down the chain is essential. Existing Service Level Agreements (SLA) and policy based privacy implementations fail to provide the flexibility and accountability needed in establishing these new relationships. By introducing combined risk and privacy assessment alongside SLA negotiation, the legal and data management implications of Cloud Transformation events can be better accounted for. This will better protect the privacy of data subjects and increase confidence and trust in the Cloud computing platform.

AB - Cloud transformations require dynamic redistribution of resources across cloud infrastructure. From a legal perspective this movement of data from one data processor to another without the explicit consent of the data subject is a threat to data privacy. Levels of assurance and accountability have to be provided from the cloud infrastructure providers to the data subject in order to maintain trust. In cases of Cloud Transformation multiple providers are present and passing accountability down the chain is essential. Existing Service Level Agreements (SLA) and policy based privacy implementations fail to provide the flexibility and accountability needed in establishing these new relationships. By introducing combined risk and privacy assessment alongside SLA negotiation, the legal and data management implications of Cloud Transformation events can be better accounted for. This will better protect the privacy of data subjects and increase confidence and trust in the Cloud computing platform.

UR - https://ieeexplore.ieee.org/document/6296092/metrics#metrics

U2 - 10.1109/trustcom.2012.97

DO - 10.1109/trustcom.2012.97

M3 - Article in proceedings

SP - 1063

BT - Proceedings of the 11th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (IEEE TrustCom-12)

PB - IEEE

ER -