momius - Fotolia

Most businesses misguided on responsibility for cloud data protection

Survey shows more than 80% of organisations have the mistaken belief that their cloud service provider is accountable for data protection

More than eight out of 10 businesses wrongly believe that data protection is the responsibility of their cloud service provider, research has found.

In a survey of 1,200 global organisations by Veritas Technologies, 83% said cloud firms are responsible for data protection, and 69% thought they could transfer all responsibility for data protection, privacy and compliance to the provider.

Jason Tooley, vice-president of northern Europe for Veritas, said it was the responsibility of the business to ensure data compliance, not the cloud provider.

“Although cloud providers have a duty to ensure they help keep data secure and readily available, the ultimate responsibility of maintaining a compliance position with regulations such as GDPR [General Data Protection Regulation] lies with the organisation that owns the information,” he said.

“With the recently introduced UK Data Protection Bill, businesses should remember they are the data controller, and they must comply with all the obligations that GDPR imposes.”

The survey also found that global spending on cloud technologies is predicted to increase from 12% of IT budgets in 2017 to 18% over the next two years. Most businesses want to use multiple cloud platforms, and 58% of those that currently use one say they will expand.

More than half of the organisations in the survey (56%) have a cloud-first mentality for deploying new applications – but in the UK, the figure is only 32%.

Read more on cloud data management

The main challenge for those looking to adopt cloud platforms is the lack of in-house skills, according to 38% of global respondents. Other concerns include limitations with legacy technology (37%) and complexity with migration (36%). Some 84% were also concerned about supplier lock-in when they use a particular cloud provider.

Tooley said businesses can become more agile by moving to the cloud. “As enterprises continue to migrate from on-premise to hybrid and multi-cloud environments, the need to gain visibility into their information, and effectively use it to boost collaboration between suppliers and partners, has become ever more imperative,” he said.

“If organisations consider all aspects of information management as they journey to the cloud, the business agility that cloud can deliver is significant.” ...........................................................................................

Read more on Cloud security