“As the popularity of cloud computing grows, public bodies (including schools, hospitals, municipalities and local police forces) are looking to take advantage of the cost-savings and functionality these services offer. But personal information in the custody and control of public bodies must be managed in accordance with the Freedom of Information and Protection of Privacy Act (“FIPPA”). These provisions apply no matter where personal information is stored.”

The reports identifies areas for the due diligence review of the cloud provider and provides a link to a self assessment tool to evaluate the organization’s information protection readiness.