Trusting Privacy in the Cloud

Cloud computing technologies have the potential to increase innovation and economic growth considerably. But many users worry that data in the cloud can be accessed by others, thereby damaging the data owner. Consequently, they do not use cloud technologies up to the efficient level. I design an institution that attenuates this problem. The scheme is built around a private, nonprofit organization called cloud association, which is governed by representatives
of both cloud service providers and users, and which sources the actual auditing
and certification tasks out to independent certifiers. I show how this institution incentivizes providers to produce high data security, and users to trust them and pay a premium for their services. The cloud association simultaneously solves providers’ adverse selection problem and certifiers’ moral hazard problem. By credibly implementing certified/not certified decisions, it drastically reduces the technological complexity faced by users, which boosts trust in cloud services.