SlideShare a Scribd company logo
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Copyright 2013 BryanCave LLP
May 30, 2013
Jason D. Haislmaier
jason.haislmaier@bryancave.com
Licensing Issues in the Cloud
Copyright 2013 BryanCave LLP
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
This presentation is intended for general informational purposes only and should not
be construed as legal advice or legal opinion on any specific facts or circumstances,
nor is it intended to address specific legal compliance issues that may arise in
particular circumstances. Please consult counsel concerning your own situation and
any specific legal questions you may have.
The thoughts and opinions expressed in this presentation are those of the individual
presenters and do not necessarily reflect the official or unofficial thoughts or opinions
of their employers.
For further information regarding this presentation, please contact the presenter(s)
listed in the presentation.
Unless otherwise noted, all original content in this presentation is licensed under the
Creative Commons Creative Commons Attribution-Share Alike 3.0 United States
License available at: http://creativecommons.org/licenses/by-sa/3.0/us.
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
What is it?
Cloud
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Cloud
What is it?
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Steve Ballmer
CEO,
Speaking at a Microsoft
event in Singapore
“I'm not sure my goal for today is going to be to
actually explain it to you, but I do want to make
sure that people understand that I think everybody
in our industry accepts it's the next major
transition point in terms of how IT gets done.”
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Cloud
What is it?
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Established Definitions
Key Characteristics
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
NIST Definition
• Initial draft – April 24, 2009
• Final draft (v16) – October 25, 2011
• In practice, the definition has continued to evolve
What is Cloud Computing?
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
• Still emerging and rapidly expanding
• Many models, many providers, many markets
• Computing resources or functionality delivered as a service over a network
• Common traits
– On-demand (self-service)
– Pooled resources (“multi-tenant”)
– Rapid provisioning (high elasticity)
– Dynamically assigned resources (“Infinite” capabilities)
– Broad network access (ubiquitous)
– Location and device-independent
– Thin client interface (e.g., a web browser)
• Increased access to applications, data, and functionality
• Reduced costs (for infrastructure, support, and staffing)
• Reduced need for knowledge and control of resources
Key Characteristics
What is Cloud Computing?
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
• Private cloud
– Owned or leased by a single organization (“internal” cloud)
– Operated solely for that organization
• Community cloud
– Shared by several organizations
– Supports a specific user community (often with shared concerns)
• Public cloud
– Owned by a company selling cloud services
– Mass-market model
• Hybrids and combinations abound
Cloud Models - Deployment
What is Cloud Computing?
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
• Software as a Service (SaaS)
– User does not manage or control the underlying infrastructure
– Limited user ability to set configuration settings (mass-market software)
• Platform as a Service (PaaS)
– User does not manage or control the underlying infrastructure
– User selects (and even builds) the applications and other software running on the
infrastructure
• Infrastructure as a Service (IaaS)
– User does not manage or control the underlying infrastructure
– User selects and configures the fundamental resources running on the infrastructure
(operating systems, storage, applications, and other networking components)
– User selects and controls (and even builds) the applications and other software running
on the infrastructure
Cloud Models - Delivery
What is Cloud Computing?
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Many similarities
Many differences
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Understand the similarities
Understand the differences
Understand why they matter
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Many Issues– Some New, Some Not
Licensing in the Cloud
• Cloud computing represents a paradigm shift from the traditional
enterprise software delivery model
• Paradigm shift does not mean an entirely new paradigm
• Cloud computing shares many legal issues in common with legacy
licensing models, but poses new legal challenges
– IP and software rights
– Service levels and performance
– Privacy and security
– Data protection, rights, and usage
– Cross-border issues
– Legal compliance issues
• Lessons learned from traditional software licensing are often applicable
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Transparency
and
Understanding
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Transparency and Understanding
Cloud
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Transparency and Understanding
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Understand The Nature of the Services
Transparency and Understanding
• Cloud services often rely on multiple levels of providers
– Offer expanded cloud service offerings
– Provide additional capacity
– Spread risk
• Conduct diligence and clarify how the services are actually
being provided
• Require responsibility/liability by the primary provider for all
other providers
• Understand how software, IP and data will be affected
• Solidify ownership and rights
• Understand inherent limitations
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Rights in
Software and IP
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
• Cloud services are moving beyond vendor-provided software
– Many permit customer-supplied software in addition to standard applications (BYOS)
– Increasingly allow for the development of software to run on the cloud platform
• Contracting models can vary significantly
– Scope of license
– Ownership of developments
– Pricing (users, processors, actual use, etc.)
– Rights after cloud services end
• Likewise, vendor-provided software is increasingly comprised of third party
and open source software
• Understand how licensing and ownership models may impact the services
Evaluate and Clarify Ownership and Rights
Software and IP
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Rights in Data
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Do you know where your data is?
Do you know what data is yours?
Does your provider know?
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
• Increasingly lucrative model for cloud providers to obtain rights in the data
• Define “data” (both existing and generated through the services)
• Specify ownership rights
• Grant provider specific (and limited) rights in the data
– Use as required to provide the services
– Limited (if any) use for other purposes
– Only permitted monitoring and access
• Protect data as confidential information where applicable
Secure Rights in Data
Data
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Cross-Border Legal Issues
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
• Cloud computing services are inherently “stateless”
• Resources are dynamically and constantly re-provisioned
• Servers are located in multiple different locations (and often countries)
• Never anywhere, but always somewhere
• Can and does create jurisdictional and regulatory issues
– Cross-border flows of software, IP, and data
– Compliance with applicable regulations
– Potentially conflicting outcomes
• Obtain transparency and control
– Specified locations
– Limitations/notices regarding changes
– Specified ownership and license rights
– Required audit trail
Inherently Cross-Border
Cross-Border Legal Issues
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Performance and
Service Levels
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
• Cloud provider business models rely on the adoption of a
standard platform
– Standard service offerings
– Standard performance and service levels
• Providers are often (still) reticent to negotiate changes to service levels
• As the sophistication and volume of services grow, so does the need
for flexibility
• At minimum, understand the limitations on the service being received and
how they may impact your requirements and expectations
• Strong parallels to IT outsourcing agreements
Standard Platform, Standard Service Levels
Service Levels
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Termination and Transition
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
• Dependency on cloud services is increasing
• Understand you level of dependency
• Adjust termination triggers as needed
• Understand practical barriers to transitioning to a new service provider
• Obtain necessary visibility into services
– Software and hardware used to provide services
– Applicable software licensing terms
– Relevant subcontractors
– Compatibility and interoperability issues
• Provide for transition assistance where needed
– All services provided during the term of the agreement
– Assistance needed to transition to a new provider
Control Termination and Transition
Termination and Transition
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Business Continuity
and
Disaster Recovery
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
What Happens When the Provider Fails
Business Continuity and Disaster Recovery
• How long could you operate without access to:
– Services?
– Software?
– Data?
• Provide for a business continuity plan (BCP)
– Understand your current BCP
– Diligence provider’s existing BCP
– Set minimum requirements for the BCP in the agreement
– Restrict changes to the BCP
– Include audit rights to ensure implementation of the BCP
• Consider data back-up (or even service back-up) through a secondary
provider
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
• Cloud services are growing ever more sophisticated
• The importance of cloud services will only increase
• In addition to data, significant software and IP is now developed through
cloud services
• Take the time to understand the nature of the cloud services being
provided
• Leverage legal concepts from traditional software licensing to address
issues that matter to your business
• Having flexibility and additional rights can be important, even if you have
to pay for them
Paradigm Shift, But Many Existing Rules Apply
Closing Thoughts
Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
Copyright 2013 BryanCave LLP
Thank You.
Jason Haislmaier
jason.haislmaier@bryancave.com
@haislmaier
http://www.linkedin.com/in/haislmaier

