A few weeks ago, I was auditing a CIPP/US class that Bob Siegel was teaching on behalf of the IAPP. Someone brought up the idea of openness and allowing individuals access to the data you have about them. At this point, Bob discussed the principles behind this, such as how the OECD Guidelines approach it. […]
Facebook knows a lot Read More »
Recently, a large number of YouTubers and other celebrities have been “hacked” or lost control of their accounts. The truth of the matter is that they aren’t being hacked, but instead the person taking control of these accounts is just having others do it for them. The people and groups helping them are not who
Social Engineering is a Massive Problem Read More »
If you attended our most recent quarterly data breach review, you probably heard a new term: “metagame.” The idea, put in its simplest form, is to take information from outside a scenario and use it to influence your choices. It is amazing how using information that is not necessarily inside your environment can allow you
Playing the Privacy Metagame Read More »
One question that I am frequently asked is “what is the difference between privacy and security?” It sounds simple enough, but the response often gets complicated. Maybe an analogy will help.
What is the difference between privacy and security? Read More »
Throughout my years in IT, product management, software development, and systems analysis, my Mother never understood what I do. It hasn\’t been her fault, but mine; I couldn\’t explain in \”plain English\” what I did. Since becoming a privacy professional she now understands. It may be not as good as being a doctor, but at
My Mother Understands Read More »
Irony is a state of affairs or an event that seems deliberately contrary to what one expects and is often amusing as a result. So when I got a phone call asking to speak with Bob Siegel about his room for the upcoming IAPP Summit, I was surprised by the ironic situation I was faced
Don\’t Take the Bait Read More »
Very common questions we get from clients are how much information should they collect and how long they should keep it. The standard answer is always to collect only what you need to do business and get rid of it when you no longer need it. Now the questions become what information is truly needed
Data Ages like Milk… Read More »
Regardless of the technology you put in place, the safeguards you have implemented, and the training you have provided, ultimately the success of your privacy program relies on the individuals in your organization. The most recent example of this came at the expense of the US National Women\’s Soccer Team (USWNT).
Human Errors Will Create Privacy Issues Read More »
Does your US organization do business in Europe? If so, the rules for collecting and moving the personal data of EU citizens across borders and into the US are about to change. A new EU regulation is taking shape under a tight deadline and intense pressure that will force changes to some common practices in
New Rules for Moving Data Across the Pond Read More »
There seems to be a light at the end of the tunnel for organizations previously exporting personal information from the EU to the US under Safe Harbor, the EU-US Privacy Shield. Unfortunately the details of Privacy Shield are not yet available, so what is a privacy officer to do to prepare for utilizing the new agreement?
EU-US Privacy Shield is coming. Now what? Read More »
