CLaw: IEEE 1st International Workshop on
Legal and Technical Issues in Cloud Computing

as part of

IC2E 2015: IEEE International Conference on Cloud Engineering

12 March 2015, Tempe, Arizona, USA

The rapid emergence and uptake of cloud computing services brings a number of legal concerns. Existing (and proposed) regulatory and governance regimes place obligations on those who manage (process, use and collect) data. The end-users of applications provisioned in the cloud also have certain rights that must be respected: tenants and cloud providers bear various degrees of responsibility, which must be properly managed. From a technical perspective, these issues concern the capacity for management: the mechanisms that enable control and compliance within cloud services.

While cloud computing has been a revolution in IT provisioning, concerns of interaction with law and policy are now gaining prominence. Recent discussion has concerned issues of locality, including where data physically resides and/or is processed (regional clouds), and the services/information available within a locale (such as the "right to be forgotten"). Further, despite the surge toward the cloud in many commercial contexts, some sectors are hesitant in adopting cloud services due to a mismatch between the legal environment and the technology. Such issues will adversely impact new directions such as the green cloud or incorporating the Internet of Things (IoT) through "Fog".

This workshop brings together legal and technical practitioners to explore technical solutions to legal problems, and to provide a legal framework for new emerging patterns in cloud computing.

Potential topics include, but are not limited to:

Privacy and security in cloud services
Application of cloud computing in regulated sectors
Encryption, security and responsibility
Audit and proof of compliance
Regional cloud initiatives (e.g. EU-only cloud), and other data geographical location concerns
Internet of Things: threats, legal and compliance concerns of 'fog' computing.
Crime, malware and spam proliferation within cloud computing
Compatibility issues between regulation and technical reality
Technical enforcement of legal regulations

Submission and dates

We invite authors to submit papers relating legal and technical aspects of cloud computing. Application-specific papers are welcome (healthcare, IoT, etc). Fully implemented and evaluated systems are not essential. Ideally, the output of this first workshop on legal and technical issues will influence both regulators and service providers.

Submissions must be in electronic format submitted through this EasyChair link: https://easychair.org/conferences/?conf=claw2015. Papers should not exceed 6 pages in IEEE format (single-spaced 2-column text using 10-point size type on A4 paper, templates available). Submissions will be peer reviewed, and for each accepted paper, at least one author is required to register and present the paper at the workshop. All accepted papers will be published in IEEE Xplore.

Paper submission deadline: 14 Dec 2014 (23:59 GMT/UTC-12) ~~7 December 2014~~
Author notification: Mid Jan 2015
Final camera ready: 31 Jan 2015
Workshop date: 12 March 2015

Programme (Thu Mar 12)

13:00 - 14:00	Welcome *Invited talk: Identifying and Managing Legal Risks in Cloud Computing* Prof Christopher Millard (Centre for Commercial Law Studies, Queen Mary University of London)
14:00 - 14:30	Session 1: Automating Cloud Service Level Agreements using Semantic Technologies Karuna Joshi and Claudia Pearce (University of Maryland) Expressing and Enforcing Location Requirements in the Cloud using Information Flow Control Thomas Pasquier and Julia Powles (University of Cambridge)
14:30 - 14:45	Break
14:45 - 15:30	Session 2: A possible solution for privacy preserving cloud data storage Mithun Paul, Derek Bambauer and Christian Collberg (University of Arizona, Tucson) Towards a Formalised Representation for the Technical Enforcement of Privacy Level Agreements Michela D'Errico and Siani Pearson (HP Bristol) National Cloud Computing Legislation Principles: Guidance for Public Sector Authorities Moving to the Cloud Stephen Mutkoski (Microsoft)
15:30 - 16:15	Round table discussion
16:15	Close of workshop

Organisation

Co-Chairs:

Jean Bacon (Computer Laboratory, University of Cambridge)
Christopher Millard (Centre for Commercial Law Studies, Queen Mary University of London)
Jatinder Singh (Computer Laboratory, University of Cambridge)

Programme committee:

Ian Brown (Oxford Internet Institute, University of Oxford)
Jon Crowcroft (Computer Laboratory, University of Cambridge)
Andreas Ebert (Microsoft)
Lilian Edwards (Law School, Strathclyde University)
David Eyers (Dept of Computer Science, University of Otago)
Hamed Haddadi (Qatar Computing Research Centre)
Woody Hartzog (Cumberland School of Law, Samford University)
Tristan Henderson (School of Computer Science, University of St Andrews)
Joris van Hoboken (Information Law Institute, NYU)
Ryan Ko (Dept Computer Science, University of Waikato)
Anil Madhavapeddy (Computer Laboratory, University of Cambridge)
Chris Marsden (Law School, University of Sussex)
Anna Perini (ICT-Irst, FBK)
Peter Pietzuch (Department of Computing, Imperial College London)
Julia Powles (Law Faculty, University of Cambridge)
Ian Walden (Centre for Commercial Law Studies, Queen Mary University of London)

Contact information

Please email: ucam-claw-workshop-2015@lists.cam.ac.uk