Educause Security Discussion mailing list archives

Re: Cloud vendor contracts starting to say they own the data you put in their cloud


From: Sue Rivera <srivera () CSUB EDU>
Date: Fri, 21 Sep 2018 16:07:01 +0000

I ran into that recently as well.

Have a breach free day!

Thank you,
Sue Rivera
Information Security Analyst, Lead
Information Technology Services
California State University, Bakersfield

From: The EDUCAUSE Security Community Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of randy
Sent: Friday, September 21, 2018 9:03 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Cloud vendor contracts starting to say they own the data you put in their cloud

The subject line  says it all.

We're starting to see clauses in vendor cloud contracts where they are stating that they will own any data that we 
store in their cloud. Basically this sounds like cloud vendors are starting to adopt the social media sites' approach 
of "gimme, gimme, gimme, it's mine".  Needless to say, this is disturbing in so many ways.

Has anyone else run into this?

-Randy Marchany
VA Tech IT Security Office and Lab.

Current thread: