Human Errors Will Create Privacy Issues

Regardless of the technology you put in place, the safeguards you have implemented, and the training you have provided, ultimately the success of your privacy program relies on the individuals in your organization. The most recent example of this came at the expense of the US National Women’...

New Rules for Moving Data Across the Pond

Does your US organization do business in Europe? If so, the rules for collecting and moving the personal data of EU citizens across borders and into the US are about to change. A new EU regulation is taking shape under a tight deadline and intense pressure that will force changes to some common p...

EU-US Privacy Shield is coming. Now what?

There seems to be a light at the end of the tunnel for organizations previously exporting personal information from the EU to the US under Safe Harbor, the EU-US Privacy Shield. Unfortunately the details of Privacy Shield are not yet available, so what is a privacy officer to do to prepare for ut...

All Steamed Up

Earlier this month, Valve experienced an issue with data caching and what some call a data breach.  Valve is a gaming company famous for many titles, but also for their virtual storefront, Steam.  The short story is that Valve’s virtual storefront, known as Steam, had a glitch that allowed someon...

Three privacy thoughts to start 2016

Over the past few days I have been pondering everything that has happened in privacy in 2015 and the impact on organizations. My intent was to write a retrospective blog entry, but this morning I decided to look ahead and not in the rear-view mirror. So here are three thoughts to kickoff 2016.

Privacy Impact Assessments: Organization-specific or Generic PIAs

I recently had a conversation with a colleague about privacy impact assessments, PIAs, and the tools available to administer them. We quickly became philosophical, trying to weigh whether a generic tool would work or if something that is organization specific is necessary.

Information Underload

For the holidays, I bought my wife a Samsung Gear Fit.  She is training for a 10k run and a half marathon next year, so she wants to track her progress prepare for these events.  When the Gear Fit arrived in the mail, my wife asked that I set it up for her while she was […]

Police, Body Cameras, Privacy, and Policy

In the recent past a local police officer was involved in a shooting resulting in a citizen’s death. Soon after, the cry of “if only there was a body camera we would know what happened” was heard. I agree. However any police department needs to put policies in place to protect c...

Tis the Season

Data breaches seem almost ubiquitous in the past few years.  Companies such as Target, Home Depot, and recently Experian experienced breaches resulting in tens of millions of records being leaked.  There is more to these than just hackers or a single point of failure.  Many times, breaches are ca...

No Safe Harbor

It has been a very exciting and tumultuous October for privacy professionals.  The IAPP Privacy, Security, and Risk Conference in Las Vegas started the month, we had a breach of 15 million individuals, and Safe Harbor was struck down by the EU Court of Justice after the protest of an Austrian stu...