+ Post New Thread
Results 1 to 7 of 7
Cloud Services Thread, Outside European Union? in Technical; ...
  1. #1
    Mr_Jiminy's Avatar
    Join Date
    Nov 2011
    Location
    Newcastle Upon Tyne
    Posts
    258
    Thank Post
    24
    Thanked 11 Times in 10 Posts
    Rep Power
    8

    Outside European Union?

    Does anyone have any clarification on the below text? Local LA's are having a field day re data security at the mo.

    I was considering offering this as a product to schools, however I need more info on data locations prior to doing so.

    It's worth noting the text below came from an article published in Jan 2012.

    'An Achilles heel?
    The underlying problem that has already caused some of our legal clients to rule out Office 365 as a non-starter is caused by US legislation in their “Patriot Act” and lawyers are not alone in recognising a problem here.
    The UK Data Protection Act forbids an organisation acting as a “Data Controller” to pass user data outside the European Union unless the recipient country provides guarantees as to how the data will be used. However, the Patriot Act, introduced to protect US national security, can require that any US company (wherever data is held) must disclose data on demand to the US Government without the knowledge of the owner of the data, which is contrary to the UK Data Protection Act. Microsoft has been up-front in acknowledging that they cannot give that guarantee and this applies to data held in all their hosted solutions. As a result, in December 2011, BAE ditched plans to adopt Office365 because Microsoft could not guarantee the company’s data would not leave Europe, in spite of operating a data centre in Dublin.
    Conclusion
    We have yet to see how the Patriot Act issue will unfold and perhaps it is not a concern for the average client of a law firm; or maybe even for firms of any size, but this compliance issue needs to be addressed. However, it is unlikely that Law Societies will take a definitive stance.
    Otherwise, Office 365 is an option that most firms should at least check out on the free trial for now, to be able to make informed decisions about using it or other similar solutions that may become available along similar lines. Other local EU-based providers of hosted solutions that don’t have to comply with the Patriot Act may well move into this space.'

  2. #2

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    10,225
    Thank Post
    1,926
    Thanked 2,425 Times in 1,775 Posts
    Rep Power
    842
    Calling @GrumbleDook who is out expert on such matters!

  3. #3

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    10,074
    Thank Post
    1,384
    Thanked 1,889 Times in 1,170 Posts
    Blog Entries
    19
    Rep Power
    614
    Please have a detailed look at my article around Dropbox and the role of Safe Harbor with US companies.

    Also remember that in Education there are a number of instances of O365 including LGfL, Glow ... and I am presently working (supplier side) on rolling it out as part of Hwb in Wales.

    It is all about the risk assessment and policies.

  4. #4
    Mr_Jiminy's Avatar
    Join Date
    Nov 2011
    Location
    Newcastle Upon Tyne
    Posts
    258
    Thank Post
    24
    Thanked 11 Times in 10 Posts
    Rep Power
    8
    Thanks folks, it's also a good article, I'll keep that at hand.

    So my understanding is that the google equivalent is in accordance with eu safe harbour compliance?

  5. #5

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    10,074
    Thank Post
    1,384
    Thanked 1,889 Times in 1,170 Posts
    Blog Entries
    19
    Rep Power
    614
    Quote Originally Posted by Mr_Jiminy View Post
    Thanks folks, it's also a good article, I'll keep that at hand.

    So my understanding is that the google equivalent is in accordance with eu safe harbour compliance?
    I've yet to see if there is confirmation that Google will keep *all* data within the EEA. That is a major factor for some, otherwise you have to take into account the local laws of where the data is stored, not just US / UK / EU. For most, this is not an issue, but I have also yet to see a comprehensive risk assessment around it ... at least with the O365 ones I have.

    Also remember that it is not just where the data is stored that is something you have to consider, but what types of data is stored there too. You have to follow this up with good policies and good training. There is no point just rolling out a policy with no training. If something goes wrong it can be considered the same as if no policy was in place anyway.

  6. Thanks to GrumbleDook from:

    Bashir (30th March 2013)

  7. #6
    jamesbmarshall's Avatar
    Join Date
    Feb 2010
    Location
    Reading, UK
    Posts
    557
    Thank Post
    27
    Thanked 240 Times in 166 Posts
    Rep Power
    88
    It might be useful to note that Office 365 specifically was recently given IL2 accreditation by the UK Gov't: Microsoft Office 365 Receives G-Cloud IL2 Accreditation from Cabinet Office for Use Across the UK Public Sector - Microsoft UK Government Blog - Site Home - MSDN Blogs

    Microsoft has also signed up to EU Safe Harbor: Safe Harbor - Organization Information

  8. 2 Thanks to jamesbmarshall:

    Bashir (30th March 2013), GrumbleDook (29th March 2013)

  9. #7
    Mr_Jiminy's Avatar
    Join Date
    Nov 2011
    Location
    Newcastle Upon Tyne
    Posts
    258
    Thank Post
    24
    Thanked 11 Times in 10 Posts
    Rep Power
    8
    Quote Originally Posted by jamesbmarshall View Post
    It might be useful to note that Office 365 specifically was recently given IL2 accreditation by the UK Gov't: Microsoft Office 365 Receives G-Cloud IL2 Accreditation from Cabinet Office for Use Across the UK Public Sector - Microsoft UK Government Blog - Site Home - MSDN Blogs

    Microsoft has also signed up to EU Safe Harbor: Safe Harbor - Organization Information
    James you're a star, thank you for this info



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 7
    Last Post: 9th April 2012, 08:27 PM
  2. Creating our own Union
    By bossman in forum Comments and Suggestions
    Replies: 5
    Last Post: 2nd June 2006, 09:38 AM
  3. What union to join??
    By edie209 in forum General Chat
    Replies: 29
    Last Post: 21st March 2006, 11:28 AM
  4. Outside Wireless Point
    By Pear in forum Wireless Networks
    Replies: 7
    Last Post: 21st January 2006, 11:18 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •