Cloud computing has become one the fastest growing areas in information technology (IT). This technology offers several benefits such as cost reduction, improving information and communication technologies (ICTs) to organizations as well as increased flexibility. Due to these features, several developed and developing countries, specifically African countries have adopted and are still adopting this technology. However, one of the biggest challenges in cloud computing is related to data security and privacy. This paper provides a concise analysis related to data security and privacy in the cloud computing environment. It also addresses recommendations provided by international organizations such as the National Institute of Standards and Telecommunications (NIST), International Telecommunication Union (ITU), and European Union Agency for Network and Information Security (ENISA) on security in cloud computing environment. In Mozambique, the government has been implementing cloud computing. However, currently, there is a lack of a framework for data security and data protection. Therefore, this paper proposes a framework for data security and data protection for Mozambican government cloud computing and other cloud computing providers.