Abstract
This article surveys and evaluates the privacy law of web applications and cloud computing. Cloud services, and web applications in particular, are subject to many different privacy law requirements. While these requirements are often perceived as illfitting, they can be interpreted to provide a structurally sound and coherent privacy regime. The applicable body of law can be separated into two tiers: the primary privacy law and the secondary privacy law. The primary privacy law is created by the providers and users of cloud services through privacy contracts, especially, privacy policies. The secondary privacy law, contained, for example, in statutes and regulations, is for the most part only applicable where no valid privacy contracts exist. This supremacy of privacy contracts over statutory and other secondary privacy law enables individualized privacy protection levels and commercial use of privacy rights according to the contracting parties’ individual wishes.
Recommended Citation
Sebastian Zimmeck,
The Information Privacy Law of Web Applications and Cloud Computing,
29 Santa Clara High Tech. L.J. 451
(2013).
Available at: https://digitalcommons.law.scu.edu/chtlj/vol29/iss3/1
Archival Accessibility Statement
This item was created or digitized prior to May 1, 2026, or is a reproduction of legacy media created before that date. It is preserved in its original, unmodified state specifically for research, reference, or historical recordkeeping. In accordance with the ADA Title II Final Rule, the Law Library provides accessible versions of archival materials upon request. To request an accommodation for this item, please submit an accessibility request form.