presentation to lawyers and practicioners on e-mail monitoring
•Download as PPT, PDF•
0 likes•190 views
This document discusses different approaches to employee computer monitoring in the workplace. It outlines the traditional view that employees have no expectation of privacy since employers own the devices. However, more recent court cases have taken a balancing approach, requiring employers to have reasonable grounds for investigations. The "beyond control" view questions employer control over non-work records. The document concludes by suggesting options for employers, such as trying to control expectations through clear policies, or implementing privacy controls and investigation standards.
Report
Share
Report
Share
![Employee computer monitoring ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recommended
E-Mail as Evidence
This document discusses issues related to the admissibility and evidentiary weight of email in legal proceedings. It covers definitions of email and electronic messages, relevance of email evidence, access to and production of emails, privilege considerations, authentication requirements, and challenges posed by new communication technologies like social media and cloud computing. Case law examples are provided to illustrate how courts have addressed dealing with email as documentary evidence.
PPIT Lecture 4
The document discusses 9 cases involving ethical issues that computer professionals may face. It analyzes each case using principles from codes of ethics like the ACM code. The cases cover issues like privacy, conflicts of interest, software quality, discrimination, and unauthorized access. The analysis shows how ethics codes can help professionals balance competing factors to make ethical decisions, even in constrained situations. Leadership plays a key role by setting an ethical tone.
Osgoode pdp e discovery certificate slides
This document discusses policy issues organizations face regarding access to electronic information like emails and text messages. It addresses four main issues: employee privacy, bring your own device policies, use of social media, and cloud computing. Regarding employee privacy, the document states that policies should achieve transparency by notifying employees about an employer's right to access work devices and information. For bring your own devices, it argues policies need to ensure an organization can control and access work information on personal devices. When discussing social media, the focus should be on separating business and personal use. And for cloud computing, requirements like data access and storage must be clearly defined and agreed to with cloud providers.
Ethics and software engineering
The systems administrator at Company Y discovered child pornography on an employee's computer after installing software provided prematurely by Company X that was missing key functionality. The administrator reported the discovery to authorities but was ignored. This scenario involves principles of public interest, client/employer responsibilities, and whistleblowing duties. Analyzing the software engineering code of ethics provides guidance that the administrator should disclose what was found to protect the common good, despite the company policy violation, as possessing child pornography is illegal.
AoIR #15 Conference Sth Korea 2014
This document summarizes a PhD candidate's research on regulating social media in the workplace. The research aims to provide a framework balancing employee and employer interests, recommendations for law reform, and improve certainty. It discusses tensions between employee autonomy online and employer risk management. The methodology involves analyzing legal cases, social media policies, and developing a framework informed by boundary theory. The research so far indicates policies are sometimes too restrictive or broad, impacting work-life balance, and employers have an implied duty to ensure fair social media policies.
Social Media Can Not Be Ignored
A study was conducted through interviews with office workers and managers in the UK, US, Australia and Germany. It found that while 39% of employees felt their company encouraged social media use, 65% of companies claimed they did. There is a disconnect between company policies and employee perceptions. Over 80% of companies now mention social media and the internet during recruitment. While employees understand companies' security concerns about social media, companies tend to focus more on compliance and control in their security strategies. This approach may not work for allowing social media use. The document recommends that companies adopt a new approach to security that embraces flexible policies in order to gain the engagement benefits of social media while managing risks.
Employee issues and privacy
A one hour presentation to privacy lawyers on workplace privacy issues, including content on an employer's right of access to work system information and off-duty conduct issues.
Developing a plan for your imaging project
This presentation looks at what organizations on the path to paperlite need to do in the planning stage to ensure they reap the rewards of document imaging.
Recommended
E-Mail as Evidence
This document discusses issues related to the admissibility and evidentiary weight of email in legal proceedings. It covers definitions of email and electronic messages, relevance of email evidence, access to and production of emails, privilege considerations, authentication requirements, and challenges posed by new communication technologies like social media and cloud computing. Case law examples are provided to illustrate how courts have addressed dealing with email as documentary evidence.
PPIT Lecture 4
The document discusses 9 cases involving ethical issues that computer professionals may face. It analyzes each case using principles from codes of ethics like the ACM code. The cases cover issues like privacy, conflicts of interest, software quality, discrimination, and unauthorized access. The analysis shows how ethics codes can help professionals balance competing factors to make ethical decisions, even in constrained situations. Leadership plays a key role by setting an ethical tone.
Osgoode pdp e discovery certificate slides
This document discusses policy issues organizations face regarding access to electronic information like emails and text messages. It addresses four main issues: employee privacy, bring your own device policies, use of social media, and cloud computing. Regarding employee privacy, the document states that policies should achieve transparency by notifying employees about an employer's right to access work devices and information. For bring your own devices, it argues policies need to ensure an organization can control and access work information on personal devices. When discussing social media, the focus should be on separating business and personal use. And for cloud computing, requirements like data access and storage must be clearly defined and agreed to with cloud providers.
Ethics and software engineering
The systems administrator at Company Y discovered child pornography on an employee's computer after installing software provided prematurely by Company X that was missing key functionality. The administrator reported the discovery to authorities but was ignored. This scenario involves principles of public interest, client/employer responsibilities, and whistleblowing duties. Analyzing the software engineering code of ethics provides guidance that the administrator should disclose what was found to protect the common good, despite the company policy violation, as possessing child pornography is illegal.
AoIR #15 Conference Sth Korea 2014
This document summarizes a PhD candidate's research on regulating social media in the workplace. The research aims to provide a framework balancing employee and employer interests, recommendations for law reform, and improve certainty. It discusses tensions between employee autonomy online and employer risk management. The methodology involves analyzing legal cases, social media policies, and developing a framework informed by boundary theory. The research so far indicates policies are sometimes too restrictive or broad, impacting work-life balance, and employers have an implied duty to ensure fair social media policies.
Social Media Can Not Be Ignored
A study was conducted through interviews with office workers and managers in the UK, US, Australia and Germany. It found that while 39% of employees felt their company encouraged social media use, 65% of companies claimed they did. There is a disconnect between company policies and employee perceptions. Over 80% of companies now mention social media and the internet during recruitment. While employees understand companies' security concerns about social media, companies tend to focus more on compliance and control in their security strategies. This approach may not work for allowing social media use. The document recommends that companies adopt a new approach to security that embraces flexible policies in order to gain the engagement benefits of social media while managing risks.
Employee issues and privacy
A one hour presentation to privacy lawyers on workplace privacy issues, including content on an employer's right of access to work system information and off-duty conduct issues.
Developing a plan for your imaging project
This presentation looks at what organizations on the path to paperlite need to do in the planning stage to ensure they reap the rewards of document imaging.
Managing Facebook - Jan 28/2009
This document discusses managing issues related to employee use of social media and computers. It provides guidance on privacy practices for collecting information from prospective employees. It outlines easy and hard cases for restricting current employees' online speech, noting speech must be connected to the workplace but not necessarily physically. Policies should clarify rules applying to public speech by employees in any medium. For addressing former employees' speech, the options are pursuing a tort or going to court, considering which is least costly while not underestimating advocacy to internet service providers. Guidance is also given on addressing anonymous speech by third parties.
Hybrid Records Management Best Practices
A must-see presentation for those who are looking for strategies and tips to manage paper and electronic records in the same environment.
CAISJA workshop - legal issues in student appeals
30 minutes of speaking content in a 3 hour workshop for Canadian academic integrity and student judicial affairs officers. We also discussed student privacy and risk management.
Getting to Paperlite: Strategies for More Efficient Records Management Part 1
Everyone wants to work with less paper, but many organizations have no idea how to get there. This presentation shares the records management best practices you need to get to “paperlite.”
The Right to be Forgotten - It's About Time, or is it? (CPDP2014)
This document discusses the right to be forgotten and analyzes it through different legal frameworks such as data protection law, privacy law, and defamation law. It examines how the right to erasure under the Data Protection Directive allows individuals to request data controllers erase personal data when its processing no longer complies with the law due to being incomplete or inaccurate over time. The document also summarizes the 2014 Google Spain case where the CJEU established territorial and temporal limitations on the right to be forgotten online. It concludes that balancing various factors like public interest, context, an individual's notoriety, and the passage of time is needed when determining right to erasure requests.
The Right to be Forgotten
The right to be forgotten is “The right to silence on past events in life that are no longer occurring”, which means keeping the data for as long as needed and then destroy or archive them.
Cas cyber prez
This document discusses data and cyber security risks and best practices for protection and response. It notes several high-profile data breaches from 2012-2015 involving lost hard drives containing personal information, unauthorized access to medical records, a medical marijuana mailing error, and a payment card theft. It examines potential legal issues for organizations when data is lost or accessed without authorization. The document also outlines an incident response process and best practices for timing, analysis, and communication in response to a data security incident.
Key Issues In Workplace Privacy
An hour long presentation on "hot topics" for Canadian employers. Deals with business system monitoring, employee responsibility for "off duty" publication and background checks.
Social Media and Employee Privacy
This is a narrow look at two issues related to social media look by employees - monitoring workplace computers and employee publication and "off duty" conduct.
Electronic Evidence - The Special Case of Email
This document discusses challenges related to email in litigation. It addresses managing email retention on corporate servers, locating emails within and outside corporate networks, accessing emails, including on employer systems and mobile devices, and proving the authenticity of emails. Key issues explored include retention policies, accessing employee emails, proving authentic versus fabricated emails, and authenticating cloud-based communications from various applications and providers.
E-mail as Evdience
This document discusses issues related to using email as evidence in legal proceedings. It begins by defining different types of electronic messages and noting the evolution of communication technologies. It then addresses relevance of email evidence, access to stored communications, production of emails, authentication and admissibility of digital records, and challenges related to new communication platforms like social media. The document examines these topics through case studies and highlights open legal questions regarding things like privilege waiver, proving the integrity of digital records, and authenticating messages when authorship is disputed.
Cookie Law – How to meet the deadline for compliance: The Legal Context
James Milligan, Solicitor with the DMA, provides an overview of the legal context for webmasters seeking to comply with the new cookie law.
©James Milligan, DMA 2012
HRCU 630 EmployeeSurveillance paper, Feldman
This document discusses employee surveillance in the workplace. It begins by outlining the legal precedent that generally supports employers' right to conduct surveillance of employees. Several court cases are discussed that established employers can monitor employee email and internet usage. The document then argues that surveillance is necessary for employers, citing estimates that employee wasted time costs $750 billion annually. It explores how employers can use negotiation and persuasion techniques to gain employee acceptance of monitoring policies. The conclusion maintains that surveillance helps businesses and may ultimately benefit employees through higher wages.
Email policy training management revised(1a)
The document summarizes Joulé Inc.'s updated email policy and new litigation hold notice. It outlines guidelines for appropriate email use, retention and deletion policies, and consequences for inappropriate use. It also explains what constitutes a litigation hold notice and the process for preserving relevant documents and emails if one is issued.
Case study 7
The digital divide problem is an ethical dilemma for several reasons:
1) Disparities in access to computing technology exist between different groups, raising issues of fairness and justice.
2) Widespread access to technology is important for full participation in society and empowerment, yet many lack access.
3) Increased usage of technology by some groups without proper moderation can further widen the gaps in digital literacy and skills between those who have access and those who do not.
Workplace privacy here and now
This document discusses four hot button issues related to workplace privacy: (1) the boundary between work and private life, (2) the right of access to stored communications, (3) the application of PIPEDA to employment in provinces, and (4) managing the risk of employee malfeasance. Regarding the boundary between work and private life, speech that negatively affects legitimate employer interests can be subject to employer response, while other activity is considered private. For access to communications, employers have rights to routine monitoring, periodic audits, and investigations with reasonable suspicion, but unfettered access is declining. PIPEDA's application depends on whether an employer has an independent interest in collected information. Managing malfeasance
Review questions
This document contains review questions about ethical, social, and political issues related to technology. It discusses how ethics, society, and politics are interconnected and provides examples. Key technology trends like increasing computer power and data storage capabilities are highlighted as heightening ethical concerns due to their impact on privacy, data analysis, and system dependence. The document also defines responsibility, accountability, and liability and outlines the five steps of an ethical analysis. It identifies six ethical principles and discusses professional codes of conduct, privacy, and how technology challenges privacy protection. Intellectual property rights and challenges posed by the Internet are also addressed.