More Related Content

Viewers also liked

6 2 Slope Intercept Form
6 2 Slope Intercept Form6 2 Slope Intercept Form
6 2 Slope Intercept Formguestf492df
 
Открытые данные
Открытые данныеОткрытые данные
Открытые данные
ushchent
 
Wrap Up 3.1 Intro 3.2 Rr
Wrap Up 3.1 Intro 3.2 RrWrap Up 3.1 Intro 3.2 Rr
Wrap Up 3.1 Intro 3.2 Rrguestf492df
 
Investor Presentation
Investor PresentationInvestor Presentation
Investor Presentation
Objective Capital Conferences
 
KBL Mining Corporate Presentation - June 2015
KBL Mining Corporate Presentation - June 2015KBL Mining Corporate Presentation - June 2015
KBL Mining Corporate Presentation - June 2015
Objective Capital Conferences
 
Gold exploration in the Volta Region
Gold exploration in the Volta RegionGold exploration in the Volta Region
Gold exploration in the Volta Region
Objective Capital Conferences
 
Developing Gold Projects in Tanzania and Namibia
Developing Gold Projects in Tanzania and NamibiaDeveloping Gold Projects in Tanzania and Namibia
Developing Gold Projects in Tanzania and Namibia
Objective Capital Conferences
 

Viewers also liked (7)

6 2 Slope Intercept Form
6 2 Slope Intercept Form6 2 Slope Intercept Form
6 2 Slope Intercept Form
 
Открытые данные
Открытые данныеОткрытые данные
Открытые данные
 
Wrap Up 3.1 Intro 3.2 Rr
Wrap Up 3.1 Intro 3.2 RrWrap Up 3.1 Intro 3.2 Rr
Wrap Up 3.1 Intro 3.2 Rr
 
Investor Presentation
Investor PresentationInvestor Presentation
Investor Presentation
 
KBL Mining Corporate Presentation - June 2015
KBL Mining Corporate Presentation - June 2015KBL Mining Corporate Presentation - June 2015
KBL Mining Corporate Presentation - June 2015
 
Gold exploration in the Volta Region
Gold exploration in the Volta RegionGold exploration in the Volta Region
Gold exploration in the Volta Region
 
Developing Gold Projects in Tanzania and Namibia
Developing Gold Projects in Tanzania and NamibiaDeveloping Gold Projects in Tanzania and Namibia
Developing Gold Projects in Tanzania and Namibia
 

Similar to Licensing in the Cloud (2013 Rocky Mountain IP and Technology Institute) (May 2013)

Open Source License Compliance in the Cloud (CELESQ) (October 2012)
Open Source License Compliance in the Cloud (CELESQ) (October 2012)Open Source License Compliance in the Cloud (CELESQ) (October 2012)
Open Source License Compliance in the Cloud (CELESQ) (October 2012)
Jason Haislmaier
 
Public Cloud Service Agreements: What to Expect and What to Negotiate V2.0
Public Cloud Service Agreements: What to Expect and What to Negotiate V2.0Public Cloud Service Agreements: What to Expect and What to Negotiate V2.0
Public Cloud Service Agreements: What to Expect and What to Negotiate V2.0
Cloud Standards Customer Council
 
Understanding Minimizing And Mitigating Risk In Cloud Computing
Understanding Minimizing And Mitigating Risk In Cloud ComputingUnderstanding Minimizing And Mitigating Risk In Cloud Computing
Understanding Minimizing And Mitigating Risk In Cloud ComputingJanine Anthony Bowen, Esq.
 
