Download as PDF, PPTX
Uploaded byChristina Gagnier
ABC's of Privacy and Security
The document outlines the concepts of privacy and personally identifiable information (PII), including the significance of sensitive PII and various privacy laws such as the Children’s Online Privacy Protection Act. It provides a seven-step framework for privacy management that includes assessing, planning, drafting, implementing, disclosing, growing, and revisiting privacy practices. Additionally, it highlights general privacy tips and the importance of compliance with both national and international regulations.
More Related Content
Similar to ABC's of Privacy and Security
![[Webinar Slides] Data Privacy for the IM Practitioner - Practical Advice for ...](https://cdn.slidesharecdn.com/ss_thumbnails/dataprivacyfortheimpractitioner-200227185912-thumbnail.jpg?width=640&height=640&fit=bounds)
ABC's of Privacy and Security
- 1. THE ABC’s of PRIVACY& SECURITY
- 2.
- 3.
- 6.
- 7. “Personally identifiable information”is information that identifies a particular person. “Pii” includes: ! • • • • • • • • • • • • • Full name; National identification number; IP address; Vehicle registration plate number; Driver’s license number; Face; Fingerprints; Handwriting; Credit card numbers; Digital identity; Date of birth; Birthplace; and Genetic information.
- 8. Sensitive PII ! • • • • • • • • Information onMedical or Health Condition; Financial Information; Racial or Ethnic Origin; Political Opinion; Religious or Philosophical Beliefs; Trade Union Membership; Sexual Preference; and Information Related to Criminal Offenses or Convictions.
- 9. Digital Data Privacylaw is complicated.
- 10. Nationwide legislation isindustry specific.
- 11. General Accepted PrivacyPrinciples (GAPPs)
- 12. General Accepted PrivacyPrinciples (GAPPs) ! 1. Notice 2. Consent 3. Use, Retention and Disposal 4. Monitoring and Enforcement
- 13. California ! Do Not Track ! DataBreach Notification ! No Surprises Approach to Mobile from the AG’s Office ! Digital “Eraser” Law for Minors ! ! ! ! !
- 14. privacy law abroad. internationalcompliance.
- 15. Main Principles ofthe EU-US Safe Harbor ! 1. Notice 2. Choice 3. Onward Transfer 4. Access 5. Security 6. Data Integrity 7. Enforcement
- 16. kidz online. yes, differentrules apply.
- 17. Children’s Online PrivacyProtection Act ! Requires websites to get parental consent before collecting or sharing info for children under 13. ! Enforced by the Federal Trade Commission. ! Applies to commercial websites and other online services. ! ! !
- 18. getting prepped Privacy Managementin Seven Steps
- 19. Seven Steps forPrivacy Management ! 1. 2. 3. 4. 5. 6. 7. Assess Plan Draft Implement Disclose Grow Rinse & Repeat ! ! ! !
- 20. Seven Steps forPrivacy Management ! Assess ! ! ! !
- 21. Conducting an assessmenton privacy and data security.
- 22.
- 23. Seven Steps forPrivacy Management ! Plan ! ! ! !
- 24. Seven Steps forPrivacy Management ! Draft ! ! ! !
- 25. What Your PrivacyPolicy Should Say ! ! ! !
- 26. What Your PrivacyPolicy Should Say ! How Data is Collected and Stored ! !
- 27. What Your PrivacyPolicy Should Say ! Choice & Consent ! !
- 28. What Your PrivacyPolicy Should Say ! Data Retention ! !
- 29. What Your PrivacyPolicy Should Say ! Redress of Grievances ! !
- 30. What Your PrivacyPolicy Should Say ! Mobile Application Disclosure & Disclaimer ! !
- 31. Seven Steps forPrivacy Management ! Implement ! ! ! !
- 32. What Your TeamShould Know ! Where the Privacy Policy is located ! !
- 33. What They ShouldKnow ! What kind of data you should collect ! !
- 34. What They ShouldKnow ! How to handle basic customer privacy concerns ! !
- 35. Seven Steps forPrivacy Management ! Disclose ! ! ! !
- 36. Seven Steps forPrivacy Management ! Grow ! ! ! !
- 37. Seven Steps forPrivacy Management ! Rinse & Repeat ! ! ! !
- 38. Avoiding the “Oh,crap.” General Privacy Tips
- 39. Where Trouble Arises ! Failingto respond to a complaint from the public !
- 40. Where Trouble Arises ! Don’tover-promise !
- 41. Where Trouble Arises ! Whenin doubt, talk to your risk management or legal teams
- 42. Where Trouble Arises ! Appropriateaccount access minimizes liability
- 43. Where Trouble Arises ! Usecommon sense
- 45. We just scratchedthe surface.
- 46.
- 47.
- 48. THE ABC’s of PRIVACY& SECURITY