This report proposes security and privacy policies for the usage of a charity community cloud. It also discusses the risks that charity might face while planning moves in the field of HR. The report covers topics such as security of employee data, privacy of employee data, digital identity issue, provider solution issues, and data sensitivity.