Salesforce.com to lobby Canberra over cloud concerns

 

Vendor argues that no Australian law prohibits banks, agencies from hosting data offshore.

Online software company Salesforce.com plans to send a senior public policy executive to Australia in an effort to ease concerns among regulators over the risks of cloud computing adoption.

Daniel Burton, senior vice president of global public policy at Salesforce.com told iTnews he was scheduled to visit Australia to address the regulatory uncertainty faced by corporate and Government clients.

"We will be having a serious engagement with the Australian Government about cloud computing," Burton said.

The company, which leases CRM, sales force automation, collaboration and software development tools from its data centres in the United States and Singapore, was concerned about the reading of an open letter sent by Australia's financial regulator APRA to the nation's banking sector – warning organisations about the due diligence required before considering cloud computing.

"We saw [the letter] as a very positive sign - it shows that cloud computing is real in Australia," Burton told iTnews. "Banks are adopting it and the Government wants to make sure they are using it judiciously. It validated the market.

"We welcome the scrutiny APRA said it was going to give cloud computing because Salesforce.com meets the privacy laws in Australia. We have good security that has been tried and tested - with several financial services customers in Australia and even some Australian Government agencies running on Salesforce.com."

Burton said that any concerns around data sovereignty (i.e. whether data on citizens is at rest in its country of origin) ignores a "reality today that data does flow freely around the world."

Burton said that there are only "a handful" of laws in jurisdictions around the world that deal specifically with the notion of data sovereignty.

He said Australia has no laws on its books that suggest data has to stay in-country.

"Governments realise that international data flows are key to productivity, performance, competitiveness and price advantages. If you start shutting those down you are really hamstringing the economy," Burton said.

"The APRA guidelines did not say you cannot use cloud computing, or that it has to be [hosted] in Australia, but that [it was] concerned that some financial services organisations are embracing cloud computing without doing proper due diligence," he said.

"And [the letter listed] laws and regulations that have to be complied with. We comply with those [regulations] so we welcome that scrutiny."

Stay tuned to iTnews this afternoon for a wider discussion on cloud computing in finance and Government.

Copyright © iTnews.com.au . All rights reserved.


Salesforce.com to lobby Canberra over cloud concerns
"The requirement is very simple: Those cloud vendors simply need to attain and provide irrevocable contractual guarantees fro0m the governments of the countries in question (EG Singapore and USA - ..."
By Maxxi2
 
 
 
Comments: 3
MenagerieAU
Dec 13, 2010 7:50 PM
"Vendor argues that no Australian law prohibits banks, agencies from hosting data offshore".

That's true but S33 of the Information Privacy Act 2009 (Qld) sets a number of criteria that need to be satisfied to do so. The provision that most often applies is S33(a) which requires the individual to consent to the transfer of their personal information outside of Australia. This accurately reflects current community expectations in my personal view.

With limited public sector funds available for IT solutions, the complexity resulting from this circumstance means in practice that off-shoring personal information is not viable under current legislation.

So come on you SAAS providers, build up your onshore solutions so Qld government organisations can take advantage of the opportunities that currently remain just out of reach.
BaysNet
Dec 14, 2010 9:03 AM
Ignorance is no defence and it's clear they are just lobbying to prevent existing legislation to be clarified to keep up with technological advances. The cloud SAAS providers model only works where they can move your data wherever they want to keep their costs down. Building a country by country cloud service is not on their agenda.
Maxxi2
Dec 14, 2010 12:10 PM
The requirement is very simple: Those cloud vendors simply need to attain and provide irrevocable contractual guarantees fro0m the governments of the countries in question (EG Singapore and USA - plus any other where they want to operate) that irrevocably stipulates that the laws of those countries will never compel the cloud providers to make the Australian citizens data available or accessible to to them in any fashion.

That should fix it.

Until then, our data could be confiscated, perused, misused and abused by potentially any government.

And I am great fan of cloud computing, but with governance and data integrity protections that reside here in Australia, not in the hands of other countries and in systems that can be accessed by who-knows-who in foreign countries, that our lawmakes cannot address.
Comments have been disabled for this article.
 
 
 
Top Stories
Australian miners send drones to work
In-depth: Unmanned aerial vehicles in the resources sector.
 
The New Zealand telco problem
Opinion: Could Telstra save Kiwi telcos?
 
IT price probe to 'name and shame' gougers
Industry ducking the issue, committee claims.
 
Sign up to receive iTnews email bulletins
   FOLLOW US...

Latest VideosSee all videos »

Latest Comments
Polls
Should the Government enact new legislation to protect copyright holders in the digital age?

   |   View results
Yes
  19%
 
No
  81%
TOTAL VOTES: 510

Vote