Educause Security Discussion mailing list archives
Re: Cloud vendor contracts starting to say they own the data you put in their cloud
From: "Boyce-Werner, Rori" <Rori.Boyce-Werner () UNH EDU>
Date: Mon, 24 Sep 2018 13:00:47 +0000
We have seen this and have pushed back during contract negotiations until we have an explicit statement that says we own our data. From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Grace Lynn Faustino Sent: Friday, September 21, 2018 12:10 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] Cloud vendor contracts starting to say they own the data you put in their cloud Caution - External Email ________________________________ Can Universities add the ownership of data clause to the contract terms? ~ Grace L. Faustino Public Key 7C4F 3117 131E A4AC 3B07 45FC 57E3 1235 59BE DFB4 6075 2ED2 A9DB C847 CBD8 “Learning is not attained by chance, it must be sought for with ardor and diligence” ~Abigail Adams From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> on behalf of Sue Rivera <srivera () CSUB EDU<mailto:srivera () CSUB EDU>> Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> Date: Friday, September 21, 2018 at 10:07 AM To: "SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>" <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> Subject: Re: [SECURITY] Cloud vendor contracts starting to say they own the data you put in their cloud I ran into that recently as well. Have a breach free day! Thank you, Sue Rivera Information Security Analyst, Lead Information Technology Services California State University, Bakersfield From: The EDUCAUSE Security Community Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of randy Sent: Friday, September 21, 2018 9:03 AM To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> Subject: [SECURITY] Cloud vendor contracts starting to say they own the data you put in their cloud The subject line says it all. We're starting to see clauses in vendor cloud contracts where they are stating that they will own any data that we store in their cloud. Basically this sounds like cloud vendors are starting to adopt the social media sites' approach of "gimme, gimme, gimme, it's mine". Needless to say, this is disturbing in so many ways. Has anyone else run into this? -Randy Marchany VA Tech IT Security Office and Lab.
Current thread:
- Re: Cloud vendor contracts starting to say they own the data you put in their cloud, (continued)
- Re: Cloud vendor contracts starting to say they own the data you put in their cloud Jason Edelstein (Sep 21)
- Re: Cloud vendor contracts starting to say they own the data you put in their cloud Alex Lindstrom (Sep 21)
- Re: Cloud vendor contracts starting to say they own the data you put in their cloud Sue McGlashan (Sep 21)
- Re: Cloud vendor contracts starting to say they own the data you put in their cloud Nick Lewis (Sep 21)
- Re: Cloud vendor contracts starting to say they own the data you put in their cloud Nathaniel Hall (Sep 21)
- Re: Cloud vendor contracts starting to say they own the data you put in their cloud Nick Lewis (Sep 21)
- Re: Cloud vendor contracts starting to say they own the data you put in their cloud Nathaniel Hall (Sep 21)
- Re: Cloud vendor contracts starting to say they own the data you put in their cloud Frank Barton (Sep 21)
- Re: Cloud vendor contracts starting to say they own the data you put in their cloud Ben Marsden (Sep 21)
- Re: Cloud vendor contracts starting to say they own the data you put in their cloud Ben Marsden (Sep 21)
- Re: Cloud vendor contracts starting to say they own the data you put in their cloud Boyce-Werner, Rori (Sep 24)