[dimask]

Not at all for universities I would say, at least in EU, but maybe here there is just more care in general put into privacy issues and where the data is stored.

But in general it is a trend that IT services are outsourced and that IT departments, and in general administration, in many universities suffer cuts, which is really bad. Apart from the problems this causes, imo this also pauses a security risk as if people's needs are not well covered by services provided, people will find their own solutions without knowledge or consideration to security.