Is your organization “privacy aware”?

Every time I read the news it seems there is a new data breach impacting client or employee privacy.  Just last week UPS, Supervalu, Community Health Systems, North Dakota University, Shaw’s / Star Market  / Albertson’s, and Schnucks have all been mentioned in articles related to new ...

A First Timer’s Look at the 2014 IAPP Summit

As a first timer to the IAPP Summit, I have to say it was a great experience. I met with many privacy professionals and learned about some great ways others have dealt with their organizations privacy issues. The keynotes were exceptional and the different sessions I went to were extremely inform...

Three thoughts on recent privacy breaches

The end of 2013 has brought a flurry of privacy breaches, some big, some small, each with their own circumstances, each with their own implications. Here are three thoughts from the past few weeks.

Wearable technology is coming, but will anyone notice?

When I look through corporate handbooks I often find prohibitions on the use of cameras or recording devices while on a company’s premises. It’s not something that gets brought up in new hire orientation nor something that gets brought up very often at all. Let’s face it, there is a certain amoun...

Three thoughts for business from the NSA privacy incidents

Yesterday the Washington Post published an article  based on an audit dated May 2012 describing violations of privacy rules by the NSA. As I read the article three thoughts occurred to me that a business can take away for their own privacy program.

Valuable functionality can cause a privacy breach

Last Friday it was revealed that reporters from Bloomberg News could retrieve information from the profiles of subscribers to Bloomberg’s data terminals as well as the subscribers’ system usage (NYT article here). While I agree with the characterization of this incident as a “mi...

Fingerprints, privacy notice, and theme parks

My wife and I recently visited a major theme park and were surprised that our fingerprints were requested when we entered. While I understand the good business reason the fingerprints were requested, I remain dumbfounded why I could not find a privacy notice that disclosed how the information was...

Who is your staff friending?

Defining a social media policy is a difficult undertaking. It requires a balance of protecting your company’s privacy and restricting your employees’ online activities. When an employee friends a customer or vendor, a seemingly innocent post may result unintended consequences.

Mobile devices and business privacy

Before smartphones there were cameras. Businesses precluded the use of cameras within their premises by policy to protect intellectual property and privacy. Now, mobile devices have changed the rules (or at least bent them). Smartphones and tablets have become standard tools for our every day bus...

SMB privacy: no free pass

Like larger enterprises, small and medium businesses (SMBs) collect personal information about their customers, employees, vendors and other stakeholders; it is just part of doing business. Establishing an SMB privacy program would be very beneficial for these businesses, but for the majority of ...