Several state and local law enforcement agencies have decided to share information about traffic violations within their state by using a new search application. The state has policies around…

Connecting local agency networks to a public cloud introduces a third-party infrastructure provider into the data path, which may not satisfy government PII compliance mandates that require tighter control over where sensitive data resides.

Publishing agency data to a shared public cloud account exposes PII to a multi-tenant public environment without the governance controls needed to enforce the state's data protection policies.

Deploying a separate application instance in each local agency's private cloud fragments data and duplicates infrastructure, making it technically difficult to centrally enforce the state's uniform PII policies across all agencies.

Deploying in a shared state cloud environment creates a community cloud model where PII policies can be defined and enforced centrally by the state. Federation allows each local agency to authenticate using its own identity provider while access controls restrict which data each agency can reach, satisfying both the sharing requirement and PII compliance obligations.