Ethical issues-extra
The document discusses several ethical and legal issues related to e-commerce websites, including privacy of personal information, social exclusion, unsolicited email, copyright, and ensuring website content is appropriate for different countries and cultures. It also discusses frameworks for analyzing privacy and data protection, such as focusing on transparency, security, and liability of data collection and use. Key issues discussed include privacy, property rights, governance over the internet and e-commerce, and public safety.
Digital Literacy Fundamentals Part 2.pptx
Fundamentals of Digital Literacy for South Sudanese - Tips on accessing services, work, learning and opportunities online
Data protection & security breakfast briefing master slides 28 june-final
The document summarizes an IBM breakfast briefing on data protection, security, and regulatory updates. The briefing covered the changing EU General Data Protection Regulations and implications for organizations, including increased fines for noncompliance. It also discussed practical strategies for organizations to build a culture of data protection compliance, including data discovery, classification, retention, and disposal. Speakers included experts from IBM, law firms, and other companies to discuss analytics and best practices to help organizations adhere to new rules and regulations.
Data Protection & Security Breakfast Briefing - Master Slides_28 June_final
The document summarizes an IBM breakfast briefing on data protection, security, and regulatory updates. The briefing covered the changing EU General Data Protection Regulations and implications for organizations, including increased fines for noncompliance. It also discussed privacy rights for individuals, such as the "right to be forgotten" and access to their own data. The briefing addressed how analytics can help adhere to new rules and regulations.
19Question 1 4 4 pointsLO5 What is a packetQu.docx
This document contains a series of questions and feedback from an exam on information systems topics. It discusses firewalls, databases, authentication methods, competitive advantages, software quality triangles, trademarks, and other concepts. The feedback indicates some multiple choice questions were missed and to review for the next test.
More Related Content
Viewers also liked
Managing Facebook - Jan 28/2009
This document discusses managing issues related to employee use of social media and computers. It provides guidance on privacy practices for collecting information from prospective employees. It outlines easy and hard cases for restricting current employees' online speech, noting speech must be connected to the workplace but not necessarily physically. Policies should clarify rules applying to public speech by employees in any medium. For addressing former employees' speech, the options are pursuing a tort or going to court, considering which is least costly while not underestimating advocacy to internet service providers. Guidance is also given on addressing anonymous speech by third parties.
Hybrid Records Management Best Practices
A must-see presentation for those who are looking for strategies and tips to manage paper and electronic records in the same environment.
CAISJA workshop - legal issues in student appeals
30 minutes of speaking content in a 3 hour workshop for Canadian academic integrity and student judicial affairs officers. We also discussed student privacy and risk management.
Getting to Paperlite: Strategies for More Efficient Records Management Part 1
Everyone wants to work with less paper, but many organizations have no idea how to get there. This presentation shares the records management best practices you need to get to “paperlite.”
The Right to be Forgotten - It's About Time, or is it? (CPDP2014)
This document discusses the right to be forgotten and analyzes it through different legal frameworks such as data protection law, privacy law, and defamation law. It examines how the right to erasure under the Data Protection Directive allows individuals to request data controllers erase personal data when its processing no longer complies with the law due to being incomplete or inaccurate over time. The document also summarizes the 2014 Google Spain case where the CJEU established territorial and temporal limitations on the right to be forgotten online. It concludes that balancing various factors like public interest, context, an individual's notoriety, and the passage of time is needed when determining right to erasure requests.
The Right to be Forgotten
The right to be forgotten is “The right to silence on past events in life that are no longer occurring”, which means keeping the data for as long as needed and then destroy or archive them.
Cas cyber prez
This document discusses data and cyber security risks and best practices for protection and response. It notes several high-profile data breaches from 2012-2015 involving lost hard drives containing personal information, unauthorized access to medical records, a medical marijuana mailing error, and a payment card theft. It examines potential legal issues for organizations when data is lost or accessed without authorization. The document also outlines an incident response process and best practices for timing, analysis, and communication in response to a data security incident.
