Cloud Infrastructure & Privacy In Social Media

Cloud infrastructure has become a foundational layer of social-media platforms, enabling elastic computation, distributed storage, global delivery, analytics, and rapid product development. These capabilities also create a complex privacy environment in which information can be copied, processed, correlated, and shared across many services. Privacy risks therefore arise not only from external attackers but also from excessive collection, broad internal access, misconfiguration, secondary use, third-party integration, profiling, and uncontrolled retention. The review shows that effective privacy protection requires more than encryption. Data minimization, purpose limitation, least-privilege access, strong identity controls, protected storage, controlled APIs, privacy-aware logging, retention automation, deletion workflows, and governance must work together. Privacy-preserving techniques such as anonymization, tokenization, differential privacy, federated learning, and cryptographic approaches can reduce specific risks, but each introduces trade-offs that must be evaluated in context. The proposed layered framework connects the social-media data lifecycle with cloud infrastructure controls and governance. Its core principle is to minimize unnecessary data, constrain every access path, protect information during storage and processing, control external sharing, monitor data movement, and make retention and deletion enforceable. This approach is consistent with risk-based privacy management and can be adapted to different cloud deployment models. Overall, privacy in social media should be treated as an engineering property that is continuously designed, measured, audited, and improved. Cloud scalability should not be allowed to become unlimited data accessibility. The objective is a cloud architecture in which useful social-media functionality can coexist with clear privacy boundaries, accountable processing, and meaningful user control.

[1] P. Mell and T. Grance, “The NIST Definition of Cloud Computing,” NIST Special Publication 800-145, National Institute of Standards and Technology, 2011. DOI: [2]W. Jansen and T. Grance, “Guidelines on Security and Privacy in Public Cloud Computing,” NIST Special Publication 800-144, National Institute of Standards and Technology, 2011. DOI: 10.6028/NIST.SP.800-144. [3]A. K. Jain, S. R. Sahoo, and J. Kaubiyal, “Online social networks security and privacy: comprehensive review and analysis,” Complex & Intelligent Systems, vol. 7, pp. 2157–2177, 2021. DOI: 10.1007/s40747-021-00409-7. [4] A. Cavoukian, “Privacy in the clouds,” Identity in the Information Society, vol. 1, pp. 89–108, 2008. DOI: 5] S. De Capitani di Vimercati, S. Foresti, and P. Samarati, “Protecting Data and Queries in Cloud-Based Scenarios,” SN Computer Science, vol. 4, article 440, 2023. DOI: [6]M. A. Khan et al., “Data Privacy Protection Mechanisms in Cloud,” Data Science and Engineering, vol. 3, pp. 24–39, 2018. DOI: 10.1007/s41019-017-0046-0. [7] N. Naikwade, S. Pathan, and P. Dhotre, “Cost efficient storage and swift time-bound access revocation using attribute-based encryption in untrusted cloud environments,” Journal of Cloud Computing, 2026. DOI: [8]“A decision support framework for privacy risk assessment on social media through automated personally identifiable information detection,” Decision Support Systems, 2026, article 114752. DOI: 10.1016/j.dss.2026.114752. [9] Government of India, “The Digital Personal Data Protection Act, 2023,” Act No. 22 of 2023, India Code, 2023. [10] K. Boeckl and N. Lefkovitz, “NIST Privacy Framework: A Tool for Improving Privacy through Enterprise Risk Management, Version 1.0,” NIST CSWP 10, National Institute of Standards and Technology, 2020. [11]  P. J. Wisniewski, B. P. Knijnenburg, and H. R. Lipford, “Making privacy personal: Profiling social network users to inform privacy education and nudging,” International Journal of Human-Computer Studies, vol. 98, pp. 95–108, 2017. DOI: [12]S. Flowerday, J. Mead, and R. Moquin, “Bound to disclosure: An assessment of secondary data use concerns,” International Journal of Information Management, vol. 87, article 103026, 2026. DOI: 10.1016/j.ijinfomgt.2025.103026.