---
title: How can we use the cloud and comply with global privacy laws?
description: Encrypted, tokenized or anonymized data can be stored in the cloud without a worry in regard to local, federal or industry data regulations
image: http://www.cloudmask.com/hubfs/social-suggested-images/452144-privacy.jpg
---

[![CloudMask - Data protection under breach](https://www.cloudmask.com/hs-fs/hubfs/Horizontal-larger-text.png?width=223&height=40&name=Horizontal-larger-text.png "CloudMask - Data protection under breach")](https://www.cloudmask.com)

- [For Business](https://www.cloudmask.com/business)
- [For Enterprise](https://www.cloudmask.com/enterprise)
- [For Developers](https://www.cloudmask.com/saas-developers)
- Resources 
    - [Blog](https://www.cloudmask.com/blog)
    - [Videos](https://www.cloudmask.com/videos)
    - [Help](http://help.cloudmask.com)

# How can we use the cloud and comply with global privacy laws?

<https://www.cloudmask.com/blog/data-anonymization-can-reduce-the-risks-from-data-breaches> <https://www.cloudmask.com/blog/data-breaches-the-encryption-challenges>

![452144-privacy.jpg](http://www.cloudmask.com/hs-fs/hubfs/social-suggested-images/452144-privacy.jpg?width=471&height=441&name=452144-privacy.jpg)

The cloud clearly provides a number of benefits for businesses and associations, but as many are aware, remaining compliant with regional, federal and industry law and regulations is a major challenge.

For decades, organizations have kept control over their data and customers' information as it was simply stored in on-premise data centers. Now, cloud services are the de facto standard for enterprise IT, especially for smaller organizations that are planning for growth. The cloud clearly provides a number of benefits for businesses and associations, but as many are aware, remaining compliant with regional, federal, and industry laws and regulations is a major challenge. This hurdle is especially difficult to clear when organizations must adhere to a number of data security and privacy standards.

So, the question is when using the cloud to store, access, share or manipulate data, how can organizations ensure they remain compliant with so many data privacy regulations?

## **Think geographically**

One solution for business and associations is to ensure that their cloud vendors are geographically local or at least located in the same jurisdiction. After all, if a majority of problems are associated with maintaining compliance with industry regulations as well as different countries' federal laws, why not remove one issue from the equation? This just isn't a viable alternative for many organizations, especially ones with global footprints or those that are particularly reliant on travel.

Additionally, as CIO magazine contributor Paul Korzeniowski pointed out, cloud service providers [often use third parties for operational support](http://www.cio.com/article/2909546/cloud-computing/ensuring-compliance-in-the-cloud.html). Businesses and associations are responsible for data protection at the end of the day, and if a breach occurs while not in compliance with those third parties' regional regulations, data owners will always be on the hook.

## **Encryption**

The alternative solution is often highlighted by many cybersecurity experts: encryption. Writing for Tech Target, Aislyn Fredsall recalled a webcast from Rich Mogull, founder of Securosis, in which he explained that achieving compliance in the cloud is [a major, and "obvious," factor](http://searchcompliance.techtarget.com/video/Cloud-compliance-data-protection-top-reasons-for-encryption) driving corporate adoption of encryption solutions.

*"Encryption only ensures compliance if the key remains in the data owner's control."*

By obscuring sensitive information, organizations can remove many data privacy and security regulations from their cybersecurity scope. Simply put, encrypted, tokenized or otherwise anonymized data can be stored in the cloud without a worry in regard to local, federal or industry regulations - the personally identifiable information effectively disappears from sight of IT teams, third-party partners and any other entities.

However, encryption alone is not enough. It will only ensure compliance if the key remains in the data owner's control. If organizations store encryption keys in the cloud, then they are nullifying the point of data obscurity in the first place.

This is why CloudMask is a last-layer data security solution: It has the ability to encrypt data and protect information, as well as provide data owners with control over the encryption key, allowing them to store it outside of cloud services. No one can get in.

When personally identifying information is no longer present in a data set, a breach of IT security does not automatically become a data breach.

