Re: [projectvrm] Sweden Bans Google Cloud Services Over Privacy Concerns

[Peter Cranstone < >]

Mary,

So how is "personal" or personally directed services (VRM) style different than general cloud services? And you answered the question perfectly - it's not "personal" unless the individual controls their own data, not just the use of the product  - Brilliant!

Which means for all this to work you have to control the collection, flow and use of your data from the device that you're using when you interact with the product/service. So the schematic becomes the following. You can store and control your data at one of two possible points – either directly on your device AND/OR through the Personal Cloud. They KEY though is EXACTLY as you've described it – it MUST be the user who transmits the intention behind the data and NOT the Content provider who ASSUMES the Intent.

From here it's easy to build a solution into the browser.

Peter

_________________________
Peter J. Cranstone
CEO.  3PMobile

Boulder, CO  USA

Improving the Mobile Web Experience

Cell: 720.663.1752

Web site: www.3pmobile.com

CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain information that is confidential or legally privileged. Any unauthorized review, use, disclosure or distribution of such information is prohibited. If you are not the intended recipient, please notify the sender by telephone or return e-mail and delete the original transmission and its attachments and destroy any copies thereof. Thank you.

From: Mary Hodder < "> >
Date: Thursday, June 13, 2013 9:43 AM
To: ProjectVRM list < "> >
Subject: [projectvrm] Sweden Bans Google Cloud Services Over Privacy Concerns

http://www.privacysurgeon.org/blog/incision/swedens-data-protection-authority-bans-google-apps/

"The ruling (By the Swedish Data Inspection Board) – which bans Google cloud products such as calendar services, email and data processing functions – is based on inadequacies in the Google contract. A risk assessment by the Board determined that the contract gives Google too much covert discretion over how data can be used, and that public sector customers are unable to ensure that data protection rights are protected.

"The assessment gives several examples of this deficiency, including uncertainty over how data may be mined or processed by Google and lack of knowledge about which subcontractors may be involved in the processing. The assessment also concluded that there was no certainty about if or when data would be deleted after expiration of the contract."

It's going to be a PR struggle to convince regular people that "personal" or personally directed services (VRM) style are different than general cloud services.. because I bet that Google would argue that Google apps are personally directed.. nothing happens unless the individual uses the services, from Google's perspective. But the individual's data  isn't controlled by the individual, VRM style.

So I think this will be the pivot point.. convincing the public, as well as the companies and governments, that it's not "personal" unless the individual controls their own data, not just the use of the product.  

And that struggle to be heard above the company's PR about what is VRM and what is not, what is "personal" and what is not, is key to this whole mess.

mary