Geting cloud architecture right the first time linthicum interop fall 2013
Geting cloud architecture right the first time linthicum interop fall 2013Geting cloud architecture right the first time linthicum interop fall 2013
Geting cloud architecture right the first time linthicum interop fall 2013David Linthicum
 
The System Administrator Role in the Cloud Era: Better Than Ever (ENT212) | A...
The System Administrator Role in the Cloud Era: Better Than Ever (ENT212) | A...The System Administrator Role in the Cloud Era: Better Than Ever (ENT212) | A...
The System Administrator Role in the Cloud Era: Better Than Ever (ENT212) | A...
Amazon Web Services
 
Securing your Cloud Deployment
Securing your Cloud DeploymentSecuring your Cloud Deployment
Securing your Cloud Deployment
Hrusostomos Vicatos
 
Legal Issues in Cloud Computing (J. Haislmaier - IP Institute 2010)
Legal Issues in Cloud Computing (J. Haislmaier - IP Institute 2010)Legal Issues in Cloud Computing (J. Haislmaier - IP Institute 2010)
Legal Issues in Cloud Computing (J. Haislmaier - IP Institute 2010)
Jason Haislmaier
 
Bringing the Cloud Back to Earth
Bringing the Cloud Back to EarthBringing the Cloud Back to Earth
Bringing the Cloud Back to Earth
Sri Chalasani
 
Cutting To The Chase: Cloud From A Customers Perspective
Cutting To The Chase: Cloud From A Customers PerspectiveCutting To The Chase: Cloud From A Customers Perspective
Cutting To The Chase: Cloud From A Customers Perspective
Janine Anthony Bowen, Esq.
 
Transforming cloud security into an advantage
Transforming cloud security into an advantageTransforming cloud security into an advantage
Transforming cloud security into an advantage
Moshe Ferber
 
Becomming a cloud governance ninja linthicum interop fall 2013
Becomming a cloud governance ninja linthicum interop fall 2013Becomming a cloud governance ninja linthicum interop fall 2013
Becomming a cloud governance ninja linthicum interop fall 2013David Linthicum
 
Lions and Tigers and Cloud, Oh My! The Truth Behind Cloud Security and Risks
Lions and Tigers and Cloud, Oh My! The Truth Behind Cloud Security and RisksLions and Tigers and Cloud, Oh My! The Truth Behind Cloud Security and Risks
Lions and Tigers and Cloud, Oh My! The Truth Behind Cloud Security and RisksSAP Ariba
 
Developing a cloud strategy - Presentation Nexon ABC Event
Developing a cloud strategy - Presentation Nexon ABC EventDeveloping a cloud strategy - Presentation Nexon ABC Event
Developing a cloud strategy - Presentation Nexon ABC Event
Nexon Asia Pacific
 
Cloud services and it security
Cloud services and it securityCloud services and it security
Cloud services and it security
East Midlands Cyber Security Forum
 
Implementing cloud based devops for distributed agile projects
Implementing cloud based devops for distributed agile projectsImplementing cloud based devops for distributed agile projects
Implementing cloud based devops for distributed agile projects
Tom Stiehm
 
Cloud Security.ppt
Cloud Security.pptCloud Security.ppt
Cloud Security.ppt
AkashRajBehera
 
Virtualization and cloud impact overview auditor spin enterprise gr-cv3
Virtualization and cloud impact overview auditor spin   enterprise gr-cv3Virtualization and cloud impact overview auditor spin   enterprise gr-cv3
Virtualization and cloud impact overview auditor spin enterprise gr-cv3
EnterpriseGRC Solutions, Inc.
 
Cloud vs. Self Hosted Software Options
Cloud vs. Self Hosted Software OptionsCloud vs. Self Hosted Software Options
Cloud vs. Self Hosted Software Options
The Echo Group
 

Similar to Licensing in the Cloud (2013 Rocky Mountain IP and Technology Institute) (May 2013) (20)

Open Source License Compliance in the Cloud (CELESQ) (October 2012)
Open Source License Compliance in the Cloud (CELESQ) (October 2012)Open Source License Compliance in the Cloud (CELESQ) (October 2012)
Open Source License Compliance in the Cloud (CELESQ) (October 2012)
 
Public Cloud Service Agreements: What to Expect and What to Negotiate V2.0
Public Cloud Service Agreements: What to Expect and What to Negotiate V2.0Public Cloud Service Agreements: What to Expect and What to Negotiate V2.0
Public Cloud Service Agreements: What to Expect and What to Negotiate V2.0
 
