Cloud computing evolved as a key delivery model for Information Technology (IT) and data provision for both the private and public sectors. Addressing its governance, legal, and public policy aspects is a condition sine qua non for successful deployment, whether done by the in-house IT department or outsourced. Stakeholders ask for new applications that consumerization is providing. Therefore, IT governance should be adapted to consider this new business pressure. However, the law plays a double role in respect to cloud computing; it functions as a legal framework set by mandatory regulations and as a contractual instrument to manage the cloud technology and information provisioning in an effective way, based on the strategic objectives of any organization. This chapter is devoted to where IT governance frameworks should consider the decisions about specific cloud computing compliance, how to measure them through several indicators, and which are their general legal and public policy aspects.