Several state and local law enforcement agencies have decided to share information about traffic violations within their state by using a new search application. The state has policies around limiting

Deploying to a public cloud and establishing connections to private clouds might still raise concerns about PII exposure in the public cloud environment and could be complex to manage for multiple agencies, potentially increasing compliance risk.

Having each local agency publish data to a single public cloud account increases the risk of PII exposure and makes it challenging to enforce granular state-level policies across disparate data sources.

Deploying the application in each local agency's private cloud would lead to multiple, disparate instances of the application and data silos, making information sharing inefficient, difficult to manage, and challenging to maintain consistent PII compliance across all instances.

Deploying the application in the state's shared cloud environment, often a community cloud model, provides a centralized, controlled, and trusted platform that can consistently enforce state-level PII policies. Creating federation between the agencies allows for secure identity management and controlled access to the shared application and data, ensuring compliance and limiting PII exposure through controlled authentication and authorization mechanisms.