Multi-tenancy is the ability of a cloud provider to provide services to many people or organizations from a single shared software. Since the data of different users is only virtually isolated and not physical, there is a risk that one user`s data could be accessed by another user without their permission. In addition, it also poses challenges for data backup and recovery. Cloud-based services can be delivered using three basic approaches. Figure 2 shows the types of models. (1) Public: In this model, a third party operates and owns the cloud services. This is a cost-effective way to implement cloud-based services because maintaining and managing cloud infrastructure is not supported by end users or organizations. Template users can benefit from the pay-as-you-go approach, allowing them to choose the plans that best suit their needs. Due to economies of scale, cloud service providers (CSPs) can offer cloud-based services bundled with the other services on their platform as a plan, such as providing 5GB of free iCloud storage to its customers. And sometimes the benefits are offered for free to a limited extent, for example Google offers each customer 15GB of storage for free; After the free limit, customers will be charged, but at very reasonable prices. For example, MeghRaj (a cloud server of the Indian government) includes various sub-national level CSPs and other private CSPs to provide electronic services [16].

The only downside to the public model is privacy and security concerns, as the entire cloud infrastructure is owned and maintained by a third party [19]. (2) Private: This model helps an organization own, operate, and manage a complete cloud-based infrastructure specifically tailored to the needs of a particular business entity. Data servers, hardware and software are under the control of the private player, and cloud-based services are not publicly available. It offers the enterprise the ability to design a customizable cloud with a diverse level of custom features. Most of the government`s highly sensitive classified information uses the private cloud and provides limited users with access as needed. However, it is an extremely capital-intensive company, as a single private entity manages the entire cloud infrastructure. Because cloud data is limited to a few users, this model is less vulnerable to legal challenges and legal issues typically associated with sharing data in the cloud [20]. (3) Hybrid: In this model, public and private service providers work together to provide consistent services.

It is advantageous for the government or utility provider to leverage the capabilities and know-how of the private actor while ensuring the privacy capabilities of the private cloud, accompanied by the scalability advantage of the public cloud. Because of the seamless interoperability between different clouds, the government can use this model to deliver electronic services and digitize critical public services over the long term. For example, there are specific laws on the European Union (EU) Data Protection Directive (DPD)[15] and the Indian Data Protection Act[21] that prohibit the location of physical data servers outside the metropolitan country. The hybrid cloud storage model can help CSP meet its customers` regulatory compliance and reduce process costs associated with cloud data. This model is often preferred by the government around the world because it helps the government achieve its divestment goals (in some countries). Hybrid models also enable seamless data transition between public and private clouds with relatively low legal implications [22]. The type of service, i.e. SaaS, IaaS or PaaS, does not operate in silos. Instead, more than one can be combined with another while it is tailored to the customer`s needs. For example, Dropbox, which provides cloud storage, used Amazon`s EC2 IaaS. PaaS can also use another service provider`s IaaS [15].

R. Buyya, C. Vecchiola and S. T. Selvi, „Advanced topics in cloud computing“, Mastering Cloud Computing, Elsevier, Amsterdam, The Netherlands, pp. 373-427, 2013. However, there are several advantages of cloud computing, but there are some legal issues associated with it. Some of them are described below: M. Al-Ruithe and E. Benkhelifa, „Analysis and classification of obstacles and critical success factors for implementing a cloud data governance strategy“, Procedia Computer Science, Volume 113, pp. 223-232, 2017. While it`s easy to get caught up in the benefits of cloud computing, there are also some legal issues to consider.

This will allow you to make an informed decision, especially when choosing a cloud service provider (CSP).