Viewers also liked (7)
Getting to Paperlite: Strategies for More Efficient Records Management Part 1
Getting to Paperlite: Strategies for More Efficient Records Management Part 1
The Right to be Forgotten - It's About Time, or is it? (CPDP2014)
The Right to be Forgotten - It's About Time, or is it? (CPDP2014)
Similar to presentation to lawyers and practicioners on e-mail monitoring
Key Issues In Workplace Privacy
An hour long presentation on "hot topics" for Canadian employers. Deals with business system monitoring, employee responsibility for "off duty" publication and background checks.
Social Media and Employee Privacy
This is a narrow look at two issues related to social media look by employees - monitoring workplace computers and employee publication and "off duty" conduct.
Electronic Evidence - The Special Case of Email
This document discusses challenges related to email in litigation. It addresses managing email retention on corporate servers, locating emails within and outside corporate networks, accessing emails, including on employer systems and mobile devices, and proving the authenticity of emails. Key issues explored include retention policies, accessing employee emails, proving authentic versus fabricated emails, and authenticating cloud-based communications from various applications and providers.
E-mail as Evdience
This document discusses issues related to using email as evidence in legal proceedings. It begins by defining different types of electronic messages and noting the evolution of communication technologies. It then addresses relevance of email evidence, access to stored communications, production of emails, authentication and admissibility of digital records, and challenges related to new communication platforms like social media. The document examines these topics through case studies and highlights open legal questions regarding things like privilege waiver, proving the integrity of digital records, and authenticating messages when authorship is disputed.
Cookie Law – How to meet the deadline for compliance: The Legal Context
James Milligan, Solicitor with the DMA, provides an overview of the legal context for webmasters seeking to comply with the new cookie law.
©James Milligan, DMA 2012
HRCU 630 EmployeeSurveillance paper, Feldman
This document discusses employee surveillance in the workplace. It begins by outlining the legal precedent that generally supports employers' right to conduct surveillance of employees. Several court cases are discussed that established employers can monitor employee email and internet usage. The document then argues that surveillance is necessary for employers, citing estimates that employee wasted time costs $750 billion annually. It explores how employers can use negotiation and persuasion techniques to gain employee acceptance of monitoring policies. The conclusion maintains that surveillance helps businesses and may ultimately benefit employees through higher wages.
Email policy training management revised(1a)
The document summarizes Joulé Inc.'s updated email policy and new litigation hold notice. It outlines guidelines for appropriate email use, retention and deletion policies, and consequences for inappropriate use. It also explains what constitutes a litigation hold notice and the process for preserving relevant documents and emails if one is issued.
Case study 7
The digital divide problem is an ethical dilemma for several reasons:
1) Disparities in access to computing technology exist between different groups, raising issues of fairness and justice.
2) Widespread access to technology is important for full participation in society and empowerment, yet many lack access.
3) Increased usage of technology by some groups without proper moderation can further widen the gaps in digital literacy and skills between those who have access and those who do not.
Workplace privacy here and now
This document discusses four hot button issues related to workplace privacy: (1) the boundary between work and private life, (2) the right of access to stored communications, (3) the application of PIPEDA to employment in provinces, and (4) managing the risk of employee malfeasance. Regarding the boundary between work and private life, speech that negatively affects legitimate employer interests can be subject to employer response, while other activity is considered private. For access to communications, employers have rights to routine monitoring, periodic audits, and investigations with reasonable suspicion, but unfettered access is declining. PIPEDA's application depends on whether an employer has an independent interest in collected information. Managing malfeasance
Review questions
This document contains review questions about ethical, social, and political issues related to technology. It discusses how ethics, society, and politics are interconnected and provides examples. Key technology trends like increasing computer power and data storage capabilities are highlighted as heightening ethical concerns due to their impact on privacy, data analysis, and system dependence. The document also defines responsibility, accountability, and liability and outlines the five steps of an ethical analysis. It identifies six ethical principles and discusses professional codes of conduct, privacy, and how technology challenges privacy protection. Intellectual property rights and challenges posed by the Internet are also addressed.
