Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Cloud computing and law-India legal summit 2011


Published on

Cloud computing and law presentation given at India legal summit 2011

Published in: Technology, Business
  • Be the first to comment

  • Be the first to like this

Cloud computing and law-India legal summit 2011

  1. 1. Cloud Computing and Law Adv. Prashant Mali [BSc.(Phy.), MSc.(Comp. Sci.), LLB] President – Cyber Law Consulting Cyber Law & IPR Expert Author & Speaker India Legal Summit 2011
  2. 2. Why Cloud Computing ? <ul><li>Cloud computing services offer low barrier to entry and easy scaling possibilities. </li></ul><ul><li>“ click-wrap agreements” are legally enforceable! </li></ul><ul><li>[ Myth or Reality ?? ] </li></ul><ul><li>Agility/flexibility of technology – implying a power shift </li></ul><ul><li>Always on – ubiquitous </li></ul><ul><li>Real time information and immediate feedback </li></ul>India Legal Summit 2011
  3. 3. Legal Issues in Cloud Computing India Legal Summit 2011 Liability Compliance Law Copyright Data Portability
  4. 4. Law for Cloud Computing Service <ul><li>Cloud computing service providers are intermediary as per The IT Act, 2000 </li></ul><ul><li>S2(1)(w) &quot;Intermediary&quot; with respect to any particular electronic records, means any person who on behalf of another person receives, stores or transmits that record or provides any service with respect to that record and includes telecom service providers, network service providers, internet service providers, web hosting service providers, search engines, online payment sites, online-auction sites, online market places and cyber cafes; </li></ul> India Legal Summit 2011
  5. 5. Compliance as per The IT Rules 2011 <ul><li>The intermediary shall observe following due diligence while discharging his duties, namely : ― </li></ul><ul><li>(1) The intermediary shall publish the rules and regulations, privacy policy and user agreement for access or usage of the intermediary’s computer resource by any person. </li></ul><ul><li>(2) Such rules and regulations, terms and conditions or user agreement shall inform the users of computer resource not to host, display, upload, modify, publish, transmit, update or share any information that …. </li></ul><ul><li>If such hosting reported action to be taken in 36 hours </li></ul><ul><li>FACTS :Drop Box , Rapid Share, Gmail Storage contains infinite pornography, pirated s/w , songs etc </li></ul> India Legal Summit 2011
  6. 6. <ul><li>Auditing requirements </li></ul><ul><li>Many contracts impose auditing possibilities that </li></ul><ul><li>include physical inspection how can these auditing requirements be complied with when geographically decentralized cloud services are used? </li></ul><ul><li>Applicable Law & competent court </li></ul><ul><li>If outside own country, any litigation can become prohibitively expensive </li></ul><ul><li>What happens in case of bankruptcy of the </li></ul><ul><li>cloud computing service provider? </li></ul>Compliance of Cloud Computing India Legal Summit 2011
  7. 7. Indemnity Issues in Cloud Computing <ul><li>We and our licensors shall not be responsible for </li></ul><ul><li>any service interruptions , including, without </li></ul><ul><li>limitation, power outages, system failures or other </li></ul><ul><li>interruptions, including those that affect the receipt, </li></ul><ul><li>processing, acceptance, completion or settlement of </li></ul><ul><li>any payment services. (...) </li></ul><ul><li>Neither we nor any of our licensors shall be liable to </li></ul><ul><li>you for any direct, indirect, incidental, special, </li></ul><ul><li>consequential or exemplary damages , including, </li></ul><ul><li>but not limited to, damages for loss of profits, </li></ul><ul><li>goodwill, use, data or other losses (...) </li></ul><ul><li>Who will indemnify the Customer or the user ? </li></ul>India Legal Summit 2011
  8. 8. Agreement Clauses in Cloud Service <ul><li>” You are utilizing a shared disk model and we cannot RISK the chance your third party may interfere with other clients using the same platform”. </li></ul><ul><li>What happens to risk mitigation ? </li></ul> India Legal Summit 2011
  9. 9. Legal Liability of Cloud Providers <ul><li>Including India many jurisdictions, cloud providers can be held liable for the illegal data they may be hosting </li></ul><ul><li>Escape Routes </li></ul><ul><li>no liability for services that “consist of” the storage of electronic information under the condition that the provider has No knowledge or awareness of illegal nature. </li></ul><ul><li>..and removes or blocks illegal data when it does </li></ul><ul><li>gain knowledge or become aware of illegal nature </li></ul><ul><li>Liability protection does not prevent so-called </li></ul><ul><li>injunctions, which can be as costly and timeconsuming </li></ul> India Legal Summit 2011
  10. 10. Loss Of Location in Cloud Computing <ul><li>With Indian Investigation agencies, Loss of location is likely to cripple cybercrime investigations at a very early stage. </li></ul><ul><li>The Budapest Convention on Cybercrime already features a legal principle which overrules location as a legal connecting factor: Consent. Article 32 of the Budapest Convention states: </li></ul><ul><li>Article 32 – Trans-border access to stored computer data with consent or where publicly available </li></ul><ul><li>India not a Signatory to Convention on Cybercrime </li></ul> India Legal Summit 2011
  11. 11. Letter rogatory an option <ul><li>The Interpol can take necessary follow up steps for this the local police issues letters rogatory under the provisions of Section 166 A Cr PC. </li></ul> India Legal Summit 2011
  12. 12. Data Portability on Cloud <ul><li>Who is really managing my company’s sensitive information? </li></ul><ul><li>What are their internal security practices? How well do they handle incident response? </li></ul><ul><li>How reliable is the infrastructure that provides the service? </li></ul><ul><li>Are they prone to service outages? </li></ul><ul><li>How can my service provider recover my cloud stuff? </li></ul><ul><li>What is H/W & S/W Portability of my DATA ? </li></ul>India Legal Summit 2011
  13. 13. Copyright Issues for Data on Cloud <ul><li>Cloud storage as offered by and other providers like Dropbox do offer some of the features of file sharing that a recent court ruling found illegal. </li></ul><ul><li>RIAA v/s LimeWire. </li></ul><ul><li>(Recording Industry Association of America) </li></ul><ul><li>RIAA?? which took NAPSTER DOWN) </li></ul> India Legal Summit 2011
  14. 14. <ul><ul><ul><ul><ul><li>ThankYou </li></ul></ul></ul></ul></ul><ul><li>prashant . [email_address] </li></ul><ul><li>Mobile : 09821763157 </li></ul> India Legal Summit 2011