Sometimes my mind wanders and I relate what is happening around me to privacy-related situations. Often our team undertakes assessments for our clients privacy programs and we encounter a number of unexpected, and sometimes surprising findings. One situation we often find is that privacy program establishes one or more policies that are not being followed […]
The need to verify Policy Compliance Read More »
Thoughts after the IAPP Global Privacy Summit The 2025 IAPP Global Privacy Summit confirmed what many of us in the industry already recognize: privacy has evolved from a compliance function into a strategic business priority. As someone who had the privilege of teaching Privacy Program Management for the CIPM (Certified Information Privacy Manager) designation at
Thoughts after the IAPP GPS Read More »
The regulatory landscape for privacy is getting more complex and comprehensive. We are seeing small and mid-size organizations which were outside the scope of privacy legislation now becoming directly or indirectly pulled into complying with new regulations. Creating a privacy office can be an expensive endeavor for organizations of this size and in many cases
What is a Fractional Privacy Office? Read More »
With the introduction of new privacy laws, I frequently am asked “what do I need to do?” by business owners. Recently, the question is coming from SMB owners who are unclear if the emerging privacy laws apply to them. Looking at the laws For this discussion, let’s categorize the laws into those that apply to
Privacy and the SMBs Read More »
Several years ago, I wrote a pamphlet for the International Association of Privacy Professionals titled Six Ways Privacy Awareness Training Will Transform Your Staff . The impacts identified in that paper continue to ring true as evidenced by them being described in the current iteration of the IAPP’s Privacy Program Management course. These impacts include: It
Privacy Training Is (Still) Vitally Important Read More »
You\’ve created a data inventory, you\’ve mapped your processes, and researched the laws and regulations that are applicable to your business. Not surprisingly, there are some gaps between your practices and the legal requirements. Now what do you do?
Achieving Operational Compliance: Analyzing the Gaps Read More »
The privacy legal landscape is rapidly changing. Many jurisdictions are considering or are about to enforce new legislation for the protection of personal information with varying requirements. Once the laws are enacted, regulatory authorities than interpret the requirements which may impact what organizations must do to comply. Recognizing the passage and enforcement of a new
Achieving Operational Compliance: The Law is Just the Start Read More »
Recently I was invited to participate in a panel hosted by the World Bank during Data Privacy Week. In reflecting on the discussion, I began thinking about how people, including children, hear about protecting personal information and how that impacts an organization and its data subjects.
Who knows privacy? Read More »
One of the toughest jobs in any company is Customer Service. I am thinking of those folks who are on the phone for their entire shift responding to customer questions and, often, complaints. These unsung heroes have to balance keeping a customer satisfied and protecting the personal information collected by their organization.
The Customer Service Privacy Dilemma Read More »
The global coronavirus situation is having a major impact on all of our lives. Many of us have concerns with meeting in large groups, getting on an airplane or taking other public transportation, going to a restaurant, staying in a hotel, or simply sitting in a small meeting with people with whom we are not
Privacy Pro training online or in person Read More »