Understanding Minimizing And Mitigating Risk In Cloud Computing
Understanding Minimizing And Mitigating Risk In Cloud ComputingUnderstanding Minimizing And Mitigating Risk In Cloud Computing
Understanding Minimizing And Mitigating Risk In Cloud Computing
 
Geting cloud architecture right the first time linthicum interop fall 2013
Geting cloud architecture right the first time linthicum interop fall 2013Geting cloud architecture right the first time linthicum interop fall 2013
Geting cloud architecture right the first time linthicum interop fall 2013
 
The System Administrator Role in the Cloud Era: Better Than Ever (ENT212) | A...
The System Administrator Role in the Cloud Era: Better Than Ever (ENT212) | A...The System Administrator Role in the Cloud Era: Better Than Ever (ENT212) | A...
The System Administrator Role in the Cloud Era: Better Than Ever (ENT212) | A...
 
Securing your Cloud Deployment
Securing your Cloud DeploymentSecuring your Cloud Deployment
Securing your Cloud Deployment
 
Legal Issues in Cloud Computing (J. Haislmaier - IP Institute 2010)
Legal Issues in Cloud Computing (J. Haislmaier - IP Institute 2010)Legal Issues in Cloud Computing (J. Haislmaier - IP Institute 2010)
Legal Issues in Cloud Computing (J. Haislmaier - IP Institute 2010)
 
Mining IT Summit Nov 6 2014
Mining IT Summit Nov 6 2014Mining IT Summit Nov 6 2014
Mining IT Summit Nov 6 2014
 
Bringing the Cloud Back to Earth
Bringing the Cloud Back to EarthBringing the Cloud Back to Earth
Bringing the Cloud Back to Earth
 
Cutting To The Chase: Cloud From A Customers Perspective
Cutting To The Chase: Cloud From A Customers PerspectiveCutting To The Chase: Cloud From A Customers Perspective
Cutting To The Chase: Cloud From A Customers Perspective
 
Transforming cloud security into an advantage
Transforming cloud security into an advantageTransforming cloud security into an advantage
Transforming cloud security into an advantage
 
Becomming a cloud governance ninja linthicum interop fall 2013
Becomming a cloud governance ninja linthicum interop fall 2013Becomming a cloud governance ninja linthicum interop fall 2013
Becomming a cloud governance ninja linthicum interop fall 2013
 
Lions and Tigers and Cloud, Oh My! The Truth Behind Cloud Security and Risks
Lions and Tigers and Cloud, Oh My! The Truth Behind Cloud Security and RisksLions and Tigers and Cloud, Oh My! The Truth Behind Cloud Security and Risks
Lions and Tigers and Cloud, Oh My! The Truth Behind Cloud Security and Risks
 
Legal issues in the cloud renzo marchini & gene landy
Legal issues in the cloud   renzo marchini & gene landyLegal issues in the cloud   renzo marchini & gene landy
Legal issues in the cloud renzo marchini & gene landy
 
Developing a cloud strategy - Presentation Nexon ABC Event
Developing a cloud strategy - Presentation Nexon ABC EventDeveloping a cloud strategy - Presentation Nexon ABC Event
Developing a cloud strategy - Presentation Nexon ABC Event
 
Cloud services and it security
Cloud services and it securityCloud services and it security
Cloud services and it security
 
Implementing cloud based devops for distributed agile projects
Implementing cloud based devops for distributed agile projectsImplementing cloud based devops for distributed agile projects
Implementing cloud based devops for distributed agile projects
 
Cloud Security.ppt
Cloud Security.pptCloud Security.ppt
Cloud Security.ppt
 
Virtualization and cloud impact overview auditor spin enterprise gr-cv3
Virtualization and cloud impact overview auditor spin   enterprise gr-cv3Virtualization and cloud impact overview auditor spin   enterprise gr-cv3
Virtualization and cloud impact overview auditor spin enterprise gr-cv3
 
Cloud vs. Self Hosted Software Options
Cloud vs. Self Hosted Software OptionsCloud vs. Self Hosted Software Options
Cloud vs. Self Hosted Software Options
 

More from Jason Haislmaier

Mobile Apps - Legal and Practical Considerations
Mobile Apps - Legal and Practical ConsiderationsMobile Apps - Legal and Practical Considerations
Mobile Apps - Legal and Practical Considerations
Jason Haislmaier
 
When Past Performance May Be Indicative of Future Results - The Legal Implica...
When Past Performance May Be Indicative of Future Results - The Legal Implica...When Past Performance May Be Indicative of Future Results - The Legal Implica...
When Past Performance May Be Indicative of Future Results - The Legal Implica...
Jason Haislmaier
 
Covidien - FDA Guidance on Mobile Medical Apps 140124
Covidien - FDA Guidance on Mobile Medical Apps 140124Covidien - FDA Guidance on Mobile Medical Apps 140124
Covidien - FDA Guidance on Mobile Medical Apps 140124
Jason Haislmaier
 
Presentation - Mobile Medical Applications Guidance for Industry and Food and...
Presentation - Mobile Medical Applications Guidance for Industry and Food and...Presentation - Mobile Medical Applications Guidance for Industry and Food and...
Presentation - Mobile Medical Applications Guidance for Industry and Food and...
Jason Haislmaier
 