![Protection Under Breach](https://www.cloudmask.com/hubfs/GIF_Animation/Gif%20Animation%20All.gif)

 

#### *With CloudMask, only your authorized parties can decrypt and see your data. Not hackers with your valid password, Not Cloud Providers, Not Government Agencies, and Not even CloudMask can see your protected data. *[Twenty-six government cybersecurity ](https://www.commoncriteriaportal.org/)*agencies around the world* [back these claims.](https://www.cloudmask.com/hubfs/CloudMask_Aug2016/pdf/Common_Criteria_Cert.pdf?t=1486380970425)

  [![TRY IT NOW](https://no-cache.hubspot.com/cta/default/468512/82253abc-9465-4974-b5ea-2a46f934181b.png)](https://cta-redirect.hubspot.com/cta/redirect/468512/82253abc-9465-4974-b5ea-2a46f934181b)

Watch our video and demo at [www.vimeo.com/cloudmask](http://www.vimeo.com/cloudmask)

 

![](https://www.cloudmask.com/hs-fs/hubfs/Imported_Blog_Media/__ptq-34.gif?width=1&height=1&name=__ptq-34.gif)

Share this article:

- [Tweet](https://twitter.com/share)

### Related posts

[![How to evaluate and select the best encryption services](https://www.cloudmask.com/hubfs/Lock_01.jpg)](https://www.cloudmask.com/blog/how-to-evaluate-and-select-the-best-encryption-services)

[How to evaluate and select the best encryption services](https://www.cloudmask.com/blog/how-to-evaluate-and-select-the-best-encryption-services) March 12, 2018

[![Turn regulatory headaches into a competitive advantage](https://www.cloudmask.com/hubfs/Imported_Blog_Media/Data-security-and-privacy-compliance-and-competitiveness-are-one-in-the-same-for-law-firms.jpg)](https://www.cloudmask.com/blog/privacy-regulation)

[Turn regulatory headaches into a competitive advantage](https://www.cloudmask.com/blog/privacy-regulation) January 02, 2018

[![Why Your Data Security Strategy Should Include Data Masking](https://www.cloudmask.com/hs-fs/hub/468512/file-2584554648.jpg)](https://www.cloudmask.com/blog/why-your-data-security-strategy-should-include-data-masking)

[Why Your Data Security Strategy Should Include Data Masking](https://www.cloudmask.com/blog/why-your-data-security-strategy-should-include-data-masking) September 19, 2017

[![Court Rulings Limit Privacy Protections From Data Residency](https://www.cloudmask.com/hubfs/court.jpg)](https://www.cloudmask.com/blog/court-rulings-limit-privacy-protections-from-data-residency)

[Court Rulings Limit Privacy Protections From Data Residency](https://www.cloudmask.com/blog/court-rulings-limit-privacy-protections-from-data-residency) August 27, 2017

[![ITAR compliance: ignorance is no excuse](https://www.cloudmask.com/hubfs/ITAR.jpg)](https://www.cloudmask.com/blog/itar-compliance-ignorance-is-no-excuse)

[ITAR compliance: ignorance is no excuse](https://www.cloudmask.com/blog/itar-compliance-ignorance-is-no-excuse) August 04, 2017

[![I have “nothing to hide”! Why should I care about Government surveillance?](https://www.cloudmask.com/hubfs/it%20is%20your%20privacy%20center.jpg)](https://www.cloudmask.com/blog/i-have-nothing-to-hide-why-should-i-care-about-government-surveillance)

[I have “nothing to hide”! Why should I care about Government surveillance?](https://www.cloudmask.com/blog/i-have-nothing-to-hide-why-should-i-care-about-government-surveillance) May 22, 2017

Please enable JavaScript to view the &lt;a href="http://disqus.com/?ref\_noscript"&gt;comments powered by Disqus.&lt;/a&gt;

### Sign Up for our Newsletter to get the latest in everything cyber security. We care about your privacy, let us show you how.

