Google Drive & Confidential files

[jmbmichael]

We are looking into the possibility of storing some confidential files within Google Drive. We are slowly moving everything this direction and the question came up within our administration office about confidential information and how safe it is. I've read a few articles on how attornies are using Google Drive for file storage and see that they are both ferpa and hippa compliant so I'm sure legally we would be within our bounds to do this but we're more interested in real world possibilities. Is anyone else doing this yet?

[Eudora931]

Subscribe

[Eudora931]

I'm looking at getting boxcryptor to encrypt sensitive files on our google drive ... Starting with a 5 user company licence ...

[CyberNerd]

Google drive data is already encrypted in transit and at rest. It's audited using iso 27001 and you can perform your own audits of access settings using the management console.

https://drive.google.com/folderview?id=0B4froD7RGVqtaFlKc3VnTHF0THc&usp=sharing#

So yes, we store confidential documents there - it's probably more secure than local servers.

[jmak]

Is anyone else doing this yet?

 

HMRC:

 

http://m.theregister.co.uk/2015/06/05/hmrc_is_going_google/

 

 

 

HMRC has 70,000 staff, and as such will be Whitehall's first mass deployment of Google's cloud services.

 

The Cabinet Office currently has 2,500 users on Gmail. The government said inMarchthat Google Apps best met its user needs for the Cabinet Office and the Ministry of Fun (DCMS).

 

"Other solutions (e.g Microsoft 365) also scored highly, but the advanced collaboration and flexible working features of Google Apps were the best fit for our needs," it said at the time.

 

David Fitton, head of public sector sales for Google UK, wrote on Linkedin:

 

"The acceptance by HMRC that they can store OFFICIAL information offshore in Google data-centres represents a major change and endorsement of Google's approach to managing sensitive information."

Edited February 27, 2016 by jmak

[edutech4schools]

All the above is correct except I believe the EU law is under review in regards to sensitive data being stored outside the EU and you might hit problems from the ICO. If you need any info start on the ICO website https://ico.org.uk/