How much does the cloud know about us? Should we care? In cloud computing, sensitive personal data flows in a global network of internet connected computers, creating attractive targets for hackers, challenging law enforcement and raising concerns about government surveillance. From an information privacy perspective, this article discusses how well the management information systems practices and laws in the United States and Europe protect the privacy and security of sensitive consumer data in the cloud. It examines policies and proposed regulations and makes suggestions for legal reforms in both jurisdictions to protect the privacy and security of sensitive information.