Privacy Ref Blog by Tag

Tag "Consent" returned 13 posts


Can Consent Fall Short in GDPR?

Over the past several months, I have been taking a deeper dive into GDPR. I have found Article 6 on the legal basis for processing data particularly interesting. There is some discussion to be had for each company and how they will process data in a particular case, but I often hear that consent will be used. I have even heard arguments for consent as a catch-all for processing. This ignores the pitfalls that could come with the use of that certain legal basis. Continue reading this post…

Posted on August 14, 2017 by Ben Siegel - No Comments
Tags: , , , ;

 


Police, Body Cameras, Privacy, and Policy

In the recent past a local police officer was involved in a shooting resulting in a citizen’s death. Soon after, the cry of “if only there was a body camera we would know what happened” was heard. I agree. However any police department needs to put policies in place to protect citizens’ privacy when cameras are used. Similarly, businesses using monitoring technologies need to put policies in place as well.
Continue reading this post…

Posted on October 29, 2015 by Bob Siegel - No Comments
Tags: , , , , ;

 


Tom Brady, Joe Namath, and Privacy

Like many Americans I grew up idolizing football players, quarterbacks in particular. Joe Namath and Tom Brady are among those I have enjoyed watching play. Who would of thought that these two men who played in different eras would provide examples for a privacy discussion for business.
Continue reading this post…

Posted on August 12, 2015 by Bob Siegel - No Comments
Tags: , , , , ;

 


Radio Shack’s Privacy Notice Oversight

rshacklogoGrowing up I spent a good amount of time at Radio Shack. I liked to “play” with electronics just to understand how things worked. It always bothered me that they asked for my zip code for every transaction, but they still got my money. That may be in part why I became a privacy professional.

I continued to visit the chain in recent years, mostly for batteries and replacement parts. How was I to know that, in spite of their privacy notice, Radio Shack would eventually try to sell my personal information during their bankruptcy. Continue reading this post…

Posted on March 26, 2015 by Bob Siegel - No Comments
Tags: , , ;

 


Business and wearable technology

Over the past few weeks I have been wearing my Google Glass in public. The experiences have been invaluable to my understanding of the privacy implications of wearable technology. Lately I have been giving some thought to the business policy challenges the technology presents. Continue reading this post…

Posted on February 17, 2014 by Bob Siegel - No Comments
Tags: , , , , ;

 


A Privacy Pro and Wearable Technology

Privacy professionals, including myself, have been warning of the dangers to privacy from wearable technology. The concerns I have been expressing have been based on reported product capabilities, anecdotal evidence, and published reports. So when I had the opportunity to join the Google Glass Explorer program, I jumped at the chance.
Continue reading this post…

Posted on December 22, 2013 by Bob Siegel - No Comments
Tags: , , , , , ;

 


Assess risk prior to collecting personal information

My saga of finding new doctors continued over the last few weeks. With each visit I continue to gain insight into privacy risks unknowingly being taken by small businesses. My experience tells me larger business make similar mistakes. This time the doctor collected unneeded personal information from many of his patients, but he did a risk assessment first. Continue reading this post…

Posted on October 3, 2013 by Bob Siegel - No Comments
Tags: , , ;

 


Privacy and the Cloud

Cloud computing provides an opportunity for businesses to lower costs and increase their computing infrastructure’s flexibility. When utilizing a cloud service provider for additional storage, computing power, or a full application you should look into the privacy implications as these are multidimensional. Continue reading this post…

Posted on June 5, 2013 by Bob Siegel - No Comments
Tags: , , , , ;

 


Valuable functionality can cause a privacy breach

Last Friday it was revealed that reporters from Bloomberg News could retrieve information from the profiles of subscribers to Bloomberg’s data terminals as well as the subscribers’ system usage (NYT article here). While I agree with the characterization of this incident as a “mistake”, wasn’t this really a violation of basic privacy principles?
Continue reading this post…

Posted on May 12, 2013 by Bob Siegel - No Comments
Tags: , , , , , ;

 


Emerging technology, privacy, and your business

Google Glass has sparked a wide ranging discussion about the product’s potential  impact on privacy. The conversations I have seen have mostly focused on the impact to the existence of privacy in our technology-dependent world, but I have seen only limited discussion on the impact to a business. It would be nice for businesses to be proactive in considering policies for emerging  technology instead of reacting as things evolve. Continue reading this post…

Posted on March 24, 2013 by Bob Siegel - No Comments
Tags: , , , ;

 


Next Page »

Subscribe to our mailing list

Please fill out the form below.

Required

Want to find out more?

Simply go to the contact page, fill out the form, and someone from Privacy Ref will be in touch with you. You can also send an email to info@privacyref.com or call (888) 470-1528.

News

May 10, 2017

Predictive Breach Cost Model
Download our predictive breach cost modelhere.

Latest Blog Posts

September 18, 2017

Burying your head in the sand won’t make Data Protection requirements go away
Recently, I had dinner with  a colleague that I had not seen in several years. Their company, a multinational with global operations, had undergone several changes in that time. When the dust settled, this friend had been tapped as "privacy manager". Along with corporate counsel (part time for privacy), they decided that, even under GDPR, they did not need a Privacy / Data Protection Officer . Huh? Continue reading this post...

August 14, 2017

Privacy Ref and CyberDefenses Bring Privacy and Security Together
There is a saying that you can have security without privacy, but you cannot have privacy without security. While privacy and security are both concerned with the protection of information held by an organization, security provides the means to meet the business requirements identified to meet privacy demands from regulators, customers, employees, and other stakeholders. Privacy Ref works with our clients to improve their business and operational practices for protecting personal information. Increasingly our clients’ have been looking for services to supplement their security practices, tools, and expertise. CyberDefenses fills this role. Continue reading this post...

Other Recent Posts

PRIVACY REF