Chapter 3: Introduction to Technological Aspects of Privacy

Cloud Computing: SaaS, PaaS and IaaS

Cloud computing is on-demand availability of computing resources, replacing on-premises computing. The three models - Software as a service (SaaS), Platform as a service (PaaS) and Infrastructure as a service (IaaS) - differ in how much the customer controls, which matters for privacy responsibility.

How this supports CIPP/US study

Use this lesson to identify the legal source, actor, data and activity before applying a rule to a scenario. Continue with the CIPP/US study guide.

Cloud computing has drawn organizations away from on-premises computing for cost savings, scalability without capital investment, and remote access. There can be security and privacy advantages: cloud architectures are homogeneous and easier to manage, and providers can dedicate specialist staff that smaller organizations cannot hire.

Three cloud service models
ModelWhat it deliversCustomer control
Software as a service (SaaS)Vendor-managed applications over the internet, often in a browserLowest - vendor manages the application
Platform as a service (PaaS)A framework/components for developers to build applicationsMedium - customer builds on the platform
Infrastructure as a service (IaaS)Self-service compute, networking, and storageHighest - customer manages databases of personal information

Key terms - quick answers

What is “Cloud computing”?
On-demand availability of computing resources, offering cost savings, scalability, and remote access compared to on-premises systems.
What is “On-premises computing”?
Computing on resources owned and managed by the organization itself.
What is “Software as a service (SaaS)”?
Delivery of vendor-managed applications over the internet, often run directly in a browser with no client-side installation.
What is “Platform as a service (PaaS)”?
A cloud framework providing components for developers to build and use to create customized applications.

Sources and study method

This independent lesson uses active recall, spaced retrieval and scenario practice. Read the full study method.