As we work with clients to prepare them for GDPR we deeply dive into data subjects\’ rights. When we cover the right to erasure, the same question comes up, \”what about backups?\”
GDPR, the right to erasure, and backups Read More »
After a long trip from the northeast to San Diego, I finally made it to another exciting Privacy, Security, and Risk Conference from the IAPP. With GDPR on the horizon, the air was thick with discussion of this regulation in effect in May of next year. Even more so, a lot of questions received at
PSR 2017 in Review Read More »
I spend a lot of time facilitating privacy training. Whether it is directly for our clients or on behalf of the IAPP or their training partners, there are common elements to a successful educational event.
The key to effective privacy training Read More »
Recently, I had dinner with a colleague that I had not seen in several years. Their company, a multinational with global operations, had undergone several changes in that time. When the dust settled, this friend had been tapped as \”privacy manager\”. Along with corporate counsel (part time for privacy), they decided that, even under GDPR,
Burying your head in the sand won\’t make Data Protection requirements go away Read More »
There is a saying that you can have security without privacy, but you cannot have privacy without security. While privacy and security are both concerned with the protection of information held by an organization, security provides the means to meet the business requirements identified to meet privacy demands from regulators, customers, employees, and other stakeholders.
Privacy Ref and CyberDefenses Bring Privacy and Security Together Read More »
Over the past several months, I have been taking a deeper dive into GDPR. I have found Article 6 on the legal basis for processing data particularly interesting. There is some discussion to be had for each company and how they will process data in a particular case, but I often hear that consent will
Can Consent Fall Short in GDPR? Read More »
The General Data Privacy Regulations, GDPR, are less than a year away. Businesses around the world actively participating in the markets of the European Union are scrambling to comply with the new law. We at Privacy Ref have been looking at how to best assess an organization’s readiness for compliance with the different articles of
How Privacy Ref is getting GDPR Ready Read More »
You may be interested in how Wells Fargo has been handling the fallout from their recent scandal. The summary of the incident is that sales personnel at Wells Fargo were so pressured to meet numbers that they created fake accounts using real consumer information. The practice was rampant at the company. After being fined just
With the IAPP Privacy Summit less than a month away, it is time to start planning what you will be doing there. If you are going to the Summit this year, there are a large number of sessions, speakers, and exhibitors for you to check out and learn from. This stands alone from the thousands
Planning for Summit 2017 Read More »
In recent weeks, leaks have been at the forefront of news. This is mostly in a political spectrum, but it illustrates the importance of managing how information flows through an organization. There have been examples other than those coming from the White House though. Being non-political in nature, they have different consequences and lessons to
