If you use a cloud service, you're still responsible for what happens to the information. If there's a privacy breach, you're going to be the one answering the questions about what went wrong.
Specifically, it's your responsibility to make sure that personal information:
These guidelines focus on helping you manage these responsibilities in the context of cloud computing and other information technology outsourcing.
For most businesses, the staff are the key to handling personal information properly. Figure out what your staff need to know. Talk to them about your move to the cloud, and what's involved. Give them any training or advice they need so they can help you keep personal information safe. If you need help from us, check our website or contact our enquiries line (0800 803 909) or email enquiries@privacy.org.nz.
For example, you might have a policy that information needs to be encrypted when you send it to an outsourcer or cloud service provider for processing or storage. But if that's not done automatically, or your staff aren't trained to make sure the information is encrypted, mistakes are inevitable.
