The IT Law Wiki


An information policy (also called data policy) determines

Issues to be considered[]

Consumers should consider the following best practices:

  • Ensure that the agreement allows the consumer to specify the physical location of their security‐sensitive content, or content subject to data residency requirements (specifically acceptable locations vary across industries and national legislation).
  • Ensure that the service provider will not access the consumer's data, except when required by law and duly requested by law enforcement authorities.
  • Under such circumstances, ensure that the agreement specifies that the service provider will give immediate notice, allowing the consumer an opportunity to file for a stay of the request.