Policy —

FTC reminds us that storing data in the cloud has drawbacks

The Federal Trade Commission worries that consumers don't really understand …

Take Google's new Nexus One phone as a case study of the pros and cons of storing life details on remote servers. Nexus One phones can back up their complete settings to Google's servers, including data such as "Wi-Fi passwords, bookmarks, a list of the applications you've installed, the words you've added to the dictionary used by the onscreen keyboard, and most of the settings that you configure with the Settings application." Get a new phone and the data transfers easily.

But that data is now sitting on servers outside of your control, where it can be accessed far more easily by Google itself, hackers, and law enforcement than it ever could if kept within the device. Once data passes over the network, it gets much easier to access in realtime; once it is stored on a remote server, it gets much easier to access at any time.

And those are just the phone settings. Google also has access to search history data, anything stored in Google Docs or Spreadsheets, complete schedules stored in Google Calendar, and recent Maps searches. Combine them all, and companies like Google become one-stop shops for authorities looking for personal information.

Such issues have raised concerns at the Federal Trade Commission (FTC), especially since many consumers aren't really aware of the data security issues raised by storing information on remote servers. "For example, the ability of cloud computing services to collect and centrally store increasing amounts of consumer data, combined with the ease with which such centrally stored data may be shared with others, create a risk that larger amounts of data may be used by entities in ways not originally intended or understood by consumers," said the FTC in a letter (PDF) this week.

That letter was directed at the Federal Communications Commission (FCC), which is currently drawing up a national broadband plan that will be submitted to Congress next month. In advance of the plan's release, the FTC wants to make sure that the FCC "considers technologies such as cloud computing and identity management in implementing a national broadband plan."

That means publicly recognizing the FTC's growing expertise on issues on online privacy and data security. "Accordingly, we recommend that the Broadband Plan recognize the FTC's law enforcement, consumer education, and ongoing policy development efforts in light of its years of experience in online, and offline, consumer protection," concludes the letter.

The FTC is in the middle of a set of hearings on these issues; the next one takes place on January 28.

Channel Ars Technica