This report examines cloud computing and its implications for data privacy and security within the Department of Administrative Services (DAS). It explores the benefits and risks of cloud-based services, focusing on the need for robust personal data protection strategies. The report details recommended privacy controls, including strong passwords, data backups, and data encryption, to safeguard sensitive information. It further discusses a personal data protection strategy, emphasizing information encryption and data lifecycle management. The report also addresses the importance of running system updates and provides insights into mitigating risks associated with cloud architecture. Ultimately, the report underscores the critical need for comprehensive data protection measures to ensure the security and integrity of personal data within the DAS, offering practical recommendations to enhance overall data security.