While cloud computing continues to grow, many organizations have delayed adoption due to the compliance concerns that come with sharing data with third-party providers. Kurt Wimmer and Caleb Skeath of Covington & Burling LLP write in this Privacy Tracker post that the International Organization for Standardization’s (ISO) new standard, ISO 27018, is the first voluntary international standard for processing information that is specifically tailored for cloud providers and includes many requirements imposed by EU law. Because of this, “the new standard may provide … a quick reference point to evaluate the security practices of cloud service providers” and, as a result, may change the industry of cloud computing. Meanwhile, PCWorld reports it will be difficult for healthcare companies “to fully trust cloud software vendors” unless governments “tighten the regulatory screws on SaaS vendors to make them be more transparent and forthcoming about their security practices.” (IAPP member login required.)
Full Story