Why Using the ‘Cloud’ Can Undermine Data Protections