Presentation - gener8tor - Data Privacy, Security, and Rights 130627
Presentation - gener8tor - Data Privacy, Security, and Rights 130627Presentation - gener8tor - Data Privacy, Security, and Rights 130627
Presentation - gener8tor - Data Privacy, Security, and Rights 130627
Jason Haislmaier
 
Data Property Rights (Rocky Mountain IP and Technology Institute 2013) (May 2...
Data Property Rights (Rocky Mountain IP and Technology Institute 2013) (May 2...Data Property Rights (Rocky Mountain IP and Technology Institute 2013) (May 2...
Data Property Rights (Rocky Mountain IP and Technology Institute 2013) (May 2...
Jason Haislmaier
 
"Crash Course" on Open Source Silicon Flatirons Center (2012)
"Crash Course" on Open Source Silicon Flatirons Center (2012) "Crash Course" on Open Source Silicon Flatirons Center (2012)
"Crash Course" on Open Source Silicon Flatirons Center (2012)
Jason Haislmaier
 
Data Security and Privacy Landscape 2012 (September 2012)
Data Security and Privacy Landscape 2012 (September 2012)Data Security and Privacy Landscape 2012 (September 2012)
Data Security and Privacy Landscape 2012 (September 2012)
Jason Haislmaier
 
Crash Course on Data Privacy (December 2012)
Crash Course on Data Privacy (December 2012)Crash Course on Data Privacy (December 2012)
Crash Course on Data Privacy (December 2012)
Jason Haislmaier
 
Presentation ncsl - mobile privacy enforcement 130502 (as presented)
Presentation   ncsl - mobile privacy enforcement 130502 (as presented)Presentation   ncsl - mobile privacy enforcement 130502 (as presented)
Presentation ncsl - mobile privacy enforcement 130502 (as presented)
Jason Haislmaier
 
Data Privacy & Security Update 2012
Data Privacy & Security Update 2012Data Privacy & Security Update 2012
Data Privacy & Security Update 2012
Jason Haislmaier
 
Open Source License Compliance In The Cloud
Open Source License Compliance In The CloudOpen Source License Compliance In The Cloud
Open Source License Compliance In The Cloud
Jason Haislmaier
 
Boulder/Denver Software Club Presentation: "All Things Data - Data Right...
Boulder/Denver Software Club Presentation: "All Things Data - Data Right...Boulder/Denver Software Club Presentation: "All Things Data - Data Right...
Boulder/Denver Software Club Presentation: "All Things Data - Data Right...
Jason Haislmaier
 
2011 "Crash Course" on Open Source
2011 "Crash Course" on Open Source2011 "Crash Course" on Open Source
2011 "Crash Course" on Open Source
Jason Haislmaier
 
2011 Silicon Flatirons IP (Crash Course) For Entrepreneurers
2011 Silicon Flatirons IP (Crash Course) For Entrepreneurers2011 Silicon Flatirons IP (Crash Course) For Entrepreneurers
2011 Silicon Flatirons IP (Crash Course) For Entrepreneurers
Jason Haislmaier
 
Fundamentals in Software Licensing (J. Haislmaier - IP Institute 2010)
Fundamentals in Software Licensing (J. Haislmaier - IP Institute 2010)Fundamentals in Software Licensing (J. Haislmaier - IP Institute 2010)
Fundamentals in Software Licensing (J. Haislmaier - IP Institute 2010)
Jason Haislmaier
 

More from Jason Haislmaier (16)

Mobile Apps - Legal and Practical Considerations
Mobile Apps - Legal and Practical ConsiderationsMobile Apps - Legal and Practical Considerations
Mobile Apps - Legal and Practical Considerations
 
When Past Performance May Be Indicative of Future Results - The Legal Implica...
When Past Performance May Be Indicative of Future Results - The Legal Implica...When Past Performance May Be Indicative of Future Results - The Legal Implica...
When Past Performance May Be Indicative of Future Results - The Legal Implica...
 
Covidien - FDA Guidance on Mobile Medical Apps 140124
Covidien - FDA Guidance on Mobile Medical Apps 140124Covidien - FDA Guidance on Mobile Medical Apps 140124
Covidien - FDA Guidance on Mobile Medical Apps 140124
 
Presentation - Mobile Medical Applications Guidance for Industry and Food and...
Presentation - Mobile Medical Applications Guidance for Industry and Food and...Presentation - Mobile Medical Applications Guidance for Industry and Food and...
Presentation - Mobile Medical Applications Guidance for Industry and Food and...
 
Presentation - gener8tor - Data Privacy, Security, and Rights 130627
Presentation - gener8tor - Data Privacy, Security, and Rights 130627Presentation - gener8tor - Data Privacy, Security, and Rights 130627
Presentation - gener8tor - Data Privacy, Security, and Rights 130627
 
Data Property Rights (Rocky Mountain IP and Technology Institute 2013) (May 2...
Data Property Rights (Rocky Mountain IP and Technology Institute 2013) (May 2...Data Property Rights (Rocky Mountain IP and Technology Institute 2013) (May 2...
Data Property Rights (Rocky Mountain IP and Technology Institute 2013) (May 2...
 
