6.4
Data Protection and Privacy Issues
Synopsis:
1.
Data protection and privacy issues in a cloud environment
2.
Required cross-Strait privacy protection laws in a cloud environment
3.
International feasible options and harmonization
In a broad sense, cloud services are new information service models that can obtain
standardized service from remote at any time via the Internet. Thus, while enterprises and
organizations enjoy the benefits of cloud services, they are subject to certain risks.
When the cloud service users benefit from the flexibility of resource pooling, they are also
giving up the control of resource allocation and scheduling to the service providers. While
embracing the opportunities generated by cloud, enterprises and organizations still are
concerned about data protection and privacy issues, such as whether the infrastructure /
applications / network connection meeting the regulations of the information asset location
or the user location, or the internal regulation of the enterprise? Is the data warehouse
secure? Who (vendors) have access to information? Can data access, transmission or
transfer be tracked? Is data destruction synchronized? Is it Irreversible? How to do with
leakage by the cloud service providers or operators? Is there sufficient proof?
In view of this, with the rising awareness of data protection, organizations and government
agencies around the world proposed various evaluation criteria or guidelines. In Taiwan, the
2012 "
Personal Data Protection Act" is a continuation of the “Computer processing of the
Personal Data Protection Act “, which served as the framework for data protection and
privacy. The Taiwanese government agencies gradually promoted the governance of
information security from the "National Information and Communication Security
development programs". Internationally, the U.S. National Institute of Standards and
Technology (NIST), the Asia Cloud Computing Association (ACCA), the European Network
and Information Security Agency (ENISA) and other organizations are all anxiously
proposing references and guidelines to resolve the pressing issues facing cloud, such as
information protection and privacy issues,
Highly integrated one-stop cloud service solutions (IaaS, PaaS, SaaS) are formed by the
alliance of the cross-industry IT software vendors and the cloud service providers. In
practice, the legal requirements of the service exporting and the importing locations, as well
as the compliance to the internal regulation of the industry, enterprise, and organization. It
will be a management niche to control the big data from the service providers and the users,
