Re: @moiety
There's 2 separate issues here...ownership and control. As soon as your data hits the cloud you -unless you are duplicating locally-encrypted containers and only then- are ceding control. You are subject to terms, conditions and applicable laws of your cloud provider; and the fact that they also care less about your data than you do. What guarantees and promises are offered by the cloud provider mean nothing; they are as ephemeral as the pixels they are delivered on...the company could change management; could go into receivership; and can be dipped into by authorities at any time. That, by the way, was the fundamental flaw in Safe Harbour -warrentless fishing- and that isn't about to change no matter how many pages Privacy Shield devotes to the subject.
True, they are probably better at security than you are and homebrew security doesn't guarantee quality; but a cloud provider is (usually) a far richer target because if you crack that, the loot is better.
Biting the hand that feeds IT