"Crash Course" on Open Source Silicon Flatirons Center (2012)
"Crash Course" on Open Source Silicon Flatirons Center (2012) "Crash Course" on Open Source Silicon Flatirons Center (2012)
"Crash Course" on Open Source Silicon Flatirons Center (2012)
 
Data Security and Privacy Landscape 2012 (September 2012)
Data Security and Privacy Landscape 2012 (September 2012)Data Security and Privacy Landscape 2012 (September 2012)
Data Security and Privacy Landscape 2012 (September 2012)
 
Crash Course on Data Privacy (December 2012)
Crash Course on Data Privacy (December 2012)Crash Course on Data Privacy (December 2012)
Crash Course on Data Privacy (December 2012)
 
Presentation ncsl - mobile privacy enforcement 130502 (as presented)
Presentation   ncsl - mobile privacy enforcement 130502 (as presented)Presentation   ncsl - mobile privacy enforcement 130502 (as presented)
Presentation ncsl - mobile privacy enforcement 130502 (as presented)
 
Data Privacy & Security Update 2012
Data Privacy & Security Update 2012Data Privacy & Security Update 2012
Data Privacy & Security Update 2012
 
Open Source License Compliance In The Cloud
Open Source License Compliance In The CloudOpen Source License Compliance In The Cloud
Open Source License Compliance In The Cloud
 
Boulder/Denver Software Club Presentation: "All Things Data - Data Right...
Boulder/Denver Software Club Presentation: "All Things Data - Data Right...Boulder/Denver Software Club Presentation: "All Things Data - Data Right...
Boulder/Denver Software Club Presentation: "All Things Data - Data Right...
 
2011 "Crash Course" on Open Source
2011 "Crash Course" on Open Source2011 "Crash Course" on Open Source
2011 "Crash Course" on Open Source
 
2011 Silicon Flatirons IP (Crash Course) For Entrepreneurers
2011 Silicon Flatirons IP (Crash Course) For Entrepreneurers2011 Silicon Flatirons IP (Crash Course) For Entrepreneurers
2011 Silicon Flatirons IP (Crash Course) For Entrepreneurers
 
Fundamentals in Software Licensing (J. Haislmaier - IP Institute 2010)
Fundamentals in Software Licensing (J. Haislmaier - IP Institute 2010)Fundamentals in Software Licensing (J. Haislmaier - IP Institute 2010)
Fundamentals in Software Licensing (J. Haislmaier - IP Institute 2010)
 

Recently uploaded

Welocme to ViralQR, your best QR code generator.
Welocme to ViralQR, your best QR code generator.Welocme to ViralQR, your best QR code generator.
Welocme to ViralQR, your best QR code generator.
ViralQR
 
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
BookNet Canada
 
The Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and SalesThe Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and Sales
Laura Byrne
 
Leading Change strategies and insights for effective change management pdf 1.pdf
Leading Change strategies and insights for effective change management pdf 1.pdfLeading Change strategies and insights for effective change management pdf 1.pdf
Leading Change strategies and insights for effective change management pdf 1.pdf
OnBoard
 
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
DanBrown980551
 
Secstrike : Reverse Engineering & Pwnable tools for CTF.pptx
Secstrike : Reverse Engineering & Pwnable tools for CTF.pptxSecstrike : Reverse Engineering & Pwnable tools for CTF.pptx
Secstrike : Reverse Engineering & Pwnable tools for CTF.pptx
nkrafacyberclub
 
When stars align: studies in data quality, knowledge graphs, and machine lear...
When stars align: studies in data quality, knowledge graphs, and machine lear...When stars align: studies in data quality, knowledge graphs, and machine lear...
When stars align: studies in data quality, knowledge graphs, and machine lear...
Elena Simperl
 
By Design, not by Accident - Agile Venture Bolzano 2024
By Design, not by Accident - Agile Venture Bolzano 2024By Design, not by Accident - Agile Venture Bolzano 2024
By Design, not by Accident - Agile Venture Bolzano 2024
Pierluigi Pugliese
 
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...
Ramesh Iyer
 
DevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA ConnectDevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA Connect
Kari Kakkonen
 
Assure Contact Center Experiences for Your Customers With ThousandEyes
Assure Contact Center Experiences for Your Customers With ThousandEyesAssure Contact Center Experiences for Your Customers With ThousandEyes
Assure Contact Center Experiences for Your Customers With ThousandEyes
ThousandEyes
 
Elizabeth Buie - Older adults: Are we really designing for our future selves?
Elizabeth Buie - Older adults: Are we really designing for our future selves?Elizabeth Buie - Older adults: Are we really designing for our future selves?
Elizabeth Buie - Older adults: Are we really designing for our future selves?
Nexer Digital
 
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Thierry Lestable
 
UiPath Test Automation using UiPath Test Suite series, part 3
UiPath Test Automation using UiPath Test Suite series, part 3UiPath Test Automation using UiPath Test Suite series, part 3
UiPath Test Automation using UiPath Test Suite series, part 3
DianaGray10
 
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdfKey Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdf
Cheryl Hung
 
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdfFIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance
 
Quantum Computing: Current Landscape and the Future Role of APIs
Quantum Computing: Current Landscape and the Future Role of APIsQuantum Computing: Current Landscape and the Future Role of APIs
Quantum Computing: Current Landscape and the Future Role of APIs
Vlad Stirbu
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
Alan Dix
 
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdfFIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance
 
Assuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyesAssuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyes
ThousandEyes
 

Recently uploaded (20)

Welocme to ViralQR, your best QR code generator.
Welocme to ViralQR, your best QR code generator.Welocme to ViralQR, your best QR code generator.
Welocme to ViralQR, your best QR code generator.
 
