Cyber Security Governance in Cloud Computing: Legal Issues, Regulatory Compliance, and Policy Perspectives

AbstractThis paper will examine the evolving cyber security threats associated with cloud computingand will analyse the legal implications arising from inadequate data protection mechanismsand insecure cloud architectures. It will further evaluate the role of encryption standards,secure-by-design cloud frameworks, identity and access management systems, and riskmitigation strategies in ensuring legal compliance and cyber resilience. Special emphasis willbe placed on international and national legal frameworks governing cloud security, includingthe European Union’s General Data Protection Regulation (GDPR), the Health InsurancePortability and Accountability Act (HIPAA), the Payment Card Industry Data SecurityStandard (PCI DSS), and India’s Digital Personal Data Protection (DPDP) Act.The study willalso explore issues relating to jurisdiction, data sovereignty, liability of cloud serviceproviders, contractual obligations, cybercrime investigation, and regulatory enforcement incloud ecosystems. Furthermore, the paper will propose compliance-oriented and legallysustainable cyber security strategies that organizations will be expected to adopt in futurecloud infrastructures. The research will conclude that effective cloud governance will requirethe integration of technological safeguards with strong legal and regulatory frameworks toensure data privacy, accountability, and secure digital transformation.