Printed from the Field Fisher Waterhouse web site
Web address: http://www.ffw.com/practices/technology-and-outsourcing/cloud-computing.aspx

Technology

Our cloud practice

Field Fisher Waterhouse is one of the largest and most highly regarded technology law firms in Europe. We act for cloud infrastructure, platform and software providers and their customers on new and innovative cloud services and on a variety of public, hybrid and private cloud solutions. 

Our extensive experience of cloud-based services includes:
  • IaaS, SaaS and PaaS contracts
  • Data protection compliance, particularly in  relation to  international data transfers
  • Security, including the management of security  breaches
  • Regulation
  • Disputes
  • Liability for data, content and service continuity

Commercial and contractual advice:
Our top-ranked technology team regularly draft, advise on and negotiate contracts in the cloud arena and are at the cutting edge of developing vendor models. We provide our clients with risk-based, pragmatic advice, helping bridge the gap between the legal assurances that providers are willing to offer and customer requirements in relation to areas such as service levels, security standards and regulatory compliance.  

Data protection in the cloud: Our internationally renowned privacy team covers the whole range of cloud privacy issues for suppliers and customers. In particular, we help our clients to overcome the EU prohibition on global data transfers, currently a significant hurdle to wide-spread adoption of public cloud services. Our specialist team is at the forefront of policy in this area.  We are pioneering a new approach, working with service and technology providers and national data protection authorities on proposals for "Binding Safe Processor Rules".  If implemented, these would allow service providers to seek "safe processor" status from the EU data protection authorities more readily facilitating international transfers.

Data security: Our data security team is at the forefront of advising leading cloud providers and customers on cloud-related security matters, advising on product development and customer regulatory issues as well as the management of data security breaches. Stewart Room, who leads our data security team was awarded FT Legal Innovator of the Year for his work on data security technologies and is the author of Butterworths Data Security Law and Practice. 

Regulation: The market in cloud solutions is diverse, including hybrid cloud and closed platform solutions designed to address the regulatory concerns of customers in a given sector.  We have a wealth of experience advising service providers and customers across a range of highly regulated sectors, including financial services, central government, local government, energy and health. Our in-depth industry and regulatory knowledge is invaluable to service providers developing targeted service offerings which support their customers' compliance, as well as to customers requiring specific regulatory requirements to be reflected in their contracts. Specific regulation including Sarbanes-Oxley, the Financial Services Authority requirements and HM Government's Security Policy Framework all require consideration in cloud contracts and through our expertise in working with the supplier and customer communities, we have been developing acceptable solutions to ensure these issues are practically addressed.

Liability: Suppliers and customers have legitimate concerns to protect in the cloud space. Suppliers will want to avoid liability for customer content and ensure acceptable use of shared infrastructure. Customers will be cautious about placing their applications and data on infrastructure in someone else's control. Coming to a consensus on warranties, indemnities, IPR, privacy and limitations of liability (to name but a few issues) is central to ensuring a fair and commercial deal for both parties. We have the market knowledge and pragmatic approach to support rapid closure on these issues.