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
 
The Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and SalesThe Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and Sales
 
Leading Change strategies and insights for effective change management pdf 1.pdf
Leading Change strategies and insights for effective change management pdf 1.pdfLeading Change strategies and insights for effective change management pdf 1.pdf
Leading Change strategies and insights for effective change management pdf 1.pdf
 
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
 
Secstrike : Reverse Engineering & Pwnable tools for CTF.pptx
Secstrike : Reverse Engineering & Pwnable tools for CTF.pptxSecstrike : Reverse Engineering & Pwnable tools for CTF.pptx
Secstrike : Reverse Engineering & Pwnable tools for CTF.pptx
 
When stars align: studies in data quality, knowledge graphs, and machine lear...
When stars align: studies in data quality, knowledge graphs, and machine lear...When stars align: studies in data quality, knowledge graphs, and machine lear...
When stars align: studies in data quality, knowledge graphs, and machine lear...
 
By Design, not by Accident - Agile Venture Bolzano 2024
By Design, not by Accident - Agile Venture Bolzano 2024By Design, not by Accident - Agile Venture Bolzano 2024
By Design, not by Accident - Agile Venture Bolzano 2024
 
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...
 
DevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA ConnectDevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA Connect
 
Assure Contact Center Experiences for Your Customers With ThousandEyes
Assure Contact Center Experiences for Your Customers With ThousandEyesAssure Contact Center Experiences for Your Customers With ThousandEyes
Assure Contact Center Experiences for Your Customers With ThousandEyes
 
Elizabeth Buie - Older adults: Are we really designing for our future selves?
Elizabeth Buie - Older adults: Are we really designing for our future selves?Elizabeth Buie - Older adults: Are we really designing for our future selves?
Elizabeth Buie - Older adults: Are we really designing for our future selves?
 
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
 
UiPath Test Automation using UiPath Test Suite series, part 3
UiPath Test Automation using UiPath Test Suite series, part 3UiPath Test Automation using UiPath Test Suite series, part 3
UiPath Test Automation using UiPath Test Suite series, part 3
 
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdfKey Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdf
 
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdfFIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
 
Quantum Computing: Current Landscape and the Future Role of APIs
Quantum Computing: Current Landscape and the Future Role of APIsQuantum Computing: Current Landscape and the Future Role of APIs
Quantum Computing: Current Landscape and the Future Role of APIs
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
 
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdfFIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
 
Assuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyesAssuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyes
 

Licensing in the Cloud (2013 Rocky Mountain IP and Technology Institute) (May 2013)

