The following opinionated article was originally published on the website of OzHub, an industry coalition which aims to build Australian consumer and business confidence in cloud computing. OzHub members are Macquarie Telecom, Fujitsu, VMware, Infoplex, Alcatel Lucent and F5. The article is by Matt Healy, OzHub chairman and Macquarie Telecom national executive — regulatory and government.
It was published as a response to this article by US Ambassador to Australia Jeffrey Bleich, who argued that Australians are practising “cloud protectionism” in seeking to have on-shore datacentres.
opinion Jeffrey Bleich hits the nail right on the head in the first sentence of his opinion piece on cloud computing when he says people are putting huge amounts of data into the cloud, whether they know it or not.
The reality is, a huge proportion of Australians do not know they are using the cloud when they use services such as social networking, and do not know that much of their personal data is being stored overseas as a result. When they find out, they are not happy about it.
OzHub last year polled 1500 people and found about three quarters used online services that stored their personal data overseas. A similar proportion said they would prefer that this data was kept in Australia. This is not protectionism. This is consumers wanting to be able to exercise choice.
It is a false analogy to define the issue as being analogous to people wanting to keep their money under the mattress when it could be in the safety of a bank. It’s actually a little bit insulting of the intelligence of those who have argued that it matters where data is stored.
It would be a better analogy to say that people would rather invest their money in Australian banks where they are be able to avail themselves of Australian laws if things go pear shaped. They might not know exactly what those laws are, or who would be the appropriate regulator, but they have more confidence in being able to find out who to complain to and that there will be laws that protect them.
That they instinctively feel the same about how their private data should be treated is hardly a revelation and certainly is not a threat to the future success of the information age. Quite the contrary, it is consumer confidence in being able to exercise choice that will underpin the community’s acceptance of these exciting new technologies. Or, to put it another way, it will be shocks to that confidence in the form of lost and stolen data without adequate redress that causes people to shy away from the cloud.
Australia has, for example, just passed some of the most comprehensive privacy laws in the world after five years of careful consideration and an exhaustive legislative examination of the issues. But will the Australian Privacy Commissioner be able to assure an Australian consumer that they will be able to exercise any rights of redress if their data is being stored in, for example, India?
The ability to know when your private data has been accessed by someone – legally or otherwise – is also clearly something people instinctively and properly feel they should know about. Interestingly, this is exactly why many people feel that they need a choice about whether they place their data with a US-owned cloud service provider.
A piece of legislation called the Patriot Act empowers the US Government to demand that US companies secretly hand over private data belonging to anyone, without ever telling that person. This is a law that has been objected to by European Governments who have passed their own laws to outlaw this practice. No one, of course, will necessarily ever know if US companies are secretly handing over data demanded of them by the Patriot Act!
So, the US Ambassador colourful use of the term “cloud protectionism” seems to rather oversimplify an issue that is quite a bit more complex. While the ability of data to flow seamlessly around the world is undoubtedly to the good, the inability of people’s rights over their own data to move as easily is not so wonderful.
The answer, of course, is very simple. People should be informed about where their data is going and be given the ability to exercise choice. And those who hold private data and want to exercise those choices on people’s behalf – especially governments – should be sure to take a conservative approach and not risk sending it beyond the control of Australian law if there is a risk of something bad happening. That’s not protectionism. That respect for people’s rights.