Do You Know Where Your Employees' Data Is? - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Cloud // Software as a Service
06:20 PM

Do You Know Where Your Employees' Data Is?

HR departments must take extra care when using SaaS.

InformationWeek Boardroom Journal - May 2010 InformationWeek Boardroom Journal Logo
Download the entire May 2010 issue of
InformationWeek Boardroom Journal
distributed in an all-digital format (registration required).

Human resources execs, pressed to control costs and increase efficiency, are increasingly turning to third-party services providers to process sensitive data. Everything from payroll data to performance reviews to health care and personal background information is being handled in remote data centers maintained by third parties.

Any company considering using these services needs to take extra precautions. "Be mindful of geography," says Jonathan Novich, founder of The Code Works, a staffing and recruitment consultant. "Know where the data is coming from, where it's being held. And consult a lawyer."

As more software-as-a-service vendors process very sensitive employee or company data, that's where security and geography become concerns. The attention SaaS providers pay to these details varies, contends Scott Blackmer, founding partner of InfoLawGroup, an information law specialist in Salt Lake City. "It's not always clear how they're going to provide security, who handles data, where they handle it, who handles breaches, and how they handle them," Blackmer says. "Those are things that can get a company into trouble."

SaaS providers say privacy and security are some of their key assets. SuccessFactors, for instance, says it has layers of security covering data access, handling, and storage. The protections were enough to persuade a multinational giant with 2 million employees worldwide to sign up recently.

Figuring out where data's being stored and processed is particularly important for customers of SaaS and other types of cloud computing such as infrastructure as a service, where a provider rents out capacity that can be anywhere in its network of data centers.

"Some cloud providers say they can store data anywhere around the world, and they won't tell you where it is," says Robert Gellman, a privacy and information policy consultant. "That's a real problem. What if they decide to store data in a country where you have a dispute or in a country where the government wants to look into your data?"

To read the rest of the article,
Download the May 2010 issue of InformationWeek Boardroom Journal

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
InformationWeek Is Getting an Upgrade!

Find out more about our plans to improve the look, functionality, and performance of the InformationWeek site in the coming months.

Remote Work Tops SF, NYC for Most High-Paying Job Openings
Jessica Davis, Senior Editor, Enterprise Apps,  7/20/2021
Blockchain Gets Real Across Industries
Lisa Morgan, Freelance Writer,  7/22/2021
Seeking a Competitive Edge vs. Chasing Savings in the Cloud
Joao-Pierre S. Ruth, Senior Writer,  7/19/2021
White Papers
Register for InformationWeek Newsletters
Current Issue
Monitoring Critical Cloud Workloads Report
In this report, our experts will discuss how to advance your ability to monitor critical workloads as they move about the various cloud platforms in your company.
Flash Poll