  • 1. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Copyright 2013 BryanCave LLP May 30, 2013 Jason D. Haislmaier jason.haislmaier@bryancave.com Licensing Issues in the Cloud Copyright 2013 BryanCave LLP
  • 2. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP This presentation is intended for general informational purposes only and should not be construed as legal advice or legal opinion on any specific facts or circumstances, nor is it intended to address specific legal compliance issues that may arise in particular circumstances. Please consult counsel concerning your own situation and any specific legal questions you may have. The thoughts and opinions expressed in this presentation are those of the individual presenters and do not necessarily reflect the official or unofficial thoughts or opinions of their employers. For further information regarding this presentation, please contact the presenter(s) listed in the presentation. Unless otherwise noted, all original content in this presentation is licensed under the Creative Commons Creative Commons Attribution-Share Alike 3.0 United States License available at: http://creativecommons.org/licenses/by-sa/3.0/us.
  • 3. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP What is it? Cloud
  • 4. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Cloud What is it?
  • 5. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
  • 6. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Steve Ballmer CEO, Speaking at a Microsoft event in Singapore “I'm not sure my goal for today is going to be to actually explain it to you, but I do want to make sure that people understand that I think everybody in our industry accepts it's the next major transition point in terms of how IT gets done.”
  • 7. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Cloud What is it?
  • 8. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Established Definitions Key Characteristics
  • 9. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP
  • 10. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP NIST Definition • Initial draft – April 24, 2009 • Final draft (v16) – October 25, 2011 • In practice, the definition has continued to evolve What is Cloud Computing?
  • 11. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP • Still emerging and rapidly expanding • Many models, many providers, many markets • Computing resources or functionality delivered as a service over a network • Common traits – On-demand (self-service) – Pooled resources (“multi-tenant”) – Rapid provisioning (high elasticity) – Dynamically assigned resources (“Infinite” capabilities) – Broad network access (ubiquitous) – Location and device-independent – Thin client interface (e.g., a web browser) • Increased access to applications, data, and functionality • Reduced costs (for infrastructure, support, and staffing) • Reduced need for knowledge and control of resources Key Characteristics What is Cloud Computing?
  • 12. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP • Private cloud – Owned or leased by a single organization (“internal” cloud) – Operated solely for that organization • Community cloud – Shared by several organizations – Supports a specific user community (often with shared concerns) • Public cloud – Owned by a company selling cloud services – Mass-market model • Hybrids and combinations abound Cloud Models - Deployment What is Cloud Computing?
  • 13. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP • Software as a Service (SaaS) – User does not manage or control the underlying infrastructure – Limited user ability to set configuration settings (mass-market software) • Platform as a Service (PaaS) – User does not manage or control the underlying infrastructure – User selects (and even builds) the applications and other software running on the infrastructure • Infrastructure as a Service (IaaS) – User does not manage or control the underlying infrastructure – User selects and configures the fundamental resources running on the infrastructure (operating systems, storage, applications, and other networking components) – User selects and controls (and even builds) the applications and other software running on the infrastructure Cloud Models - Delivery What is Cloud Computing?
  • 14. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Many similarities Many differences
  • 15. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Understand the similarities Understand the differences Understand why they matter
  • 16. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Many Issues– Some New, Some Not Licensing in the Cloud • Cloud computing represents a paradigm shift from the traditional enterprise software delivery model • Paradigm shift does not mean an entirely new paradigm • Cloud computing shares many legal issues in common with legacy licensing models, but poses new legal challenges – IP and software rights – Service levels and performance – Privacy and security – Data protection, rights, and usage – Cross-border issues – Legal compliance issues • Lessons learned from traditional software licensing are often applicable
  • 17. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Transparency and Understanding
  • 18. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Transparency and Understanding Cloud
  • 19. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Transparency and Understanding
  • 20. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Understand The Nature of the Services Transparency and Understanding • Cloud services often rely on multiple levels of providers – Offer expanded cloud service offerings – Provide additional capacity – Spread risk • Conduct diligence and clarify how the services are actually being provided • Require responsibility/liability by the primary provider for all other providers • Understand how software, IP and data will be affected • Solidify ownership and rights • Understand inherent limitations
  • 21. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Rights in Software and IP
  • 22. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP • Cloud services are moving beyond vendor-provided software – Many permit customer-supplied software in addition to standard applications (BYOS) – Increasingly allow for the development of software to run on the cloud platform • Contracting models can vary significantly – Scope of license – Ownership of developments – Pricing (users, processors, actual use, etc.) – Rights after cloud services end • Likewise, vendor-provided software is increasingly comprised of third party and open source software • Understand how licensing and ownership models may impact the services Evaluate and Clarify Ownership and Rights Software and IP
  • 23. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Rights in Data
  • 24. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Do you know where your data is? Do you know what data is yours? Does your provider know?
  • 25. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP • Increasingly lucrative model for cloud providers to obtain rights in the data • Define “data” (both existing and generated through the services) • Specify ownership rights • Grant provider specific (and limited) rights in the data – Use as required to provide the services – Limited (if any) use for other purposes – Only permitted monitoring and access • Protect data as confidential information where applicable Secure Rights in Data Data
  • 26. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Cross-Border Legal Issues
  • 27. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP • Cloud computing services are inherently “stateless” • Resources are dynamically and constantly re-provisioned • Servers are located in multiple different locations (and often countries) • Never anywhere, but always somewhere • Can and does create jurisdictional and regulatory issues – Cross-border flows of software, IP, and data – Compliance with applicable regulations – Potentially conflicting outcomes • Obtain transparency and control – Specified locations – Limitations/notices regarding changes – Specified ownership and license rights – Required audit trail Inherently Cross-Border Cross-Border Legal Issues
  • 28. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Performance and Service Levels
  • 29. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP • Cloud provider business models rely on the adoption of a standard platform – Standard service offerings – Standard performance and service levels • Providers are often (still) reticent to negotiate changes to service levels • As the sophistication and volume of services grow, so does the need for flexibility • At minimum, understand the limitations on the service being received and how they may impact your requirements and expectations • Strong parallels to IT outsourcing agreements Standard Platform, Standard Service Levels Service Levels
  • 30. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Termination and Transition
  • 31. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP • Dependency on cloud services is increasing • Understand you level of dependency • Adjust termination triggers as needed • Understand practical barriers to transitioning to a new service provider • Obtain necessary visibility into services – Software and hardware used to provide services – Applicable software licensing terms – Relevant subcontractors – Compatibility and interoperability issues • Provide for transition assistance where needed – All services provided during the term of the agreement – Assistance needed to transition to a new provider Control Termination and Transition Termination and Transition
  • 32. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Business Continuity and Disaster Recovery
  • 33. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP What Happens When the Provider Fails Business Continuity and Disaster Recovery • How long could you operate without access to: – Services? – Software? – Data? • Provide for a business continuity plan (BCP) – Understand your current BCP – Diligence provider’s existing BCP – Set minimum requirements for the BCP in the agreement – Restrict changes to the BCP – Include audit rights to ensure implementation of the BCP • Consider data back-up (or even service back-up) through a secondary provider
  • 34. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP • Cloud services are growing ever more sophisticated • The importance of cloud services will only increase • In addition to data, significant software and IP is now developed through cloud services • Take the time to understand the nature of the cloud services being provided • Leverage legal concepts from traditional software licensing to address issues that matter to your business • Having flexibility and additional rights can be important, even if you have to pay for them Paradigm Shift, But Many Existing Rules Apply Closing Thoughts
  • 35. Copyright 2012 Bryan CaveCopyright 2013 BryanCave LLP Copyright 2013 BryanCave LLP Thank You. Jason Haislmaier jason.haislmaier@bryancave.com @haislmaier http://www.linkedin.com/in/haislmaier