UK Warns of Concerns Over Cloud Security in US

This post appeared on our sister site, www.accountingweb.co.uk

Concerns over the security of cloud storage when servers are located in the US is raising some interesting questions among our UK readers.

If you are lucky enough to be using a modern cloud based accounting solution (or are looking at moving to the cloud) you should definitely check where your cloud data is stored. If your provider stores it on a UK data centre, then you can be pretty much assured that our laws and government provide adequate protection.  The same is not true of course if your provider stores your data off-shore, certainly if it is outside the EU with one of the many US based services.

It’s worth checking  with your cloud supplier but if the data centre is in the United States (such as the case for Intuit’s QuickBooks On-line or FinancialForce for example) then you are not protected by the Data Protection Act, and the FBI and other government agencies such is the IRS can under the Patriot Act 2001 gain access your data without requiring your permission.

Imagine what the implications could be of the Federal Trade Commission having access to critical business data and such data becoming available to US corporations in order to gain competitive advantage?

So whilst a UK based centre seems on first impressions to be a safer more secure bet, if it’s provided and run by an American owned entity, again no protection from such interrogation is available to you or your business. At the launch of Office 365, Microsoft’s UK MD Gordon Frazer admitted that as a business with its headquarters in the United States of America, the Patriot Act applies to them and their data centers world wide.

The question put to Microsoft at the time, which obviously impacts Microsoft Dynamics on-line services as well as users of Office 365 and applications developed to run on the Azure which Microsoft’s cloud computing platform, was “Can Microsoft guarantee that EU stored data held in EU data centers, will not leave the European Economic Area under any circumstances, even under the Patriot Act?”. Frazer explained that “as Microsoft is a US headquartered company, it has to comply with local laws” he said  ”customers would be informed where possible” he could not provide a guarantee that they would be informed if a gagging order, injunction or US National Security Letter permits it.

If you are an accountant in practice and the cloud based finance software you use (and your clients use) has data centers outside of the UK, remember it is your responsibility to ensure your engagement letters inform your clients of this, and that you have their permission to conform to the terms of the Data Protection Act, to store their data outside of the UK.

 

This blog

AccountingWEB is more than just a U.S. team of journalists and financial and technology experts - we have an international side, too. Members of our British team who publish AccountingWEB.co.uk share their ideas, insights, and perspectives from across the pond.

More from this blog

Bloggers crew

Steve Knowles has spent 25 years in business and practice in the UK, but he also worked in the states and the years haven't dulled his way of seeing an alternative view to everyone else, and every day is a new adventure.

42438

Joel M. Ungar, CPA is a lifelong resident of the Detroit area and a graduate of The University of Michigan. He is a principal with Silberstein Ungar, PLLC, a Top 15 auditor of SEC public reporting companies.

74639

Allan Boress, CPA, with over 25 years as a practitioner and consultant to the accounting profession. Mr. Boress is the author of 12 published books in 6 different languages, including a best-seller, The "I-Hate-Selling" Book.

47414

Larry Perry, CPA, CPA Firm Support Services, LLC, is the author of accounting and auditing manuals, author and presenter of live staff training seminars, and author of webcast and self-study CPE programs. He blogs about small audits, reviews, and compilations.

87058
Sandra Wiley, COO and Shareholder, is ranked by Accounting Today as one of the 100 Most Influential People in Accounting as a result of her prominent role as an industry expert on HR and training as well as influence as a management and planning consultant. She is also a founding member of The CPA Consultant's Alliance. Sandra is a certified Kolbe™ trainer who advises firms on building balanced teams, managing employee conflict and hiring staff.
19929

Maria Calabrese, CIR, Human Resources manager for Fazio, Mannuzza, Roche, Tankel, LaPilusa, LLC in Cranford, New Jersey, Maria's topics revolve around the world of: Mentoring, Performance management, and The "Y Generation," a.k.a. "The whY generation".

54527

William Brighenti is a CPA, Certified QuickBooks ProAdvisor, and Certified [Business] Valuation Analyst, operating an accounting, tax, and QuickBooks consulting firm in Hartford, Connecticut, Accountants CPA Hartford.

79183

Ken Garen, CPA, is the co-founder and President of Universal Business Computing Company (www.ubcc.com), a software development firm of high-volume, high-productivity accounting and payroll technology.

24524

Eva Rosenberg, MBA, EA, is the publisher of TaxMama.com, and author of the weekly syndicated Ask TaxMama column. She provides answers to tax questions from taxpayers and tax professionals worldwide.

62925

Amy Vetter, CPA, CITP is the CPA Programs Leader for Intacct Corporation responsible for leading the CPA/BPO Partners nationally.

33906
Brian Strahle is the owner of LEVERAGE SALT, LLC where he provides state and local tax technical services to accounting firms, law firms and tax research organizations across the United States. He also writes a weekly column in Tax Analysts State tax Notes entitled, "The SALT Effect." For more info, visit his website: www.leveragestateandlocaltax.com
100917
Scott H. Cytron, ABC, is president of Cytron and Company, known for helping companies and organizations improve their bottom line through a hybrid of strategic public relations, communications, marketing programs and top-notch client service. An accredited consultant, Scott works with companies, organizations and individuals in professional services (accounting, finance, medical, legal, engineering), high-tech and B2B/B2C product/service sales.
25185

Rita Keller is a nationally known CPA firm management consultant, speaker, author, mentor and blogger. She has over 30 years hands-on experience in CPA firm management, marketing, technology and administrative operations.

51383
Stacy Kildal is the mom of two fantastic kids, an Advanced Certified QuickBooks ProAdvisor, Certified Enterprise Solutions ProAdvisor, Sleeter Group Certified Consultant, a nationally recognized member of the Intuit Trainer and Writer Network, and co-host of RadioFree QuickBooks.
27006
Michael Alter's blog specializes in providing practical advice to those who seek greater profitability and practice management tactics that enhance deeper client relationships.
31325

Sally Glick, CMO, Principal, Marketer of the Year in 2003 and AAM Hall of Famer in 2007, leads a lively discussion of the constantly expanding roles of marketing and the professional marketers that drive this initiative in accounting firms of all sizes.

98288

The IMA Young Professionals Blog features the insights of IMA’s Young Professionals Committee. Committee members share advice and experiences on careers, continuing education, work/life balance, and other issues affecting young accounting and finance professionals.

32507

FEI Financial Reporting Blog provides highlights from SEC, PCAOB, FASB, IASB, and other regulatory news, including reporting under Sarbanes-Oxley Sect 404. It is written by Edith Orenstein, Director of Technical Policy Analysis at FEI.

109176

Sue Anderson has 30 years of experience in continuing education for accountants. Currently she is the program director for online CPE provider CPE Link.

59620

Jim Fahey is COO of Apple Growth Partners, a regional CPA firm in Ohio. His focus is on the effective and efficient use of technology within the firm by all team members.

38553
Caleb Newquist is the Editor-in-Chief of Sift Media US, overseeing content for both AccountingWEB and Going Concern.
65490

Leita Hart-Fanta, CPA, CGFM, and CGAP is the author of "The Yellow Book Interpreted" and owner of Yellowbook-CPE.com a website devoted to training for governmental auditors.

91315

AccountingWEB is more than just a U.S. team of journalists and financial and technology experts - we have an international side, too! Members of our British team who publish AccountingWEB.co.uk share their ideas, insights, and perspectives from across the pond.

52396