An interesting point about ransomware was made to me after my most recent quarterly breach webinar. Essentially, the statement noted that ransomware is a not the same as a data breach. While this is technically true for the most part, there is enough relevant overlap in the implications of other “not quite breaches” to justify […]
Databreach or Ransomware? Read More »
COVID is not over, but life is returning to what is being called \”normal\”. I\’m looking forward to traveling, seeing my family, eating in restaurants, going to the movies, and returning to working with people face-to-face. Professionally, I miss teaching in person.
In person training is back! Read More »
A simple trip to your local coffee shop or visit to their website to browse or place a pick-up order can lead to divulging more personal information than you may have intended. Starting an account, signing up for a rewards program or simply completing a transaction will have you literally giving away your first and
How much personal data did your cup of coffee cost you today? Read More »
Every day I speak with clients about a number of different privacy related matters. However, the one that has become most prominent is setting up or running privacy impact assessments. PIAs are a tool used to identify the potential privacy risk from any existing or proposed activity, product, system. The end goal is then mitigating
Making Privacy Impact Assessments less of a PIA Read More »
Married to a Privacy Professional has made me aware of things that I would not normally pay attention to. Awareness of who I am giving my information to and what it is going to be used for is something that I am trying to be more cognizant of. When the boys were growing up, our
Living with a Privacy Professional Read More »
One of my biggest personal gripes is the use of excessive jargon when creating privacy policies. It can be readily apparent when a notice or policy, or even a law, is written by a privacy or legal professional but not written for the audience it targets. However, it is possible to create a more effective
Excessive Jargon and Legalese Read More »
Developing a privacy program for any organization is a daunting task. You need to be aware of your organization\’s information requirements, be aware of the applicable laws and regulations, be culturally sensitive, be a strategist, be a teacher, be a leader, be a communicator, and much more. Leveraging successful, proven approaches to developing the privacy
Choosing a privacy framework Read More »
Privacy policies have become fairly standard items on company websites. There is much valuable information provided and we really want users of our website to understand what we have written. Since most people do not eagerly read every word of any article or document, it is key to allow them to easily scan documents to
How to help people understand your Privacy Policy Read More »
Back in August 2019 the Data Protection Commission examined about 40 of the best known organizations’ websites across different industries. The purpose was to gauge compliance with current regulations regarding cookies and tracking technologies. A small group of organizations fared rather well but mostly the process identified the amount of work still left to be
Cookies with consent, not milk Read More »
\”Consent\” is defined as any freely given, specific, informed and unambiguous indication of the consumer\’s wishes he or she, or his or her legal guardian, by a person who has power of attorney or is acting as a conservator for the consumer, such as by a statement or by a clear affirmative action, signifies agreement
CPRA: New Definition of Consent Read More »
