Cloud Computing Privacy

As organizations and individuals make the move to cloud computing service such as storage, video, financial, social networks, the question of how to retain privacy becomes more important. Each site or system has a different privacy policy, different security architecture, and different potential risks. These can vary widely, and individuals and organizations each have concerns about how their data is stored, used, and made available.

The World Privacy Forum, has both an in depth report (PDF) and brief tips for consumers and business organizations. If your organization is considering using cloud based services, this is a great starter document to review, with details on the Electronic Communications Privacy Act, the PATRIOT act, HIPAA, the Fair Credit Reporting Act, and many other related laws, policies, and requirements that may affect your data and disclosure. It also discusses subpoenas, ownership, and even venue, making it the most complete cloud computing privacy overview that I've seen.

They suggest simple behaviors such as reading the terms of service, limiting what data you make available, and how the provider will use your information. With the recent outcry about Facebook's
Terms of Service change - and their subsequent change and clarifications, this is very much a current topic.

Google's new Case The Joint program

Google's Streetview provides a useful service - it shows you pictures of where you're going. Despite privacy questions, there is definitely a benefit to knowing what the building you're looking for looks like.

Now Google is introducing a program called the Google Local Business Referral program. You can become a representative and...

As a Google Business Referral Representative, you'll visit local businesses to collect information (such as hours of operation, types of payment accepted, etc.) for Google Maps, and tell them about Google Maps and Google AdWords. You'll also take a few digital photos of the business that will appear on the Google Maps listing along with the business information.

(Emphasis mine)

If you've ever done physical security evaluations, you know that having a good excuse to get in and take pictures is very handy. Well, here's a great opportunity - and you can get paid for it afterwards.

Is that a bit paranoid? Possibly. Will we see a rash of people noting that you can case the premises using Google's data? Also possible. The important thing is - does it increase risk? Yes - for some businesses such as banks and other high security locations that don't want the general public to be able to check where their security cameras are by doing a Google search. Those same risks exist with a camera phone carrying public, but those require physically visiting the location.

Just be careful when someone knocks on your door and mentions that they're with Google Houseview...