{"id":3401,"date":"2025-11-25T20:14:16","date_gmt":"2025-11-25T20:14:16","guid":{"rendered":"https:\/\/itlawco.com\/?page_id=3401"},"modified":"2025-11-25T20:25:44","modified_gmt":"2025-11-25T20:25:44","slug":"computing-law","status":"publish","type":"page","link":"https:\/\/itlawco.com\/fr\/focus-areas\/computing-law\/","title":{"rendered":"Computing law"},"content":{"rendered":"\n\t\t<div id=\"fws_6a5f90999029b\"  data-column-margin=\"default\" data-midnight=\"dark\"  class=\"wpb_row vc_row-fluid vc_row\"  style=\"padding-top: 0px; padding-bottom: 0px; \"><div class=\"row-bg-wrap\" data-bg-animation=\"none\" data-bg-animation-delay=\"\" data-bg-overlay=\"false\"><div class=\"inner-wrap row-bg-layer\" ><div class=\"row-bg viewport-desktop\"  style=\"\"><\/div><\/div><\/div><div class=\"row_col_wrap_12 col span_12 dark left\">\n\t<div style=\"margin-top: 30px; \" class=\"vc_col-sm-12 wpb_column column_container vc_column_container col no-extra-padding inherit_tablet inherit_phone \"  data-padding-pos=\"all\" data-has-bg-color=\"false\" data-bg-color=\"\" data-bg-opacity=\"1\" data-animation=\"\" data-delay=\"0\" >\n\t\t<div class=\"vc_column-inner\" >\n\t\t\t<div class=\"wpb_wrapper\">\n\t\t\t\t\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<p data-start=\"480\" data-end=\"834\">Modern computing is no longer confined to the data centre or a single cloud provider. It now spans a heterogeneous, globally distributed continuum: on-premise servers, <a href=\"https:\/\/itlawco.com\/hyperscaler-transactions-insights-for-success\/\">hyperscale clouds<\/a>, sovereign cloud regions, serverless functions, fog networks, edge devices, DePIN infrastructure, DAOs, confidential computing enclaves, and emerging quantum services.<\/p>\n<p data-start=\"836\" data-end=\"967\">Each of these environments carries its own liability model, sovereignty obligations, cryptographic risks, and regulatory exposures.<\/p>\n<p data-start=\"969\" data-end=\"1144\">ITLawCo helps organisations design legally defensible, regulator-aligned, quantum-resilient computing environments across Africa, the GCC, the EU\/UK, and global jurisdictions.<\/p>\n<h2 data-start=\"1151\" data-end=\"1184\">Why computing law matters<\/h2>\n<p data-start=\"1185\" data-end=\"1369\">Computing law brings together architecture-aware legal risk, cross-border data sovereignty, cloud governance, cryptographic lifecycle obligations, and national-security considerations.<\/p>\n<p data-start=\"1371\" data-end=\"1461\">The global regulatory landscape is increasingly incompatible. Organisations must navigate:<\/p>\n<ul>\n<li data-start=\"1465\" data-end=\"1503\">US CLOUD Act extraterritorial access<\/li>\n<li data-start=\"1506\" data-end=\"1542\">GDPR Article 48 (blocking statute)<\/li>\n<li data-start=\"1545\" data-end=\"1610\">South Africa\u2019s <a href=\"https:\/\/itlawco.com\/focus-areas\/data-protection-and-privacy\/protection-of-personal-information-act\/\">POPIA<\/a> (including protection of juristic persons)<\/li>\n<li data-start=\"1613\" data-end=\"1665\"><a href=\"https:\/\/sdaia.gov.sa\/en\/SDAIA\/about\/Documents\/Personal%20Data%20English%20V2-23April2023-%20Reviewed-.pdf\">Saudi Arabia\u2019s PDPL<\/a> with strict localisation norms<\/li>\n<li data-start=\"1668\" data-end=\"1724\">Indonesia\u2019s criminal sanctions for unlawful processing<\/li>\n<li data-start=\"1727\" data-end=\"1764\">EU\/UK and GCC data-transfer regimes<\/li>\n<li data-start=\"1767\" data-end=\"1813\">Emerging quantum-era compliance requirements<\/li>\n<li data-start=\"1816\" data-end=\"1857\">Blockchain immutability vs erasure laws<\/li>\n<li data-start=\"1860\" data-end=\"1903\">DAO liability in decentralised ecosystems<\/li>\n<\/ul>\n<blockquote>\n<p data-start=\"1905\" data-end=\"2043\">The world is moving toward sovereign digital blocs, and computing law is the discipline that governs the technology operating across them.<\/p>\n<\/blockquote>\n<h2 data-start=\"2050\" data-end=\"2084\">Our computing law services<\/h2>\n<p data-start=\"2085\" data-end=\"2182\">We govern the full continuum of computing environments: from physical to distributed to quantum.<\/p>\n<h2 data-start=\"2189\" data-end=\"2256\">On-premise computing law: Direct custody &amp; strict liability<\/h2>\n<p data-start=\"2257\" data-end=\"2379\">When data is stored or processed on-premise, the organisation assumes full legal and operational custody. This introduces:<\/p>\n<ul>\n<li data-start=\"2383\" data-end=\"2430\">Strict liability for disposal and destruction<\/li>\n<li data-start=\"2433\" data-end=\"2471\">Physical perimeter = legal perimeter<\/li>\n<li data-start=\"2474\" data-end=\"2530\">POPIA\/GDPR duties for secure destruction and retention<\/li>\n<li data-start=\"2533\" data-end=\"2589\">Evidence preservation and chain-of-custody obligations<\/li>\n<li data-start=\"2592\" data-end=\"2639\">Legacy system risk and unsupported technology<\/li>\n<li data-start=\"2642\" data-end=\"2692\">Asset lifecycle and decommissioning requirements<\/li>\n<li data-start=\"2695\" data-end=\"2747\">Duty-of-care for environmental and insider threats<\/li>\n<\/ul>\n<h2 data-start=\"2754\" data-end=\"2843\">Cloud governance: Contractual risk, shared responsibility &amp; sovereignty conflicts<\/h2>\n<h3 data-start=\"2845\" data-end=\"2901\">Shared responsibility as liability partitioning<\/h3>\n<ul>\n<li data-start=\"2904\" data-end=\"2966\">Provider responsibility for physical and core infrastructure<\/li>\n<li data-start=\"2969\" data-end=\"3057\">Customer responsibility for configuration, identity, encryption, and application logic<\/li>\n<li data-start=\"3060\" data-end=\"3086\">The \u201cremedy gap\u201d in <a href=\"https:\/\/itlawco.com\/modular-slas-the-future-of-flexible-service-agreements-in-the-it-industry\/\">SLAs<\/a><\/li>\n<li data-start=\"3089\" data-end=\"3131\">Vendor lock-in as ongoing legal exposure<\/li>\n<\/ul>\n<h3 data-start=\"3133\" data-end=\"3173\">Cross-border &amp; sovereignty risk<\/h3>\n<ul>\n<li data-start=\"3176\" data-end=\"3205\">Cloud Act vs GDPR conflicts<\/li>\n<li data-start=\"3208\" data-end=\"3260\">POPIA s72 transfers and juristic-person protection<\/li>\n<li data-start=\"3263\" data-end=\"3301\">GCC localisation mandates (KSA PDPL)<\/li>\n<li data-start=\"3304\" data-end=\"3353\">Data residency vs actual jurisdictional control<\/li>\n<li data-start=\"3356\" data-end=\"3417\">Adequacy, SCCs, local addendums, and supplementary measures<\/li>\n<\/ul>\n<h3 data-start=\"3419\" data-end=\"3460\">Cloud cryptography &amp; key custody<\/h3>\n<ul>\n<li data-start=\"3463\" data-end=\"3476\">BYOK \/ HYOK<\/li>\n<li data-start=\"3479\" data-end=\"3525\">Encryption that neutralises foreign warrants<\/li>\n<li data-start=\"3528\" data-end=\"3586\">Confidential computing as a technical sovereignty shield<\/li>\n<\/ul>\n<h2 data-start=\"3593\" data-end=\"3670\">Serverless &amp; FaaS governance: Ephemeral execution &amp; auditability gaps<\/h2>\n<p data-start=\"3671\" data-end=\"3774\">Serverless computing eliminates the concept of \u201cservers\u201d and with it, the traditional forensic trail.