Ethical issues-extra
The document discusses several ethical and legal issues related to e-commerce websites, including privacy of personal information, social exclusion, unsolicited email, copyright, and ensuring website content is appropriate for different countries and cultures. It also discusses frameworks for analyzing privacy and data protection, such as focusing on transparency, security, and liability of data collection and use. Key issues discussed include privacy, property rights, governance over the internet and e-commerce, and public safety.
Digital Literacy Fundamentals Part 2.pptx
Fundamentals of Digital Literacy for South Sudanese - Tips on accessing services, work, learning and opportunities online
Data protection & security breakfast briefing master slides 28 june-final
The document summarizes an IBM breakfast briefing on data protection, security, and regulatory updates. The briefing covered the changing EU General Data Protection Regulations and implications for organizations, including increased fines for noncompliance. It also discussed practical strategies for organizations to build a culture of data protection compliance, including data discovery, classification, retention, and disposal. Speakers included experts from IBM, law firms, and other companies to discuss analytics and best practices to help organizations adhere to new rules and regulations.
Data Protection & Security Breakfast Briefing - Master Slides_28 June_final
The document summarizes an IBM breakfast briefing on data protection, security, and regulatory updates. The briefing covered the changing EU General Data Protection Regulations and implications for organizations, including increased fines for noncompliance. It also discussed privacy rights for individuals, such as the "right to be forgotten" and access to their own data. The briefing addressed how analytics can help adhere to new rules and regulations.
19Question 1 4 4 pointsLO5 What is a packetQu.docx
This document contains a series of questions and feedback from an exam on information systems topics. It discusses firewalls, databases, authentication methods, competitive advantages, software quality triangles, trademarks, and other concepts. The feedback indicates some multiple choice questions were missed and to review for the next test.
ScifoBYODSample
1. A BYOD policy allows employees to use personal devices for work but raises issues around balancing employee privacy and corporate data security needs.
2. Recent court cases find employees have a reasonable expectation of privacy for personal information on their devices if the company policy allows personal use and they take steps to safeguard private information.
3. Companies can monitor business-related information stored on or sent through corporate servers but likely cannot access personal communications like texts and social media. To minimize liability, companies should have clear, transparent BYOD policies and limit monitoring to work-related matters stored on company servers.
Catelas Security Webinar 12 14 10
This document discusses a new approach to data leakage investigations and security called Catelas. Catelas uses behavioral science algorithms and social network analysis of log file data to map employee relationships and identify anomalous behavior, allowing proactive surveillance of the entire email network. This helps speed up internal investigations by identifying key suspects and custodians before collection begins. The approach aims to detect and contain information theft without collecting any emails. Catelas provides a single, holistic solution for security, compliance, and legal needs through intelligent collection and early case assessment.
E discovery production and non-party privacy v2
This document discusses key issues related to e-discovery, production, and non-party privacy. It outlines how e-discovery involves processing entire data sets to separate producible information from private information. While companies have a right to access employee communications, best practices include establishing proper expectations and controls to ensure legitimate access. When using e-discovery vendors, clients are accountable for data security. Producing parties must be aware of privacy statutes that can block disclosure of personal information outside a jurisdiction. Proper third-party notice and preparation that considers redaction or security expectations can help address non-party privacy concerns in the production process.
KMA Insights Webinar July 2009 -- Compliance with MA Privacy Law
KMA Insights Webinar July 2009 -- Compliance with MA Privacy LawKnowledge Management Associates, LLC
KMA Insights Webinar Series - 29 July 2009 presentation on MA Privacy readiness and SharePoint compliance portalPreparing for GDPR: General Data Protection Regulation - Stakeholder Presenta...
This document provides an overview of the EU General Data Protection Regulation (GDPR) which takes effect on May 25, 2018. It discusses the issues with how organizations currently manage data and how GDPR aims to better protect consumer data. Key points include expanded definitions of personal data, increased rights for data subjects, higher fines for non-compliance, and new requirements for consent, transparency, accountability, and breach notification. It outlines four steps businesses need to take, including reviewing policies, establishing a legal basis for processing, demonstrating compliance, and considering appointing a data protection officer.
