attacking clouds even more attractive for cyber criminals. Most customers will not know where their data is being stored by the cloud provider. This poses a number of issues especially if the information is important or valuable. Customers who are worried about security should ask their cloud provider where the physical servers are held, how often are they maintained and what sort of physical security measures have been taken (e.g., biometrics or PIN access) to restrict access to the server resources. There is a chance that the data will be held in another country which means the local law and jurisdiction would be different and could create a different security risk, as data that might be secure in one country may not be secure in another (Staten, 2009). By looking at the different views on data privacy between the US and the EU, this security risk becomes more evident as the US has a very open view on the privacy of data. The US Patriot Act grants government and other agencies with virtually limitless powers to access information including that belonging to companies whereas in the EU this type of data would be much more secure, so local laws and jurisdiction can have a large affect the security and privacy of data within a cloud (Mikkilineni & Sarathy, 2009).