<\/p>\n<p data-start=\"3671\" data-end=\"3774\">Key risks include:<\/p>\n<ul>\n<li data-start=\"3799\" data-end=\"3862\">Ephemeral execution environments (no post-incident artefacts)<\/li>\n<li data-start=\"3865\" data-end=\"3913\">Real-time observability as a legal requirement<\/li>\n<li data-start=\"3916\" data-end=\"3969\">IAM sprawl and granular permission misconfiguration<\/li>\n<li data-start=\"3972\" data-end=\"4030\">High-function-count services with complex privilege webs<\/li>\n<li data-start=\"4033\" data-end=\"4084\">Difficulties in proving compliance after-the-fact<\/li>\n<\/ul>\n<p data-start=\"4086\" data-end=\"4121\">Our governance approach includes:<\/p>\n<ul>\n<li data-start=\"4124\" data-end=\"4165\">Mandatory centralised logging pipelines<\/li>\n<li data-start=\"4168\" data-end=\"4206\">Immutable function execution records<\/li>\n<li data-start=\"4209\" data-end=\"4251\">Pre-deployment scanning of IaC templates<\/li>\n<li data-start=\"4254\" data-end=\"4290\">Serverless-specific risk registers<\/li>\n<li data-start=\"4293\" data-end=\"4354\">Cloud-native security controls (least privilege automation)<\/li>\n<\/ul>\n<h2 data-start=\"4361\" data-end=\"4424\">Edge &amp; fog: Zero-trust hardware &amp; distributed authority<\/h2>\n<p data-start=\"4425\" data-end=\"4544\">Edge and fog devices operate outside traditional security perimeters, often in untrusted, physically exposed locations.<\/p>\n<p data-start=\"4546\" data-end=\"4558\">We govern:<\/p>\n<ul>\n<li data-start=\"4561\" data-end=\"4617\">Physical tampering and hostile-environment assumptions<\/li>\n<li data-start=\"4620\" data-end=\"4679\">Zero Trust applied to hardware, firmware, and local logic<\/li>\n<li data-start=\"4682\" data-end=\"4724\">Fog nodes acting as \u201cmini cloud regions\u201d<\/li>\n<li data-start=\"4727\" data-end=\"4770\">Latency-driven autonomous decision-making<\/li>\n<li data-start=\"4773\" data-end=\"4833\">Local policy enforcement despite intermittent connectivity<\/li>\n<li data-start=\"4836\" data-end=\"4884\">Bandwidth constraints driving distributed risk<\/li>\n<\/ul>\n<h2 data-start=\"4891\" data-end=\"4960\">Hybrid computing: Inherited liability &amp; cross-model assurance<\/h2>\n<p data-start=\"4961\" data-end=\"5071\">Hybrid systems combine on-premise, cloud, edge, and serverless components. Liability follows the weakest link.<\/p>\n<p data-start=\"5073\" data-end=\"5121\">We design hybrid assurance models that ensure:<\/p>\n<ul>\n<li data-start=\"5124\" data-end=\"5157\">Unified cross-platform controls<\/li>\n<li data-start=\"5160\" data-end=\"5199\">End-to-end encryption chain integrity<\/li>\n<li data-start=\"5202\" data-end=\"5234\">Identity federation governance<\/li>\n<li data-start=\"5237\" data-end=\"5299\">Consistency of security posture across heterogeneous systems<\/li>\n<li data-start=\"5302\" data-end=\"5360\">Multi-platform incident response and evidence continuity<\/li>\n<\/ul>\n<h2 data-start=\"5367\" data-end=\"5422\">Decentralised computing, DePIN &amp; DAO governance<\/h2>\n<p data-start=\"5423\" data-end=\"5502\">This is one of the most legally complex and misunderstood computing categories.<\/p>\n<h3 data-start=\"5504\" data-end=\"5543\">DAO liability &amp; legal wrappers<\/h3>\n<p data-start=\"5544\" data-end=\"5653\">Without a wrapper, DAOs may be treated as general partnerships, exposing token holders to personal liability.<\/p>\n<p data-start=\"5655\" data-end=\"5670\">We structure:<\/p>\n<ul>\n<li data-start=\"5673\" data-end=\"5683\">DAO private companies<\/li>\n<li data-start=\"5686\" data-end=\"5735\">Series private companies for multi-function DePIN ecosystems<\/li>\n<li data-start=\"5738\" data-end=\"5781\">On-chain\/off-chain governance integration<\/li>\n<li data-start=\"5784\" data-end=\"5815\">Front-end operator compliance<\/li>\n<\/ul>\n<h3 data-start=\"5817\" data-end=\"5855\">DePIN node operator liability<\/h3>\n<p data-start=\"5856\" data-end=\"5913\">Node operators may be liable for illicit content or data.<\/p>\n<p data-start=\"5915\" data-end=\"5927\">We design:<\/p>\n<ul>\n<li data-start=\"5930\" data-end=\"5981\">Protocol-based enforcement (staking and slashing)<\/li>\n<li data-start=\"5984\" data-end=\"6006\">Indemnity structures<\/li>\n<li data-start=\"6009\" data-end=\"6033\">Jurisdictional mapping<\/li>\n<li data-start=\"6036\" data-end=\"6078\">Risk segregation across series or shards<\/li>\n<\/ul>\n<h3 data-start=\"6080\" data-end=\"6132\">The immutability paradox &amp; crypto-shredding<\/h3>\n<p data-start=\"6133\" data-end=\"6148\">We implement:<\/p>\n<ul>\n<li data-start=\"6151\" data-end=\"6180\">Off-chain PII architectures<\/li>\n<li data-start=\"6183\" data-end=\"6208\">Crypto-shredding models<\/li>\n<li data-start=\"6211\" data-end=\"6236\">Hash-pointer governance<\/li>\n<li data-start=\"6239\" data-end=\"6276\">Regulator-accepted erasure controls<\/li>\n<\/ul>\n<h2 data-start=\"6283\" data-end=\"6333\">Sovereignty &amp; cross-border governance<\/h2>\n<p data-start=\"6334\" data-end=\"6424\">A modern computing environment operates across a geopolitical matrix of incompatible laws.<\/p>\n<p data-start=\"6426\" data-end=\"6468\">We map and govern contradictions across:<\/p>\n<ul>\n<li data-start=\"6471\" data-end=\"6485\"><a href=\"https:\/\/www.justice.gov\/criminal\/cloud-act-resources\">US CLOUD Act<\/a><\/li>\n<li data-start=\"6488\" data-end=\"6497\">EU GDPR<\/li>\n<li data-start=\"6500\" data-end=\"6509\">UK GDPR<\/li>\n<li data-start=\"6512\" data-end=\"6532\">South Africa <a href=\"https:\/\/itlawco.com\/focus-areas\/data-protection-and-privacy\/protection-of-personal-information-act\/\">POPIA<\/a><\/li>\n<li data-start=\"6535\" data-end=\"6545\">KSA PDPL<\/li>\n<li data-start=\"6548\" data-end=\"6564\">UAE frameworks<\/li>\n<li data-start=\"6567\" data-end=\"6583\">Indonesia PDPL<\/li>\n<li data-start=\"6586\" data-end=\"6609\">African emerging DPAs<\/li>\n<li data-start=\"6612\" data-end=\"6648\">GCC data localisation requirements<\/li>\n<\/ul>\n<p data-start=\"6650\" data-end=\"6821\">We design transfer models, encryption strategies, sovereign landing zones, and contractual frameworks that allow organisations to operate across conflicting jurisdictions.<\/p>\n<h2 data-start=\"6828\" data-end=\"6911\">Quantum computing law: Temporal liability, PQC &amp; national-security exposure<\/h2>\n<p data-start=\"6912\" data-end=\"7009\">Quantum computing introduces present-day legal risk through \u201cHarvest Now, Decrypt Later\u201d attacks.<\/p>\n<p data-start=\"7011\" data-end=\"7058\">We provide quantum legal strategy, including:<\/p>\n<ul>\n<li data-start=\"7061\" data-end=\"7092\">Temporal liability assessment<\/li>\n<li data-start=\"7095\" data-end=\"7118\">Quantum risk analysis<\/li>\n<li data-start=\"7121\" data-end=\"7170\">Export control compliance for QaaS environments<\/li>\n<\/ul>\n<h3 data-start=\"7172\" data-end=\"7217\">Post-quantum cryptography governance<\/h3>\n<p data-start=\"7218\" data-end=\"7248\">Cloud\/core environments:<\/p>\n<ul>\n<li data-start=\"7251\" data-end=\"7267\">ML-KEM (Kyber)<\/li>\n<li data-start=\"7270\" data-end=\"7290\">ML-DSA (Dilithium)<\/li>\n<\/ul>\n<p>Edge\/IoT environments:<\/p>\n<ul>\n<li data-start=\"7323\" data-end=\"7355\">Ascon lightweight cryptography<\/li>\n<\/ul>\n<p data-start=\"7357\" data-end=\"7424\">We also design secure encryption translation boundaries using TEEs.<\/p>\n<h2 data-start=\"7431\" data-end=\"7493\">A unified governance architecture for modern computing<\/h2>\n<p data-start=\"7494\" data-end=\"7598\">Modern computing cannot be governed with static policies; it requires cyber-physical-legal convergence. As such, we deploy:<\/p>\n<h3 data-start=\"7612\" data-end=\"7646\">Policy-as-code governance<\/h3>\n<ul>\n<li data-start=\"7649\" data-end=\"7675\">Automated region-locking<\/li>\n<li data-start=\"7678\" data-end=\"7701\">Deployment guardrails<\/li>\n<li data-start=\"7704\" data-end=\"7723\">CI\/CD enforcement<\/li>\n<li data-start=\"7726\" data-end=\"7754\">Immutable compliance rules<\/li>\n<\/ul>\n<h3 data-start=\"7756\" data-end=\"7788\">Sovereign landing zones<\/h3>\n<ul>\n<li data-start=\"7791\" data-end=\"7823\">Country-specific cloud regions<\/li>\n<li data-start=\"7826\" data-end=\"7862\">Pre-configured compliance controls<\/li>\n<li data-start=\"7865\" data-end=\"7916\">Jurisdictionally constrained cloud control planes<\/li>\n<\/ul>\n<h3 data-start=\"7918\" data-end=\"7949\">Confidential computing<\/h3>\n<ul>\n<li data-start=\"7952\" data-end=\"7980\">TEEs and hardware enclaves<\/li>\n<li data-start=\"7983\" data-end=\"8002\">Encryption-in-use<\/li>\n<li data-start=\"8005\" data-end=\"8042\">Cloud provider data inaccessibility<\/li>\n<li data-start=\"8045\" data-end=\"8085\">Edge security for hostile environments<\/li>\n<\/ul>\n<h3 data-start=\"8087\" data-end=\"8116\">End-to-end assurance<\/h3>\n<ul>\n<li data-start=\"8119\" data-end=\"8164\">Evidence creation baked into infrastructure<\/li>\n<li data-start=\"8167\" data-end=\"8194\">Regulator-ready reporting<\/li>\n<li data-start=\"8197\" data-end=\"8220\">Continuous compliance<\/li>\n<\/ul>\n<h2 data-start=\"8227\" data-end=\"8247\">Who we help<\/h2>\n<ul>\n<li data-start=\"8250\" data-end=\"8274\">Financial institutions<\/li>\n<li data-start=\"8277\" data-end=\"8315\">Telecoms and critical infrastructure<\/li>\n<li data-start=\"8318\" data-end=\"8342\">Public sector and SOEs<\/li>\n<li data-start=\"8345\" data-end=\"8383\">Higher education and research bodies<\/li>\n<li data-start=\"8386\" data-end=\"8412\">Cloud-native enterprises<\/li>\n<li data-start=\"8415\" data-end=\"8449\">DePIN and decentralised networks<\/li>\n<li data-start=\"8452\" data-end=\"8501\">Organisations with POPIA + GDPR + PDPL exposure<\/li>\n<li data-start=\"8504\" data-end=\"8556\">Quantum-adjacent and high-performance environments<\/li>\n<\/ul>\n<h2 data-start=\"8563\" data-end=\"8601\">Outcomes for your organisation<\/h2>\n<ul>\n<li data-start=\"8604\" data-end=\"8638\">Cross-border legal defensibility<\/li>\n<li data-start=\"8641\" data-end=\"8691\">Reduced liability across the computing continuum<\/li>\n<li data-start=\"8694\" data-end=\"8727\">Auditor and regulator assurance<\/li>\n<li data-start=\"8730\" data-end=\"8771\">Quantum-resilient cryptographic posture<\/li>\n<li data-start=\"8774\" data-end=\"8824\">Distributed and decentralised governance clarity<\/li>\n<li data-start=\"8827\" data-end=\"8857\">Sovereign-aligned operations<\/li>\n<li data-start=\"8860\" data-end=\"8894\">Consistent, enforceable controls<\/li>\n<\/ul>\n<h2 data-start=\"8901\" data-end=\"8920\">Why ITLawCo<\/h2>\n<ul>\n<li data-start=\"8923\" data-end=\"8986\">Deep expertise across African, GCC, EU\/UK, and global regimes<\/li>\n<li data-start=\"8989\" data-end=\"9047\">Architectural literacy beyond traditional legal practice<\/li>\n<li data-start=\"9050\" data-end=\"9119\">Pioneers in DAO, PQC, sovereign cloud, and decentralised governance<\/li>\n<li data-start=\"9122\" data-end=\"9187\">Precision-aligned frameworks for regulators, auditors, and ExCo<\/li>\n<li data-start=\"9190\" data-end=\"9281\">A signature approach of legal defensibility, trustworthy innovation, and global alignment<\/li>\n<\/ul>\n<h2>FAQs<\/h2>\n<\/div>\n\n\n\n<div class=\"toggles \" data-br=\"none\" data-starting=\"default\" data-style=\"default\"><div class=\"toggle default\" data-inner-wrap=\"true\"><h3 class=\"toggle-title\"><a href=\"#\" id=\"toggle-button-6a5f909994ffc\" role=\"button\" aria-expanded=\"false\" aria-controls=\"toggle-panel-6a5f909994ffc\" class=\"toggle-heading\"><i role=\"presentation\" class=\"fa fa-plus\"><\/i>What is computing law?<\/a><\/h3><div id=\"toggle-panel-6a5f909994ffc\" role=\"region\" aria-labelledby=\"toggle-button-6a5f909994ffc\"><div class=\"inner-toggle-wrap\">\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<p data-start=\"460\" data-end=\"841\">Computing law is the legal discipline that governs modern computing environments \u2014 including on-premise systems, cloud platforms, serverless functions, edge and fog devices, decentralised networks (DePIN), sovereign cloud regions, and quantum computing. It addresses liability, cross-border data flows, sovereignty conflicts, cryptography, and governance across these environments.<\/p>\n<\/div>\n\n\n\n<\/div><\/div><\/div><div class=\"toggle default\" data-inner-wrap=\"true\"><h3 class=\"toggle-title\"><a href=\"#\" id=\"toggle-button-6a5f909995bbf\" role=\"button\" aria-expanded=\"false\" aria-controls=\"toggle-panel-6a5f909995bbf\" class=\"toggle-heading\"><i role=\"presentation\" class=\"fa fa-plus\"><\/i>How is computing law different from traditional IT law or technology law?<\/a><\/h3><div id=\"toggle-panel-6a5f909995bbf\" role=\"region\" aria-labelledby=\"toggle-button-6a5f909995bbf\"><div class=\"inner-toggle-wrap\">\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<p data-start=\"935\" data-end=\"1234\">Traditional IT law focuses on contracts, licensing, and commercial arrangements. Computing law goes further by governing <strong data-start=\"1056\" data-end=\"1074\">infrastructure<\/strong>, <strong data-start=\"1076\" data-end=\"1092\">architecture<\/strong>, <strong data-start=\"1094\" data-end=\"1109\">sovereignty<\/strong>, <strong data-start=\"1111\" data-end=\"1127\">cryptography<\/strong>, <strong data-start=\"1129\" data-end=\"1154\">shared responsibility<\/strong>, and <strong data-start=\"1160\" data-end=\"1180\">liability models<\/strong> across distributed and emerging computing ecosystems.<\/p>\n<\/div>\n\n\n\n<\/div><\/div><\/div><div class=\"toggle default\" data-inner-wrap=\"true\"><h3 class=\"toggle-title\"><a href=\"#\" id=\"toggle-button-6a5f909996418\" role=\"button\" aria-expanded=\"false\" aria-controls=\"toggle-panel-6a5f909996418\" class=\"toggle-heading\"><i role=\"presentation\" class=\"fa fa-plus\"><\/i>Which organisations need computing law guidance?<\/a><\/h3><div id=\"toggle-panel-6a5f909996418\" role=\"region\" aria-labelledby=\"toggle-button-6a5f909996418\"><div class=\"inner-toggle-wrap\">\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<p data-start=\"1303\" data-end=\"1686\">Any organisation that operates across multiple computing environments \u2014 especially those using cloud, serverless, edge, DePIN, or sovereign-cloud architectures \u2014 needs computing law. This includes financial institutions, telecoms, SOEs, multinationals with cross-border footprints, digital-first companies, and organisations under POPIA, GDPR, PDPL, or sectoral regulatory oversight.<\/p>\n<\/div>\n\n\n\n<\/div><\/div><\/div><div class=\"toggle default\" data-inner-wrap=\"true\"><h3 class=\"toggle-title\"><a href=\"#\" id=\"toggle-button-6a5f909996cac\" role=\"button\" aria-expanded=\"false\" aria-controls=\"toggle-panel-6a5f909996cac\" class=\"toggle-heading\"><i role=\"presentation\" class=\"fa fa-plus\"><\/i>What are the biggest legal risks in cloud computing today?<\/a><\/h3><div id=\"toggle-panel-6a5f909996cac\" role=\"region\" aria-labelledby=\"toggle-button-6a5f909996cac\"><div class=\"inner-toggle-wrap\">\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<p data-start=\"1765\" data-end=\"1799\">The highest-risk issues include:<\/p>\n<ul>\n<li data-start=\"1802\" data-end=\"1844\">Shared responsibility model misalignment<\/li>\n<li data-start=\"1847\" data-end=\"1916\">Cross-border data transfer conflicts (CLOUD Act vs GDPR\/PDPL\/POPIA)<\/li>\n<li data-start=\"1919\" data-end=\"1958\">Key custody and encryption governance<\/li>\n<li data-start=\"1961\" data-end=\"2001\">Vendor lock-in and non-negotiable SLAs<\/li>\n<li data-start=\"2004\" data-end=\"2049\">Cloud region selection affecting compliance<\/li>\n<li data-start=\"2052\" data-end=\"2102\">Lack of evidence generation for regulator audits<\/li>\n<\/ul>\n<\/div>\n\n\n\n<\/div><\/div><\/div><div class=\"toggle default\" data-inner-wrap=\"true\"><h3 class=\"toggle-title\"><a href=\"#\" id=\"toggle-button-6a5f9099981b8\" role=\"button\" aria-expanded=\"false\" aria-controls=\"toggle-panel-6a5f9099981b8\" class=\"toggle-heading\"><i role=\"presentation\" class=\"fa fa-plus\"><\/i>Why are serverless and FaaS environments difficult to govern?<\/a><\/h3><div id=\"toggle-panel-6a5f9099981b8\" role=\"region\" aria-labelledby=\"toggle-button-6a5f9099981b8\"><div class=\"inner-toggle-wrap\">\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<p>Serverless functions are <strong data-start=\"2209\" data-end=\"2222\">ephemeral<\/strong> \u2014 they spin up, execute, and vanish \u2014 leaving no traditional forensic trail. Organisations face auditability gaps, complex IAM role sprawl, and difficulty proving compliance. Governance must shift to <strong data-start=\"2423\" data-end=\"2498\">pre-deployment controls, immutable logging, and real-time observability<\/strong>.<\/p>\n<\/div>\n\n\n\n<\/div><\/div><\/div><div class=\"toggle default\" data-inner-wrap=\"true\"><h3 class=\"toggle-title\"><a href=\"#\" id=\"toggle-button-6a5f90999893f\" role=\"button\" aria-expanded=\"false\" aria-controls=\"toggle-panel-6a5f90999893f\" class=\"toggle-heading\"><i role=\"presentation\" class=\"fa fa-plus\"><\/i>What makes edge and fog computing legally complex?<\/a><\/h3><div id=\"toggle-panel-6a5f90999893f\" role=\"region\" aria-labelledby=\"toggle-button-6a5f90999893f\"><div class=\"inner-toggle-wrap\">\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<p data-start=\"2570\" data-end=\"2661\">Edge and fog devices operate in untrusted, physically exposed environments. They require:<\/p>\n<ul>\n<li data-start=\"2664\" data-end=\"2697\">Zero Trust hardware assumptions<\/li>\n<li data-start=\"2700\" data-end=\"2749\">Governance for autonomous local decision-making<\/li>\n<li data-start=\"2752\" data-end=\"2791\">Protection against physical tampering<\/li>\n<li data-start=\"2794\" data-end=\"2842\">Cryptographic security for constrained devices<\/li>\n<li data-start=\"2845\" data-end=\"2899\">Controls that work even when offline or disconnected<\/li>\n<\/ul>\n<p data-start=\"2901\" data-end=\"2994\">Latency-driven autonomy means liability remains centralised even when control is distributed.<\/p>\n<\/div>\n\n\n\n<\/div><\/div><\/div><div class=\"toggle default\" data-inner-wrap=\"true\"><h3 class=\"toggle-title\"><a href=\"#\" id=\"toggle-button-6a5f90999912f\" role=\"button\" aria-expanded=\"false\" aria-controls=\"toggle-panel-6a5f90999912f\" class=\"toggle-heading\"><i role=\"presentation\" class=\"fa fa-plus\"><\/i>How does decentralised computing (DePIN, DAO networks) affect legal liability?<\/a><\/h3><div id=\"toggle-panel-6a5f90999912f\" role=\"region\" aria-labelledby=\"toggle-button-6a5f90999912f\"><div class=\"inner-toggle-wrap\">\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<p>DAOs without legal wrappers may be treated as <a href=\"https:\/\/itlawco.com\/partnering-options-a-guide-for-businesses\/\">general partnerships<\/a>, exposing token holders or contributors to personal liability for breaches or protocol failures. DePIN networks introduce node-operator liability, front-end operator liability, and complex cross-border risks. Legal wrappers, staking mechanisms, and off-chain compliance controls are essential.<\/p>\n<\/div>\n\n\n\n<\/div><\/div><\/div><div class=\"toggle default\" data-inner-wrap=\"true\"><h3 class=\"toggle-title\"><a href=\"#\" id=\"toggle-button-6a5f90999978d\" role=\"button\" aria-expanded=\"false\" aria-controls=\"toggle-panel-6a5f90999978d\" class=\"toggle-heading\"><i role=\"presentation\" class=\"fa fa-plus\"><\/i>How do we reconcile blockchain immutability with GDPR and POPIA erasure obligations?<\/a><\/h3><div id=\"toggle-panel-6a5f90999978d\" role=\"region\" aria-labelledby=\"toggle-button-6a5f90999978d\"><div class=\"inner-toggle-wrap\">\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<p data-start=\"3562\" data-end=\"3652\">Organisations must avoid putting personal or sensitive data on-chain. Instead, they use:<\/p>\n<ul>\n<li data-start=\"3655\" data-end=\"3682\">Off-chain storage for PII<\/li>\n<li data-start=\"3685\" data-end=\"3714\">On-chain hashes or pointers<\/li>\n<li data-start=\"3717\" data-end=\"3843\">Crypto-shredding to render data irreversibly inaccessible<\/li>\n<\/ul>\n<p>This enables lawful compliance with erasure and correction rights.<\/p>\n<\/div>\n\n\n\n<\/div><\/div><\/div><div class=\"toggle default\" data-inner-wrap=\"true\"><h3 class=\"toggle-title\"><a href=\"#\" id=\"toggle-button-6a5f909999e6a\" role=\"button\" aria-expanded=\"false\" aria-controls=\"toggle-panel-6a5f909999e6a\" class=\"toggle-heading\"><i role=\"presentation\" class=\"fa fa-plus\"><\/i>What are the legal implications of quantum computing and post-quantum cryptography (PQC)?<\/a><\/h3><div id=\"toggle-panel-6a5f909999e6a\" role=\"region\" aria-labelledby=\"toggle-button-6a5f909999e6a\"><div class=\"inner-toggle-wrap\">\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<p>Quantum computing introduces <strong data-start=\"3982\" data-end=\"4004\">temporal liability<\/strong> because data encrypted today may be decrypted tomorrow (Harvest Now, Decrypt Later). Organisations must begin PQC migration \u2014 including lattice-based cryptography for cloud\/core systems and lightweight algorithms for edge\/IoT. Export controls and national-security restrictions also apply.<\/p>\n<\/div>\n\n\n\n<\/div><\/div><\/div><div class=\"toggle default\" data-inner-wrap=\"true\"><h3 class=\"toggle-title\"><a href=\"#\" id=\"toggle-button-6a5f90999a4da\" role=\"button\" aria-expanded=\"false\" aria-controls=\"toggle-panel-6a5f90999a4da\" class=\"toggle-heading\"><i role=\"presentation\" class=\"fa fa-plus\"><\/i>What is policy-as-code and why is it important for legal compliance?<\/a><\/h3><div id=\"toggle-panel-6a5f90999a4da\" role=\"region\" aria-labelledby=\"toggle-button-6a5f90999a4da\"><div class=\"inner-toggle-wrap\">\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<p>Policy-as-code translates legal and regulatory rules into automated enforcement logic within cloud and hybrid environments. It prevents non-compliant deployments, enforces data localisation, applies security baselines, and ensures continuous compliance. It is foundational for operating across sovereign digital blocs.<\/p>\n<\/div>\n\n\n\n<\/div><\/div><\/div><div class=\"toggle default\" data-inner-wrap=\"true\"><h3 class=\"toggle-title\"><a href=\"#\" id=\"toggle-button-6a5f90999ab3f\" role=\"button\" aria-expanded=\"false\" aria-controls=\"toggle-panel-6a5f90999ab3f\" class=\"toggle-heading\"><i role=\"presentation\" class=\"fa fa-plus\"><\/i>How does confidential computing support compliance and sovereignty?<\/a><\/h3><div id=\"toggle-panel-6a5f90999ab3f\" role=\"region\" aria-labelledby=\"toggle-button-6a5f90999ab3f\"><div class=\"inner-toggle-wrap\">\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<p>Confidential computing processes data inside hardware-isolated secure enclaves, preventing cloud providers, foreign governments, or malicious insiders from accessing it. It provides a <strong data-start=\"4975\" data-end=\"5030\">technical defence against extraterritorial warrants<\/strong> and greatly strengthens cross-border compliance strategies.<\/p>\n<\/div>\n\n\n\n<\/div><\/div><\/div><div class=\"toggle default\" data-inner-wrap=\"true\"><h3 class=\"toggle-title\"><a href=\"#\" id=\"toggle-button-6a5f90999b173\" role=\"button\" aria-expanded=\"false\" aria-controls=\"toggle-panel-6a5f90999b173\" class=\"toggle-heading\"><i role=\"presentation\" class=\"fa fa-plus\"><\/i>How does ITLawCo help organisations manage conflicting international laws?<\/a><\/h3><div id=\"toggle-panel-6a5f90999b173\" role=\"region\" aria-labelledby=\"toggle-button-6a5f90999b173\"><div class=\"inner-toggle-wrap\">\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<p data-start=\"5186\" data-end=\"5238\">We design governance architectures that reconcile:<\/p>\n<ul>\n<li data-start=\"5241\" data-end=\"5278\">POPIA\u2019s juristic-person protections<\/li>\n<li data-start=\"5281\" data-end=\"5306\">GDPR\u2019s blocking statute<\/li>\n<li data-start=\"5309\" data-end=\"5347\">KSA PDPL\u2019s localisation requirements<\/li>\n<li data-start=\"5350\" data-end=\"5384\">US CLOUD Act extraterritoriality<\/li>\n<li data-start=\"5387\" data-end=\"5426\">Indonesia\u2019s criminal liability regime<\/li>\n<li>GCC national-interest provisions<\/li>\n<\/ul>\n<p>Through encryption, sovereign landing zones, contractual frameworks, and policy-as-code enforcement.<\/p>\n<\/div>\n\n\n\n<\/div><\/div><\/div><\/div>\n<div class=\"wpb_text_column wpb_content_element \" >\n\t<h2 data-start=\"232\" data-end=\"280\">Publication details<\/h2>\n<p data-start=\"232\" data-end=\"280\"><strong>Author: <\/strong>ITLawCo\u2019s Computing Law Team<\/p>\n<p data-start=\"383\" data-end=\"419\"><strong data-start=\"383\" data-end=\"400\">Last updated: <\/strong>25 November 2025<\/p>\n<\/div>\n\n\n\n\n<div class=\"wpcf7 no-js\" id=\"wpcf7-f718-o1\" lang=\"en-US\" dir=\"ltr\" data-wpcf7-id=\"718\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/fr\/wp-json\/wp\/v2\/pages\/3401#wpcf7-f718-o1\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"718\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.1.6\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"en_US\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f718-o1\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/><input type=\"hidden\" name=\"_uacf7_hidden_conditional_fields\" value=\"\" \/><input type=\"hidden\" name=\"_wpcf7_recaptcha_response\" value=\"\" \/>\n<\/fieldset>\n<div class=\"uacf7-form-wrapper-container uacf7-form-718  \"><div class=\"uacf7-row\"><div class=\"uacf7-col-4\"><label>Name (required)<\/label>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-name\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"text\" name=\"your-name\" \/><\/span><\/div><div class=\"uacf7-col-4\"><label>Email (required)<\/label>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-email\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"email\" name=\"your-email\" \/><\/span><\/div><div class=\"uacf7-col-4\"><label>Contact number (optional)<\/label>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-phone\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-tel wpcf7-text wpcf7-validates-as-tel\" aria-invalid=\"false\" value=\"\" type=\"tel\" name=\"your-phone\" \/><\/span><\/div><\/div><\/br>\n<div class=\"uacf7-row\"><div class=\"uacf7-col-6\"><label>Company (required)<\/label><span class=\"wpcf7-form-control-wrap\" data-name=\"Company\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" id=\"Company\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"text\" name=\"Company\" \/><\/span><\/div><div class=\"uacf7-col-6\"><label>Company role (required)<\/label><span class=\"wpcf7-form-control-wrap\" data-name=\"Company\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"text\" name=\"Company\" \/><\/span><\/div><\/div><\/br>\n<label>Area of enquiry (required)<\/label><span class=\"wpcf7-form-control-wrap\" data-name=\"AreaofITlawenquiryrequired\"><select class=\"wpcf7-form-control wpcf7-select wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" name=\"AreaofITlawenquiryrequired\"><option value=\"\">&#8212;Please choose an option&#8212;<\/option><option value=\"Artificial intelligence\">Artificial intelligence<\/option><option value=\"Computing: on-premise, cloud and quantum computing\">Computing: on-premise, cloud and quantum computing<\/option><option value=\"Online marketplaces\">Online marketplaces<\/option><option value=\"IT contracts\">IT contracts<\/option><option value=\"Third party risk management\">Third party risk management<\/option><option value=\"ICT law\">ICT law<\/option><option value=\"Cybercrime law\">Cybercrime law<\/option><option value=\"Electronic signatures law\">Electronic signatures law<\/option><option value=\"Data protection and privacy\">Data protection and privacy<\/option><option value=\"Access to information\">Access to information<\/option><option value=\"Cyber and security\">Cyber and security<\/option><option value=\"Incident response\">Incident response<\/option><option value=\"Business continuity\">Business continuity<\/option><option value=\"IT GRC - MEA regulatory\">IT GRC - MEA regulatory<\/option><option value=\"Legal technology\">Legal technology<\/option><option value=\"Agency and distribution\">Agency and distribution<\/option><option value=\"Franchise transactions\">Franchise transactions<\/option><option value=\"Consumer protection\">Consumer protection<\/option><option value=\"Startup\">Startup<\/option><option value=\"Procurement\">Procurement<\/option><option value=\"Other (please specify)\">Other (please specify)<\/option><\/select><\/span>\n<\/br>\n<div class=\"uacf7-row\"><div class=\"uacf7-col-12\"><label>Message (required)<\/label>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-message\"><textarea cols=\"40\" rows=\"10\" maxlength=\"2000\" class=\"wpcf7-form-control wpcf7-textarea wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" name=\"your-message\"><\/textarea><\/span><\/div><\/div>\n\n<input class=\"wpcf7-form-control wpcf7-submit has-spinner\" type=\"submit\" value=\"Send enquiry\" \/><\/div><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n\n\t\t\t<\/div> \n\t\t<\/div>\n\t<\/div> \n<\/div><\/div>\n\t\t<div id=\"fws_6a5f9099a91f6\"  data-column-margin=\"default\" data-midnight=\"dark\"  class=\"wpb_row vc_row-fluid vc_row\"  style=\"padding-top: 0px; padding-bottom: 0px; \"><div class=\"row-bg-wrap\" data-bg-animation=\"none\" data-bg-animation-delay=\"\" data-bg-overlay=\"false\"><div class=\"inner-wrap row-bg-layer\" ><div class=\"row-bg viewport-desktop\"  style=\"\"><\/div><\/div><\/div><div class=\"row_col_wrap_12 col span_12 dark left\">\n\t<div  class=\"vc_col-sm-12 wpb_column column_container vc_column_container col no-extra-padding inherit_tablet inherit_phone \"  data-padding-pos=\"all\" data-has-bg-color=\"false\" data-bg-color=\"\" data-bg-opacity=\"1\" data-animation=\"\" data-delay=\"0\" >\n\t\t<div class=\"vc_column-inner\" >\n\t\t\t<div class=\"wpb_wrapper\">\n\t\t\t\t\n\t<div class=\"wpb_raw_code wpb_raw_html wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<script type=\"application\/ld+json\">\n{\n  \"@context\": \"https:\/\/schema.org\",\n  \"@graph\": [\n    {\n      \"@type\": \"Organization\",\n      \"@id\": \"https:\/\/itlawco.com\/#organisation\",\n      \"name\": \"ITLawCo\",\n      \"url\": \"https:\/\/itlawco.com\/\",\n      \"logo\": \"https:\/\/itlawco.com\/wp-content\/uploads\/itlawco_logo.png\",\n      \"description\": \"ITLawCo is a boutique legal-tech advisory firm based in Cape Town, South Africa, specialising in data protection, computing law, AI governance, cybersecurity and IT GRC for South African, African, GCC and global organisations.\",\n      \"address\": {\n        \"@type\": \"PostalAddress\",\n        \"streetAddress\": \"17 Dock Road, V&A Waterfront\",\n        \"addressLocality\": \"Cape Town\",\n        \"postalCode\": \"8002\",\n        \"addressRegion\": \"Western Cape\",\n        \"addressCountry\": \"ZA\"\n      },\n      \"contactPoint\": {\n        \"@type\": \"ContactPoint\",\n        \"contactType\": \"client enquiries\",\n        \"email\": \"support@itlawco.com\",\n        \"availableLanguage\": [\n          \"en-ZA\",\n          \"en-GB\"\n        ]\n      },\n      \"areaServed\": [\n        { \"@type\": \"Country\", \"name\": \"South Africa\" },\n        { \"@type\": \"Continent\", \"name\": \"Africa\" },\n        { \"@type\": \"Country\", \"name\": \"United Kingdom\" },\n        { \"@type\": \"Country\", \"name\": \"United Arab Emirates\" },\n        { \"@type\": \"Country\", \"name\": \"Saudi Arabia\" },\n        { \"@type\": \"Country\", \"name\": \"Oman\" },\n        { \"@type\": \"Organization\", \"name\": \"European Union\" }\n      ],\n      \"sameAs\": [\n        \"https:\/\/www.linkedin.com\/company\/itlawco\/\",\n        \"https:\/\/www.linkedin.com\/in\/nathan-ross-adams-a5760b9a\/\"\n      ]\n    },\n    {\n      \"@type\": \"WebSite\",\n      \"@id\": \"https:\/\/itlawco.com\/#website\",\n      \"url\": \"https:\/\/itlawco.com\/\",\n      \"name\": \"ITLawCo\",\n      \"inLanguage\": \"en-ZA\",\n      \"publisher\": { \"@id\": \"https:\/\/itlawco.com\/#organisation\" }\n    },\n    {\n      \"@type\": \"ImageObject\",\n      \"@id\": \"https:\/\/itlawco.com\/focus-areas\/computing-law\/#primaryimage\",\n      \"url\": \"https:\/\/itlawco.com\/wp-content\/uploads\/2025\/11\/computing-law_africa-hybrid-cloud-quantum-governance_itlawco_hero_v1.0-scaled.jpg\",\n      \"width\": 1376,\n      \"height\": 768,\n      \"caption\": \"Multi-layered computing stack showing on-premise servers, cloud environments, an abstract quantum grid and an outline of Africa, representing computing law, cloud governance and data sovereignty.\",\n      \"inLanguage\": \"en-ZA\"\n    },\n   {\n  \"@type\": \"LegalService\",\n  \"@id\": \"https:\/\/itlawco.com\/focus-areas\/computing-law\/#service\",\n  \"name\": \"Computing law: On-premise, cloud, hybrid, edge, serverless, DePIN and quantum governance\",\n  \"description\": \"Legal and governance advisory for on-premise infrastructure, cloud platforms, hybrid environments, edge and fog devices, serverless architectures, decentralised infrastructure (DePIN and DAOs), sovereign cloud and quantum computing, aligned with POPIA, GDPR, PDPL, NIST, ISO and emerging global standards.\",\n  \"provider\": { \"@id\": \"https:\/\/itlawco.com\/#organisation\" },\n\n  \"address\": {\n    \"@type\": \"PostalAddress\",\n    \"streetAddress\": \"17 Dock Road, V&A Waterfront\",\n    \"addressLocality\": \"Cape Town\",\n    \"postalCode\": \"8002\",\n    \"addressRegion\": \"Western Cape\",\n    \"addressCountry\": \"ZA\"\n  },\n\n  \"areaServed\": [\n    { \"@type\": \"Country\", \"name\": \"South Africa\" },\n    { \"@type\": \"Continent\", \"name\": \"Africa\" },\n    { \"@type\": \"Country\", \"name\": \"United Kingdom\" },\n    { \"@type\": \"Country\", \"name\": \"United Arab Emirates\" },\n    { \"@type\": \"Country\", \"name\": \"Saudi Arabia\" },\n    { \"@type\": \"Country\", \"name\": \"Oman\" }\n  ],\n  \"serviceType\": [\n    \"Computing law\",\n    \"Cloud governance\",\n    \"Hybrid computing governance\",\n    \"Edge and fog computing governance\",\n    \"Serverless and FaaS governance\",\n    \"On-premise infrastructure governance\",\n    \"Decentralised computing and DePIN governance\",\n    \"DAO liability and legal wrappers\",\n    \"Quantum computing law and post-quantum cryptography governance\",\n    \"Sovereignty and cross-border data governance\",\n    \"Policy-as-code and confidential computing governance\"\n  ]\n},\n    {\n      \"@type\": \"BreadcrumbList\",\n      \"@id\": \"https:\/\/itlawco.com\/focus-areas\/computing-law\/#breadcrumb\",\n      \"itemListElement\": [\n        { \"@type\": \"ListItem\", \"position\": 1, \"name\": \"Home\", \"item\": \"https:\/\/itlawco.com\/\" },\n        { \"@type\": \"ListItem\", \"position\": 2, \"name\": \"Focus areas\", \"item\": \"https:\/\/itlawco.com\/focus-areas\/\" },\n        { \"@type\": \"ListItem\", \"position\": 3, \"name\": \"Computing law\", \"item\": \"https:\/\/itlawco.com\/focus-areas\/computing-law\/\" }\n      ]\n    },\n    {\n      \"@type\": \"WebPage\",\n      \"@id\": \"https:\/\/itlawco.com\/focus-areas\/computing-law\/#webpage\",\n      \"url\": \"https:\/\/itlawco.com\/focus-areas\/computing-law\/\",\n      \"name\": \"Computing law: Cloud, hybrid, edge, serverless, DePIN and quantum governance | ITLawCo\",\n      \"description\": \"Computing law for modern enterprises across Africa, the GCC and EU\/UK: ITLawCo governs cloud, hybrid, edge, serverless, DePIN and quantum environments with legal defensibility and global regulatory alignment.\",\n      \"inLanguage\": \"en-ZA\",\n      \"isPartOf\": { \"@id\": \"https:\/\/itlawco.com\/#website\" },\n      \"about\": { \"@id\": \"https:\/\/itlawco.com\/focus-areas\/computing-law\/#service\" },\n      \"primaryImageOfPage\": { \"@id\": \"https:\/\/itlawco.com\/focus-areas\/computing-law\/#primaryimage\" },\n      \"breadcrumb\": { \"@id\": \"https:\/\/itlawco.com\/focus-areas\/computing-law\/#breadcrumb\" },\n      \"datePublished\": \"2025-11-25T15:00:00+02:00\",\n      \"dateModified\": \"2025-11-25T15:00:00+02:00\",\n      \"version\": \"1.0\",\n      \"author\": {\n        \"@type\": \"Organization\",\n        \"name\": \"ITLawCo\u2019s Computing Law Team\",\n        \"parentOrganization\": { \"@id\": \"https:\/\/itlawco.com\/#organisation\" }\n      }\n    },\n    {\n      \"@type\": \"FAQPage\",\n      \"@id\": \"https:\/\/itlawco.com\/focus-areas\/computing-law\/#faq\",\n      \"mainEntity\": [\n        {\n          \"@type\": \"Question\",\n          \"name\": \"What is computing law?\",\n          \"acceptedAnswer\": {\n            \"@type\": \"Answer\",\n            \"text\": \"Computing law is the legal discipline that governs modern computing environments, including on-premise systems, cloud platforms, serverless functions, edge and fog devices, decentralised networks such as DePIN, sovereign cloud regions and quantum computing.\"\n          }\n        },\n        {\n          \"@type\": \"Question\",\n          \"name\": \"How is computing law different from traditional IT law?\",\n          \"acceptedAnswer\": {\n            \"@type\": \"Answer\",\n            \"text\": \"Traditional IT law focuses on contracts and licensing, while computing law governs infrastructure, architecture, sovereignty, cryptography, liability models and cross-border regulatory conflicts across distributed computing ecosystems.\"\n          }\n        },\n        {\n          \"@type\": \"Question\",\n          \"name\": \"Which organisations need computing law guidance?\",\n          \"acceptedAnswer\": {\n            \"@type\": \"Answer\",\n            \"text\": \"Any organisation operating across on-premise, cloud, serverless, edge, decentralised, sovereign-cloud or quantum environments, particularly those under POPIA, GDPR, PDPL or sectoral regulatory oversight.\"\n          }\n        },\n        {\n          \"@type\": \"Question\",\n          \"name\": \"What are the biggest legal risks in cloud computing?\",\n          \"acceptedAnswer\": {\n            \"@type\": \"Answer\",\n            \"text\": \"Major risks include shared-responsibility gaps, cross-border conflicts such as CLOUD Act vs GDPR, weak encryption governance, vendor lock-in, non-negotiable SLAs and insufficient evidence creation for audits.\"\n          }\n        },\n        {\n          \"@type\": \"Question\",\n          \"name\": \"Why are serverless and FaaS environments difficult to govern?\",\n          \"acceptedAnswer\": {\n            \"@type\": \"Answer\",\n            \"text\": \"Serverless environments are ephemeral and often leave no forensic artefacts. Organisations must rely on pre-deployment guardrails, immutable logging, IAM controls and continuous observability to ensure compliance.\"\n          }\n        },\n        {\n          \"@type\": \"Question\",\n          \"name\": \"What makes edge and fog computing legally complex?\",\n          \"acceptedAnswer\": {\n            \"@type\": \"Answer\",\n            \"text\": \"Edge and fog devices operate in untrusted environments and require zero trust hardware assumptions, governance for autonomous decisions, tamper resistance and cryptographic protection for constrained devices.\"\n          }\n        },\n        {\n          \"@type\": \"Question\",\n          \"name\": \"How does decentralised computing affect legal liability?\",\n          \"acceptedAnswer\": {\n            \"@type\": \"Answer\",\n            \"text\": \"DAOs without legal wrappers may be treated as General Partnerships, exposing participants to personal liability. DePIN introduces node operator, front-end operator and protocol risks requiring legal wrappers and enforcement frameworks.\"\n          }\n        },\n        {\n          \"@type\": \"Question\",\n          \"name\": \"How do we reconcile blockchain immutability with erasure laws?\",\n          \"acceptedAnswer\": {\n            \"@type\": \"Answer\",\n            \"text\": \"By storing personal data off-chain, using on-chain hashes or pointers and applying crypto-shredding to render data unrecoverable while preserving blockchain integrity.\"\n          }\n        },\n        {\n          \"@type\": \"Question\",\n          \"name\": \"What are the legal implications of quantum computing?\",\n          \"acceptedAnswer\": {\n            \"@type\": \"Answer\",\n            \"text\": \"Quantum computing introduces temporal liability due to Harvest Now, Decrypt Later risks. Organisations must migrate to post-quantum cryptography, manage long-tail data risk and comply with export controls.\"\n          }\n        },\n        {\n          \"@type\": \"Question\",\n          \"name\": \"What is policy-as-code and why does it matter?\",\n          \"acceptedAnswer\": {\n            \"@type\": \"Answer\",\n            \"text\": \"Policy-as-code enforces regulatory requirements automatically within cloud and hybrid environments, preventing non-compliant deployments and ensuring continuous compliance.\"\n          }\n        },\n        {\n          \"@type\": \"Question\",\n          \"name\": \"How does confidential computing support sovereignty?\",\n          \"acceptedAnswer\": {\n            \"@type\": \"Answer\",\n            \"text\": \"Confidential computing isolates workloads inside hardware-secured enclaves, preventing cloud providers or foreign governments from accessing data, supporting both compliance and sovereignty.\"\n          }\n        },\n        {\n          \"@type\": \"Question\",\n          \"name\": \"How does ITLawCo manage conflicting international laws?\",\n          \"acceptedAnswer\": {\n            \"@type\": \"Answer\",\n            \"text\": \"By designing architectures that reconcile POPIA, GDPR, PDPL, CLOUD Act and other regimes through encryption strategies, sovereign landing zones, contractual frameworks and policy-as-code enforcement.\"\n          }\n        }\n      ]\n    }\n  ]\n}\n<\/script>\n\n\t\t<\/div>\n\t<\/div>\n\n\t\t\t<\/div> \n\t\t<\/div>\n\t<\/div> \n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"Modern computing is no longer confined to the data centre or a single cloud provider. It now spans a heterogeneous, globally distributed continuum: on-premise servers, hyperscale clouds, sovereign cloud regions,...","protected":false},"author":1,"featured_media":3402,"parent":885,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"class_list":["post-3401","page","type-page","status-publish","has-post-thumbnail"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Computing law - ITLawCo<\/title>\n<meta name=\"description\" content=\"Computing law for modern enterprises across Africa, the GCC and EU\/UK: ITLawCo governs cloud, hybrid, edge, serverless, DePIN and quantum environments with legal defensibility and global regulatory alignment.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/itlawco.com\/fr\/focus-areas\/computing-law\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Computing law - ITLawCo\" \/>\n<meta property=\"og:description\" content=\"Computing law for modern enterprises across Africa, the GCC and EU\/UK: ITLawCo governs cloud, hybrid, edge, serverless, DePIN and quantum environments with legal defensibility and global regulatory alignment.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/itlawco.com\/fr\/focus-areas\/computing-law\/\" \/>\n<meta property=\"og:site_name\" content=\"ITLawCo\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-25T20:25:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/itlawco.com\/wp-content\/uploads\/2025\/11\/computing-law_africa-hybrid-cloud-quantum-governance_itlawco_hero_v1.0-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1429\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data1\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/itlawco.com\\\/focus-areas\\\/computing-law\\\/\",\"url\":\"https:\\\/\\\/itlawco.com\\\/focus-areas\\\/computing-law\\\/\",\"name\":\"Computing law - ITLawCo\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/itlawco.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/itlawco.com\\\/focus-areas\\\/computing-law\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/itlawco.com\\\/focus-areas\\\/computing-law\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/itlawco.com\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/computing-law_africa-hybrid-cloud-quantum-governance_itlawco_hero_v1.0-scaled.jpg\",\"datePublished\":\"2025-11-25T20:14:16+00:00\",\"dateModified\":\"2025-11-25T20:25:44+00:00\",\"description\":\"Computing law for modern enterprises across Africa, the GCC and EU\\\/UK: ITLawCo governs cloud, hybrid, edge, serverless, DePIN and quantum environments with legal defensibility and global regulatory alignment.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/itlawco.com\\\/focus-areas\\\/computing-law\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/itlawco.com\\\/focus-areas\\\/computing-law\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/itlawco.com\\\/focus-areas\\\/computing-law\\\/#primaryimage\",\"url\":\"https:\\\/\\\/itlawco.com\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/computing-law_africa-hybrid-cloud-quantum-governance_itlawco_hero_v1.0-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/itlawco.com\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/computing-law_africa-hybrid-cloud-quantum-governance_itlawco_hero_v1.0-scaled.jpg\",\"width\":2560,\"height\":1429,\"caption\":\"Multi-layered computing environments \u2014 from on-premise to cloud to quantum \u2014 governed with legal defensibility and regional sovereignty.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/itlawco.com\\\/focus-areas\\\/computing-law\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/itlawco.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Focus areas\",\"item\":\"https:\\\/\\\/itlawco.com\\\/focus-areas\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Computing law\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/itlawco.com\\\/#website\",\"url\":\"https:\\\/\\\/itlawco.com\\\/\",\"name\":\"ITLawCo\",\"description\":\"Fast, fearless legal\",\"publisher\":{\"@id\":\"https:\\\/\\\/itlawco.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/itlawco.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/itlawco.com\\\/#organization\",\"name\":\"ITLawCo\",\"url\":\"https:\\\/\\\/itlawco.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/itlawco.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/itlawco.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/Logo-prsm@4x.png\",\"contentUrl\":\"https:\\\/\\\/itlawco.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/Logo-prsm@4x.png\",\"width\":2854,\"height\":2883,\"caption\":\"ITLawCo\"},\"image\":{\"@id\":\"https:\\\/\\\/itlawco.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/itlawco\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Computing law - ITLawCo","description":"Computing law for modern enterprises across Africa, the GCC and EU\/UK: ITLawCo governs cloud, hybrid, edge, serverless, DePIN and quantum environments with legal defensibility and global regulatory alignment.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/itlawco.com\/fr\/focus-areas\/computing-law\/","og_locale":"fr_FR","og_type":"article","og_title":"Computing law - ITLawCo","og_description":"Computing law for modern enterprises across Africa, the GCC and EU\/UK: ITLawCo governs cloud, hybrid, edge, serverless, DePIN and quantum environments with legal defensibility and global regulatory alignment.","og_url":"https:\/\/itlawco.com\/fr\/focus-areas\/computing-law\/","og_site_name":"ITLawCo","article_modified_time":"2025-11-25T20:25:44+00:00","og_image":[{"width":2560,"height":1429,"url":"https:\/\/itlawco.com\/wp-content\/uploads\/2025\/11\/computing-law_africa-hybrid-cloud-quantum-governance_itlawco_hero_v1.0-scaled.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Dur\u00e9e de lecture estim\u00e9e":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/itlawco.com\/focus-areas\/computing-law\/","url":"https:\/\/itlawco.com\/focus-areas\/computing-law\/","name":"Computing law - ITLawCo","isPartOf":{"@id":"https:\/\/itlawco.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/itlawco.com\/focus-areas\/computing-law\/#primaryimage"},"image":{"@id":"https:\/\/itlawco.com\/focus-areas\/computing-law\/#primaryimage"},"thumbnailUrl":"https:\/\/itlawco.com\/wp-content\/uploads\/2025\/11\/computing-law_africa-hybrid-cloud-quantum-governance_itlawco_hero_v1.0-scaled.jpg","datePublished":"2025-11-25T20:14:16+00:00","dateModified":"2025-11-25T20:25:44+00:00","description":"Computing law for modern enterprises across Africa, the GCC and EU\/UK: ITLawCo governs cloud, hybrid, edge, serverless, DePIN and quantum environments with legal defensibility and global regulatory alignment.","breadcrumb":{"@id":"https:\/\/itlawco.com\/focus-areas\/computing-law\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/itlawco.com\/focus-areas\/computing-law\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/itlawco.com\/focus-areas\/computing-law\/#primaryimage","url":"https:\/\/itlawco.com\/wp-content\/uploads\/2025\/11\/computing-law_africa-hybrid-cloud-quantum-governance_itlawco_hero_v1.0-scaled.jpg","contentUrl":"https:\/\/itlawco.com\/wp-content\/uploads\/2025\/11\/computing-law_africa-hybrid-cloud-quantum-governance_itlawco_hero_v1.0-scaled.jpg","width":2560,"height":1429,"caption":"Multi-layered computing environments \u2014 from on-premise to cloud to quantum \u2014 governed with legal defensibility and regional sovereignty."},{"@type":"BreadcrumbList","@id":"https:\/\/itlawco.com\/focus-areas\/computing-law\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/itlawco.com\/"},{"@type":"ListItem","position":2,"name":"Focus areas","item":"https:\/\/itlawco.com\/focus-areas\/"},{"@type":"ListItem","position":3,"name":"Computing law"}]},{"@type":"WebSite","@id":"https:\/\/itlawco.com\/#website","url":"https:\/\/itlawco.com\/","name":"ITLawCo","description":"Rapide, sans peur, juridique","publisher":{"@id":"https:\/\/itlawco.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/itlawco.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/itlawco.com\/#organization","name":"ITLawCo","url":"https:\/\/itlawco.com\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/itlawco.com\/#\/schema\/logo\/image\/","url":"https:\/\/itlawco.com\/wp-content\/uploads\/2024\/06\/Logo-prsm@4x.png","contentUrl":"https:\/\/itlawco.com\/wp-content\/uploads\/2024\/06\/Logo-prsm@4x.png","width":2854,"height":2883,"caption":"ITLawCo"},"image":{"@id":"https:\/\/itlawco.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/itlawco\/"]}]}},"_links":{"self":[{"href":"https:\/\/itlawco.com\/fr\/wp-json\/wp\/v2\/pages\/3401","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/itlawco.com\/fr\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/itlawco.com\/fr\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/itlawco.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/itlawco.com\/fr\/wp-json\/wp\/v2\/comments?post=3401"}],"version-history":[{"count":7,"href":"https:\/\/itlawco.com\/fr\/wp-json\/wp\/v2\/pages\/3401\/revisions"}],"predecessor-version":[{"id":3411,"href":"https:\/\/itlawco.com\/fr\/wp-json\/wp\/v2\/pages\/3401\/revisions\/3411"}],"up":[{"embeddable":true,"href":"https:\/\/itlawco.com\/fr\/wp-json\/wp\/v2\/pages\/885"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/itlawco.com\/fr\/wp-json\/wp\/v2\/media\/3402"}],"wp:attachment":[{"href":"https:\/\/itlawco.com\/fr\/wp-json\/wp\/v2\/media?parent=3401"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}