### Recent Posts

### Posts by Topic

- [Breach (29)](https://www.cloudmask.com/blog/topic/breach)
- [Certifcation (3)](https://www.cloudmask.com/blog/topic/certifcation)
- [cloud computing (7)](https://www.cloudmask.com/blog/topic/cloud-computing)
- [Cloud threats (6)](https://www.cloudmask.com/blog/topic/cloud-threats)
- [Common Criteria (2)](https://www.cloudmask.com/blog/topic/common-criteria)
- [Compliance (18)](https://www.cloudmask.com/blog/topic/compliance)
- [costs (1)](https://www.cloudmask.com/blog/topic/costs)
- [cyber threats (22)](https://www.cloudmask.com/blog/topic/cyber-threats)
- [Cybercrime (6)](https://www.cloudmask.com/blog/topic/cybercrime)
- [data centric protection (1)](https://www.cloudmask.com/blog/topic/data-centric-protection)
- [Data Masking (25)](https://www.cloudmask.com/blog/topic/data-masking)
- [data privacy (28)](https://www.cloudmask.com/blog/topic/data-privacy)
- [data residency (4)](https://www.cloudmask.com/blog/topic/data-residency)
- [data security (9)](https://www.cloudmask.com/blog/topic/data-security)
- [Data Sovereignty (8)](https://www.cloudmask.com/blog/topic/data-sovereignty)
- [defense in depth (1)](https://www.cloudmask.com/blog/topic/defense-in-depth)
- [Email Security (5)](https://www.cloudmask.com/blog/topic/email-security)
- [encryption (8)](https://www.cloudmask.com/blog/topic/encryption)
- [financial (1)](https://www.cloudmask.com/blog/topic/financial)
- [Google (5)](https://www.cloudmask.com/blog/topic/google)
- [governance (3)](https://www.cloudmask.com/blog/topic/governance)
- [Government surveillance (13)](https://www.cloudmask.com/blog/topic/government-surveillance)
- [hacking (1)](https://www.cloudmask.com/blog/topic/hacking)
- [Healthcare (2)](https://www.cloudmask.com/blog/topic/healthcare)
- [insider threats (3)](https://www.cloudmask.com/blog/topic/insider-threats)
- [Legal (6)](https://www.cloudmask.com/blog/topic/legal)
- [New Security Paradigm (6)](https://www.cloudmask.com/blog/topic/new-security-paradigm)
- [Password (4)](https://www.cloudmask.com/blog/topic/password)
- [Personal Data Protection (17)](https://www.cloudmask.com/blog/topic/personal-data-protection)
- [PKI (1)](https://www.cloudmask.com/blog/topic/pki)
- [Regulation (1)](https://www.cloudmask.com/blog/topic/regulation)
- [RSA2017 (1)](https://www.cloudmask.com/blog/topic/rsa2017)
- [Shadow it (1)](https://www.cloudmask.com/blog/topic/shadow-it)
- [Tokenization (3)](https://www.cloudmask.com/blog/topic/tokenization)
- [User Privacy (10)](https://www.cloudmask.com/blog/topic/user-privacy)

see all

- [About Us](https://www.cloudmask.com/about)
- [Pricing & Plans](https://www.cloudmask.com/subscription-plans/)
- [Partners](https://www.cloudmask.com/about/cloud-partners/)
- [Get in touch with us](https://www.cloudmask.com/contact-us)

**CloudMask Inc.**  
+[1 (819) 282-1501](tel:1%20(819)%20282-1501)[+1 (866) 202-4443](tel:1-866-202-4443)

- What We Protect 
    - [For Business Users](https://www.cloudmask.com/business)
    - [For Enterprise](https://www.cloudmask.com/enterprise)
    - [For Developers](https://www.cloudmask.com/saas-developers)
- Who We Help 
    - [Legal](https://www.cloudmask.com/e2ee-for-legal-sector)
    - [Financial](https://www.cloudmask.com/e2ee-for-financial)
    - [Healthcare](https://www.cloudmask.com/e2ee-for-healthcare)
    - [Education](https://www.cloudmask.com/e2ee-for-education)
- Resources 
    - [Help & Support](http://help.cloudmask.com)
    - [Blogs](https://www.cloudmask.com/blog)
    - [News](https://www.cloudmask.com/news)
    - [Videos](https://www.cloudmask.com/videos)

[![Cloudmask](https://www.cloudmask.com/hs-fs/hubfs/CloudMask_Aug2016/CM-Logo-200-50.png?width=200&height=50&name=CM-Logo-200-50.png "Cloudmask")](https://www.cloudmask.com/)

© 2012-2017 CloudMask All Rights Reserved