Management and auditors of organizations using cloud computing or other technologies to store confidential data/personal information of individuals have an obligation in terms of legislation to ensure the confidentiality as long as the data remains within their sphere of responsibility.