New Guidelines For Public Bodies With Their Heads In The Cloud

The British Columbia Information and Privacy Commissioner has just released some cloud computing Guidelines for public bodies. Cloud computing (using the internet to process, manage and store data on remote network services) can offer cost savings and other functional benefits to public bodies, but raises particular questions regarding compliance with BC's Freedom of Information and Protection of Privacy Act (FIPPA). The Guidelines point out that a public body must comply with FIPPA with respect to all personal information in its custody or control, including personal information that is accessed, stored or used through cloud computing solutions.

The Guidelines go on to describe some FIPPA obligations that are particularly relevant to cloud computing: