Employee data and the cloud: What HR leaders need to know

Business in the Cloud

No Recirculation Modules

no-nativo

no-outbrain

Brit Morse

Today, <a href="https://fortune.com/article/health-care-providers-cloud-technology/">cloud technology</a> is used across many aspects of business, which makes it easier for companies to <a href="https://fortune.com/article/3-ways-to-use-the-cloud-other-than-ai-streaming-healthcare-finances/">maintain processes</a> as they scale.&nbsp;<div class="paywall-selector"></div><div class="paywall">



“The reality is that every organization today is using the cloud,” says Adam Meyers, senior vice president of counter-adversary operations at CrowdStrike. “They&#8217;re doing it for cost savings or for efficiency, and they&#8217;re doing it because it&#8217;s the only way to actually scale things.”



But as he points out, there are also risks of doing so. New cloud intrusions increased 25% in 2024 compared to 2023, according to a recent <a href="https://www.crowdstrike.com/en-us/global-threat-report/" data-type="link" data-id="https://www.crowdstrike.com/en-us/global-threat-report/">report</a> from CrowdStrike, which means more threat actors are looking to exploit cloud services. They can do this by sourcing valid credentials like employee ID and password to log into a cloud provider and then navigating the system to either locate critical information or deploy malware, Meyers notes.



This means companies today must consider what kind of data is put in the cloud, and this includes what kind of employee information HR leaders share with their cloud vendors.



While many organizations spend a tremendous amount of time thinking about how to protect their customer data, as there are many regulations around it, they don’t spend enough time thinking about how to protect employee data, Kim Seals, senior partner at West Monroe, a business technology consulting firm, tells Fortune.



“HR teams may have a third-party vendor that they&#8217;re sharing people-related data with that they have not put as much scrutiny on as they would have any third-party application that had their customer data,” she says. “And sometimes that’s due to HR not getting as much enterprise tech support as the business side.”



This leads many companies to make mistakes when it comes to sharing employee information with their vendors, including sharing more than necessary. That’s because companies often rely on a single internal census of employee data that they send out to all vendors, like a giant spreadsheet, for instance, and will send over the entire thing for vendors to peruse. While this strategy is certainly easier, it’s not the right one, Seals notes.&nbsp;



“HR teams will often create one sort of generic interface file that has everything on it and every vendor gets that same file,” she says. “But what they really should be doing is going to each vendor and ask ‘What do you really need?’”



While it may take more time, HR leaders should look harder at exactly what each vendor requires and only share the “minimum amount of information about people required to get them to provide their service.” For example, a vendor that manages paid-time off and vacation days may not need specific personal data around employee ages or location.&nbsp;



That data should also come into consideration when vendor contracts are up for renewal, she says. Companies should be regularly looking into the reputation of their cloud vendors, and if they’ve had to report any leaks publicly or had any security issues that have come up in the last year. They should also look into whether the data is being encrypted (both when it&#8217;s in transit and at rest) and whether the vendors have the right access controls and identity management systems to ensure only certain people are accessing it, she adds. That should be the “standard practice,” if too daunting, may require some assistance.



“HR has become and will continue to become more tech savvy, but they still need the support of enterprise tech to do some of these audits and to make sure these vendors are compliant, at the bare minimum.”</div>

Companies are increasingly relying on a number of vendors that put employee data in the cloud, and should be careful about doing so.

Did your workplace make our list of the 100 Best Companies to Work For?
<a href="https://fortune.com/ranking/best-companies/?&itm_source=fortune&itm_medium=article_tout&itm_campaign=AprMayMag">Explore this year's list.</a>

F-Search

Tech

Employee data and the cloud: What HR leaders need to know | Fortune

Marco Quiroz-Gutierrez

Before he revolutionized tech with Steve Jobs, Jony Ive wanted to quit Apple. Now he’s forging a new power pair with OpenAI’s Sam Altman

/2025/05/25/jony-ive-steve-jobs-apple-tech-silicon-valley-open-ai-sam-altman/

Paige McGlauflin

HR Brew

Insurance giant Progressive is hiring 12,000 workers this year—and it’s using AI to parse through hundreds of thousands of applications

/2025/05/25/insurance-giant-progressive-is-hiring-12000-workers-this-year-and-its-using-ai-to-parse-through-hundreds-of-thousands-of-applications/

Charles Daly

Bloomberg

Nvidia and Wallenberg businesses starting AI venture in Sweden

/2025/05/24/nvidia-wallenberg-businesses-ai-supercomputer-sweden-jensen-huang/

Irina Ivanova

Duolingo CEO walks back AI-first comments: ‘I do not see AI as replacing what our employees do’ 

/2025/05/24/duolingo-ai-first-employees-ceo-luis-von-ahn/

Steve Mollman

Salesforce exec says rise of AI agents means ‘every job should be rethought’

/2025/05/23/ai-agents-rethinking-jobs/

Mike Schneider

The Associated Press

Elon Musk’s DOGE is reportedly targeting the Census Bureau next. One expert says it’s likely to eliminate its survey about prison inmates

/2025/05/23/elon-musk-doge-targeting-census-bureau/

Emma Burleigh

Hundreds of billionaires pledged to give away $600 billion to charity—but the Bill Gates and Warren Buffett era of philanthropy may be over

https://fortune.com/2025/05/24/gates-buffett-philanthropy-new-era-of-giving-women-french-gates-mackenzie-scott/?itm_source=parsely-api

Jason Ma

Jerome Powell tells Princeton grads not to take universities for granted and that 'integrity is all we have—guard it carefully'

https://fortune.com/2025/05/25/jerome-powell-princeton-commencement-speech-universities-trump-harvard-integrity-fed-rates/?itm_source=parsely-api

Dairy Queen CEO says he learned from Warren Buffett that being the 'smartest person in the world' isn't the most important attribute for success

https://fortune.com/2025/05/21/dairy-queen-ceo-warren-buffett-advice-job-interview-passion-intelligence/?itm_source=parsely-api

Alan Suderman

15 years ago, a software developer paid for two pizzas with 10,000 bitcoin. Those pies would be worth $1.1 billion today

https://fortune.com/article/pizza-bitcoin-day-story-laszlo-hanyecz-papa-johns-pizzas-value/?itm_source=parsely-api

Preston Fore

Shark Tank's newest star gives Gen Z grads a reality check—that they need to 'wake up earlier and stay up later' to achieve their dreams

https://fortune.com/2025/05/23/billionaire-kind-founder-daniel-lubetzky-gen-z-college-graduate-advice-shark-tank-boomers/?itm_source=parsely-api

There's a 'buyer's strike' on U.S. assets as foreign investors can't stomach huge deficits anymore, analyst warns

https://fortune.com/2025/05/24/debt-crisis-foreign-buyers-strike-us-assets-deficits-treasury-bonds-dollar-selloff/?itm_source=parsely-api