Which regulation restricts the government from forcing a cloud service provider to disclose customer data?

The Stored Communications Act (SCA) restricts the government’s ability to force a cloud service provider to disclose customer data. Managing Cloud guidance explains that the SCA establishes legal protections for stored electronic communications and customer records held by service providers.

The act defines conditions under which government entities may request access to stored data, requiring appropriate legal processes such as warrants or court orders. This provides a level of privacy protection for cloud customers and limits unauthorized or excessive disclosure.

GLBA focuses on financial data, SOX addresses corporate governance, and ECPA is broader legislation that includes the SCA but does not directly define cloud disclosure limitations on its own. Therefore, SCA is the correct answer.