In this talk, I place user-data at the center and explore the different considerations that need to be taken into account to keep the data safe, secure and private while giving the user control over their data. I also explore what custodians of user data can do to comply with the data regulations in effect where the user’s data resides. As I work for Google, it is natural for me to look at it from the perspective of cloud service providers. When humans use cloud services to improve their lives, they play unquestioning faith in their cloud service providers. We need to cherish this faith and never give our users a reason to lose it. Security, Privacy and Compliance are the three pillars around which the infrastructure to protect user-data needs to be built and continuously updated. I will talk about processes, procedures and policies that a cloud service provider can adopt to handle user-data properly and live up to the trust users place in us.