Lost in the Cloud - Cloud Storage, Privacy, and Suggestions for Protecting Users’ Data

Aug 20, 2026

Upload by Aria

In the digital age, users store vast amounts of data—often data considered to be private—in cloud services. Privacy protection depends largely on the policies of the companies that hold the information. The Note evaluates how law currently limits government access to cloud-stored data, focusing on whether users retain a reasonable expectation of privacy after uploading information. It analyzes the Stored Communications Act and the Fourth Amendment, including the third-party doctrine and how provider access under terms of service may trigger it. The Note then proposes privacy-policy or terms provisions to improve user protection while helping providers secure and maintain their networks.

LanguageEnglish

CategoryResearch & Report

FormatPDF

Pages43

Reading Time1 h 48 min

AccessFree to download

Introduction

What Is Cloud Storage?

What Laws Protect the Privacy of Data in the Cloud?

Cloud Storage and the Fourth Amendment

Possible Solutions to Problems Created by Terms of Service and Privacy Policies

Conclusion

Stanford Law Review Volume 69 March 2017 NOTE Lost in the Cloud: Cloud Storage, Privacy, and Suggestions for Protecting Users’Data Eric Johnson* Abstract. In the digital age, users store vast amounts of data—often data considered to be private—in the cloud. The privacy of this data is increasingly determined by the policies of the companies storing it. But how does the law currently protect that data from law enforcement? Do users maintain a reasonable expectation of privacy in the information they have uploaded to the cloud? And if so, can service providers’ terms of service affect users’ reasonable expectations of privacy? This Note answers those questions by examining the main legal protections relevant to data stored in the cloud: the Stored Communications Act and the Fourth Amendment. After analyzing these protections, this Note determines that data stored in the cloud may be protected by the Act. But more importantly, this Note analyzes the history of the third-party doctrine and determines that users do have a reasonable expectation of privacy in information stored in the cloud until the third-party doctrine is triggered. And this triggering can occur due to provider access pursuant to the terms of service. In light of these findings, this Note concludes by suggesting that providers implement standard, scope, and notice provisions in their privacy policies or terms of service in order to enhance the protection of user privacy while also providing reasonable means for providers to secure and maintain their networks. * J.D., Stanford Law School, 2016. Many thanks to Albert Gidari, Director of Privacy at the Stanford Center for Internet and Society, for his invaluable guidance and insight. Thanks also to Mark Lemley, William H. Neukom Professor of Law at Stanford Law School; Daphne Keller, Director of Intermediary Liability at the Stanford Center for Internet and Society; and the members of the Stanford Law Review for their thoughtful and challenging feedback. Lost in the Cloud 69 STAN. L. REV. 867 (2017) Table of Contents Introduction............................................................................................................................................................ 869 I. What Is Cloud Storage?.......................................................................................................................... 872 II. What Laws Protect the Privacy of Data in the Cloud?......................................................... 874 A. The Stored Communications Act .......................................................................................... 875 B. The Fourth Amendment............................................................................................................. 878 1. The third-party doctrine.................................................................................................. 879 2. A cloudy battleground: the third-party doctrine and the Internet........... 883 III. Cloud Storage and the Fourth Amendment ............................................................................... 885 A. Applying Katz to Cloud Storage ............................................................................................. 885 B. The Third-Party Doctrine and the Reasonable Expectation of Privacy in Cloud Storage .............................................................................................................................. 888 C. Why the Third-Party Doctrine Does Not Fit Cloud Storage ................................ 891 IV. Terms of Service and Privacy in Cloud Storage ...................................................................... 895 A. Historical Acceptance of Provider Access to User Data ............................................ 896 B. The Effect of Terms of Service Agreements.................................................................... 898 C. Examples of Cloud Storage Providers’Terms

FAQs

How does the law protect privacy for data stored in the cloud?

Protection is analyzed through the Stored Communications Act and the Fourth Amendment, especially whether users maintain a reasonable expectation of privacy for cloud-stored information.

Do users have a reasonable expectation of privacy in cloud-stored data?

The Note concludes users do have a reasonable expectation of privacy until the third-party doctrine is triggered, which can occur based on provider access under terms of service.

What role can terms of service play in privacy outcomes for cloud users?

Terms of service may affect whether provider access to user data triggers the third-party doctrine, influencing the extent of privacy protections during law enforcement requests.

Aug 20, 2026

Upload by Aria