2013 IAPP Canada Privacy Symposium

Breakout Session

John Wunderlich, CIPP/C, Privacist, John Wunderlich & Associates
David Young, Partner, McMillan LLP

Are you clear about your cloud usage? Many organizations struggle not only with whether to embrace outplacement of data and services to the cloud, but also with what to put out there. IT groups may want to take advantage of potential cost savings, but are these at odds with security and privacy concerns? Join us to explore a model that can be used as a basis for making policy decisions on what to float in your cloud based on sound privacy and security judgments. We’ll also discuss the legal aspects of such decisions that will influence not only the “what?” but also the “where?” The model presented will enable differential cloud facilities based on an organization’s compliance and risk criteria and may serve as the basis of a contract specification.

What you’ll take away:

• A cloud compliance model for storage criteria policy decisions
• Legal risk management and compliance control criteria for cloud storage
• A template specification for privacy and security compliance in clouds