What are the Recordkeeping Implications of Cloud Computing?

 

Cloud computing is in increasing use by public sector organisations in New Zealand. Cloud computing offers efficient and cost-effective computer resources for agencies. A full definition of cloud computing has been developed by the United States Institute of Standards and Technology, and can be found here.
 
Archives New Zealand's position is that keeping information 'in the cloud' does not itself breach the Public Records Act 2005. However, cloud-based systems do present particular challenges and opportunities for recordkeeping.
 

Challenges

For these reasons we recommend that agencies using cloud-based systems have an appropriate exit strategy in place, before storing information in the cloud.
 

Opportunities

We encourage those responsible for records and information management across government to consider such solutions, with advice from their internal records management staff.
 

Recommended Guidelines

 
Archives New Zealand recommends the following publicly available guidelines on the recordkeeping implications of cloud computing.
 

Organisation Guidance Publication
State Services Commission - New Zealand (2009) Government Use of Offshore Information and Communication Technologies (ICT) Service Providers
Australian Digital Recordkeeping Initiative (ADRI) (2010) Advice on Managing the Recordkeeping Risks associated with Cloud Computing
National Archives of Australia (2011) A checklist for Records Management and the cloud
Archives and Records Association (UK & Ireland) (2010) Cloud Computing Toolkit: Guidance for outsourcing information storage to the cloud.

 
 

Archives New Zealand Guidance

 
Archives New Zealand is developing its own guidance on the recordkeeping implications of cloud computing and would be interested in your experience with recordkeeping in cloud-based systems. Please contact rkadvice@dia.govt.nz in the first instance.