<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="country-region"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"French Script MT";
panose-1:3 2 4 2 4 6 7 4 6 5;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Arial;
color:blue;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
@page Section1
{size:595.3pt 841.9pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-GB link=blue vlink=blue>
<div class=Section1>
<p class=MsoNormal><font size=3 color=blue face=Arial><span style='font-size:
12.0pt;font-family:Arial;color:blue'>Does that mean that, assuming that it is correct
that if the Department of Homeland Security asked for any data held in MS controlled
clouds it would be handed over without further ado, it is illegal, under DPA for
anyone in any sector to use Cloud technology – or at least any Cloud application
in which MS was involved - for anything containing personal data?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 color=blue face=Arial><span style='font-size:
12.0pt;font-family:Arial;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 color=blue face=Arial><span style='font-size:
12.0pt;font-family:Arial;color:blue'>Mind you, if NHS Business is exporting backoffice
functions such as typing letters and making appointments to <st1:country-region
w:st="on"><st1:place w:st="on">India</st1:place></st1:country-region>, and now this,
it would appear that the NHS doesn’t feel DPA applies to them – if someone
can save a few pence “in these times of unprecedented financial stringency”!
<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 color=blue face=Arial><span style='font-size:
12.0pt;font-family:Arial;color:blue'><o:p> </o:p></span></font></p>
<div>
<p class=MsoNormal><em><i><font size=5 color=blue face="French Script MT"><span
style='font-size:18.0pt;font-family:"French Script MT";color:blue'>Mary Hawking</span></font></i></em><font
color=blue><span style='color:blue'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 color=blue face="Times New Roman"><span
style='font-size:12.0pt;color:blue'> </span></font><o:p></o:p></p>
</div>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span lang=EN-US style='font-size:12.0pt'>
<hr size=3 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span lang=EN-US
style='font-size:10.0pt;font-family:Tahoma;font-weight:bold'>From:</span></font></b><font
size=2 face=Tahoma><span lang=EN-US style='font-size:10.0pt;font-family:Tahoma'>
Martin Hepworth [mailto:maxsec@gmail.com] <br>
<b><span style='font-weight:bold'>Sent:</span></b> 17 December 2010 13:54<br>
<b><span style='font-weight:bold'>To:</span></b> UK Cryptography Policy
Discussion Group<br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: Clouds!</span></font><span
lang=EN-US><o:p></o:p></span></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>Big if and but, the DPA
of which they should be aware.<br>
<br>
but sometimes the <st1:country-region w:st="on"><st1:place w:st="on">USA</st1:place></st1:country-region>
does have a clue about information retieval..<br>
<br>
<a
href="http://www.oxfordmail.co.uk/archive/2010/12/16/News+%28Cakenews%29/8740181.Formula_One_style_technology_used_in_court_case/">http://www.oxfordmail.co.uk/archive/2010/12/16/News+%28Cakenews%29/8740181.Formula_One_style_technology_used_in_court_case/</a><br>
<br>
<br clear=all>
-- <br>
Martin Hepworth<br>
<st1:place w:st="on"><st1:City w:st="on">Oxford</st1:City>, <st1:country-region
w:st="on">UK</st1:country-region></st1:place><br>
<br>
<o:p></o:p></span></font></p>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>On 17 December 2010 11:38, Michael Simpson <<a
href="mailto:mikie.simpson@gmail.com">mikie.simpson@gmail.com</a>> wrote:<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>It seems that cloud
computing is the new shiny up here in sunny<br>
<st1:country-region w:st="on"><st1:place w:st="on">scotland</st1:place></st1:country-region>.
Specifically use of cloud computing infrastructure to reduce<br>
costs in the NHS. Microsoft appear to be front and centre in the<br>
various presentations being given to the civil service and the buzz is<br>
growing about use of their Azure service. Whilst i understand and have<br>
used cloud services (mainly EC2 since its inception) for some specific<br>
tasks such as rapid prototyping of web applications for demo purposes<br>
and also for a highly scalable render farm experiment i am at a bit of<br>
a loss to see why it should be used in lieu of the normal<br>
"infrastructure as a service" or software as a service provided those<br>
companies already contracted (and paid for) by the taxpayer.<br>
-maybe for speeding up rendering of MRI images or scaling the intraweb<br>
server automagically so that when everyone hits it at 0900 it remains<br>
snappy, both of which could be achieved by utilising virtual machines<br>
or distributed clients to take advantage of *many* wasted cpu cycles<br>
that the scottish NHS already has.<br>
<br>
</rant><br>
<br>
The point of this mail though is to bring to your attention the<br>
recent revelation by Jon Honeyball in this month's "PC Pro" after he<br>
managed to corner Bob Muglia - president of MSFT's server and tools<br>
business and asked him about the sanctity of data stored in their EU<br>
cloud. Jon was told that if the dept of homeland security (or<br>
presumably any other agency that really wants to) asks for any data<br>
held by MSFT anywhere then it will be transferred to the <st1:country-region
w:st="on"><st1:place w:st="on">US</st1:place></st1:country-region> datacentre<br>
and handed over "no ifs, no buts."<br>
<br>
caveat emptor<br>
<br>
mike<o:p></o:p></span></font></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>