Microsoft Cloud Perspective on Privacy
This section reflects Microsoft's views on cloud privacy - including Microsoft cloud services. Microsoft says that in a traditional model, the organization is responsible from A to Z of data privacy. This includes protection of data from its own computers. Cloud computing is different because the data flows from the personal servers to servers managed by cloud service providers.
Though the cloud computing service providers should be able to keep the data private, cloud customers too have to play a role in securing the data. It is a challenge to define the allocation of responsibilities concerning privacy obligations between cloud providers and customers. There should be sufficient transparency about the allocation. It is important for customers and their cloud providers to clearly understand their role and be able to communicate about compliance requirements/controls across the spectrum of cloud services.
Microsoft says it understands that strong privacy protections are essential to build the trust required for cloud computing. It says the company invests in building secure, privacy-sensitive systems, and datacenters that help protect individuals’ privacy. Further, it adheres to clear, responsible policies in their business practices - from software development through service delivery, operations, and customer support.
According to Microsoft, governments of different countries should also come together to formulate a strong framework in the interest of Internet users as it is not possible for private communities alone to formulate such frameworks and implement them. Thus, the service providers, users, and governments must agree on certain core cloud privacy practices that span industries and are consistent across borders. Such agreements will provide greater clarity and certainty for individuals, customers, and service providers.
If that consensus evolves, Microsoft will be an active participant in the discussion, drawing on its extensive experience in providing cloud services and its commitment to helping create a safer, more secure Internet.