Towards a Legislation-aware Cloud Computing Framework

Most of the application frequently processes, stores, or transmits data that are subject to regulatory and compliance requirements. When data falls under regulatory or compliance restrictions, the choice of cloud deployment hinges on an understanding that the provider is fully compliant. Otherwise, theres the risk of violating privacy, regulatory or other legal requirements. Surely using the cloud may raise legal risks, but these need not be an impediment to the adoption of cloud. The important thing is to be fully aware of the risks and the regulations that acts on the data and the security features offered by the providers before deciding to put data into the cloud. This paper presents tentative design and implementation of a framework able to support the automatic checking of cloud application compliance taking into account the purpose of the application, the data nature and the kind of treatment.