Privacy Ref Blog by Tag

Tag "Legal Requirements" returned 13 posts


The value in personal information

Most of the broadcast news over the past few nights has understandably focused on Hurricane Sandy and the aftermath. However, it was another story that caught my attention because of the use of personal information by law enforcement. It reminded me that with all the privacy concerns we struggle over that there are times when the collection and use of personal information has a redeeming social (or consumer) value.
Continue reading this post…

Posted on November 1, 2012 by Bob Siegel - No Comments
Tags: , , ;

 


Having a privacy policy is just a start

Consumers, both business and individual, not only expect your organization to have a privacy policy, they also expect you to regularly train your staff, enforce the policy, and assess the overall health of the privacy program.. A company’s privacy policies, processes, and oversight reflect how the organization is responding to the responsibility of protecting personal information their customers have provided. Larger organizations have teams in place that ensure that the customers’ privacy expectations are met; for SMBs this can be a challenge.
Continue reading this post…

Posted on October 22, 2012 by Bob Siegel - No Comments
Tags: , , , , ;

 


Two reactions from customers to a data breach

TD Bank has notified their customers of a data breach through the  loss of a backup tape. Initial reports have said that the tapes contain  the account information and Social Security numbers of more than 267,000 customers on the US East Coast. The tape was not encrypted so, while the bank is unaware of any misuse of the information, anyone who does obtain the tape could easily read the information it contains.

I was with some TD Bank customers the day the data breach was acknowledged. There were two comments made that I hear anytime a breach occurs so I wanted to share them to help you protect your brand image in the event of a data loss.
Continue reading this post…

Posted on October 16, 2012 by Bob Siegel - No Comments
Tags: , , , ;

 


« Previous Page

Subscribe to our mailing list

Please fill out the form below.

Required

Want to find out more?

Simply go to the contact page, fill out the form, and someone from Privacy Ref will be in touch with you. You can also send an email to info@privacyref.com or call (888) 470-1528.

News

April 16, 2018

IAPP Training Classes
Privacy Ref is proud to announce that we are an official training partner of the IAPP. You now have the opportunity to learn from one of our knowledgeable privacy professionals using the most respected training content in the industry. The robust interactive training offered, aids in the understanding of critical privacy concepts. The contents of the courses are integral to obtaining your privacy certifications and to educate your new team. Learn more here.

Latest Blog Posts

July 9, 2018

Don’t Forget Basic Communication
Most of us have been wrapped up in GDPR preparations for several months. While there are many organizations "not quite there yet", many others have made great strides towards compliance. As we continue to do assessments for clients, both GDPR and General Privacy,  I have been surprised at the frequency of the gap between a privacy official describing their organization's data subjects, information collected, and business processes  with the reality of what is happening. Continue reading this post...

California – The Next GDPR?
Starting January 1, 2020, if you are a for-profit company doing business in California, you may have new data privacy compliance obligations. Specifically, California just enacted the California Consumer Privacy Act of 2018 (the country’s strictest data privacy law to date), placing new privacy mandates on certain businesses with respect to the personal information of consumers (defined as natural persons who are California residents). Many aspects of the new law smack of EU-GDPR influences, such as a new and improved (in other words, broader) definition of personal information and the inclusion of guaranteed consumer rights with respect to such personal information. If your business is already in compliance with the EU’s GDPR, the California law will be nothing new to you. For other businesses, however, you have 18 months to get with the program. Continue reading this post...

Other Recent Posts

PRIVACY REF