The Data Protection Act 1998 (DPA) is based around eight principles of good information handling. These give people specific rights in relation to their personal information and place certain obligations on those organisations that are responsible for processing it. This is part of a series of guidance that goes into more detail than the Guide. This guidance explains what you should consider prior to a move to cloud computing for the processing of personal data. A shift towards a greater use of cloud computing is well underway. Innovative products, mobile access to data and affordable pricing structures are often cited as key drivers for an organisation to consider a move to cloud computing. Cloud services also offer an affordable route for smaller organisations to cope with rapid expansion.