Excellent points! One possible development is 'self hosted clouds', using the technlogy that goes in to cloud architecture but run it on your own in-house or colocated hardware.

Most privacy policies would be hard to live up to anyway storing critical data in the 'cloud', so a large portion of business-it will always be hosted locally or on hardware controlled by the corporation whose responsibility it is to safeguard the data.