FTC Seeks Comment on Business Practices of Cloud Computing Providers
ftc.gov
ftc.gov
Now the means in which companies get off pretty much with no retribution for security carelessness is a problem, but I don't know why the FTC would only take the cloud provider angle. Punishments for reckless handling of user data should be more severe regardless of whether a company decides to use the cloud or not.