Similar to presentation to lawyers and practicioners on e-mail monitoring (20)
Cookie Law – How to meet the deadline for compliance: The Legal Context
Cookie Law – How to meet the deadline for compliance: The Legal Context
Data protection & security breakfast briefing master slides 28 june-final
Data protection & security breakfast briefing master slides 28 june-final
Data Protection & Security Breakfast Briefing - Master Slides_28 June_final
Data Protection & Security Breakfast Briefing - Master Slides_28 June_final
19Question 1 4 4 pointsLO5 What is a packetQu.docx
19Question 1 4 4 pointsLO5 What is a packetQu.docx
KMA Insights Webinar July 2009 -- Compliance with MA Privacy Law
KMA Insights Webinar July 2009 -- Compliance with MA Privacy Law
Preparing for GDPR: General Data Protection Regulation - Stakeholder Presenta...
Preparing for GDPR: General Data Protection Regulation - Stakeholder Presenta...
More from Dan Michaluk
Ecno cyber - 23 June 2023 - djm(137852631.1).pptx
One hour presentation to IT professionals at Ontario school boards. Covers labour issues in MFA rollout, threat information sharing and business e-mail compromises and PHIPA.
Critical Issues in School Board Cyber Security
An hour presentation to school board officials in Ontario on cyber security issues, covering the threat environment, defense, incident response, threat information sharing and vendor issues.
Introduction to FOI law (the law of information)
On hour presentation to lawyers on the Freedom of Information and, more broadly, "the law of information" in Canada.
Higher Education Sexual Violence Presentation
This document summarizes a presentation on institutional policy and liability regarding sexual assault on campus. It discusses key policy issues around confidentiality and control, non-disclosure agreements, and running fair hearings. It also reviews relevant legislation and case law from universities in Manitoba, Windsor, and the US. The presentation aims to help institutions balance survivor agency, risk management, and procedural fairness in their policies and practices.
Cyber class action claims at an inflection point
This document summarizes three Ontario court cases related to privacy class actions and data breaches. The first case found that the defendant's response to a data breach was exemplary and that plaintiffs failed to prove compensable damages or that identity theft was caused by the breach. The second and third cases found that failures to prevent data intrusions do not constitute the intentional tort of intrusion upon seclusion, and that vicarious liability does not apply to actions of former employees. These cases set precedents that make it difficult for plaintiffs to win privacy class actions in Ontario. The document discusses implications for data breach responses and potential alternatives to class actions for enabling justice around privacy issues.
The pandemic and privacy
One hour presentation to Ontario public sector institutions that looks at the privacy and security implications the main information flows associated with COVID-19 workplace health and safety.
Cyber security for the regulator and regulated - Ontario Regulatory Authorit...
This document summarizes a presentation on cyber security for regulators and regulated organizations. It outlines the significant ransomware threat, with attacks and ransom payments increasing substantially. It describes common inside and outside security threats organizations face from issues like errant emails, loss of devices, and malware. The presentation emphasizes the importance of having a comprehensive cyber security program with clear roles and accountability, ongoing risk assessment, and adherence to policies. It also stresses the value of having an incident response plan in place in case of a security breach, and outlines best practices for responding to ransomware attacks.
Union access to information
Here's a one hour presentation to Canadian municipal lawyers on the union right of access to information that arises under labour law and how it has fared against employee privacy claims.
Cybersecurity Risk Governance
This document summarizes a presentation on cybersecurity risk governance. It discusses the high degree of risk boards face from cyber attacks, noting a large increase in ransomware attacks and payments in 2020. The ransomware threat is very high. Public sectors are primary targets due to weaker defenses from budget pressures. Cyber attacks can cause privacy failures, reputational problems, high response costs, and civil liability. The presentation then provides an overview of key cybersecurity concepts for boards like asset management, defense in depth, and the NIST Cybersecurity Framework. It examines how boards can provide oversight in each framework area such as identifying critical data and access controls for protecting information.
Cyber Incident Response - When it happens, will you be ready?
Campbell from IT called the presenter on a Saturday to report that key servers at their organization, including the email and file servers, were inaccessible. A cryptic note was left demanding payment to regain access, indicating a potential ransomware attack. The presenter is advised to have Campbell contain the incident by disconnecting from the internet, not make any payments, and call in expert help from lawyers and incident response specialists to properly investigate and mitigate the risks. The presentation then outlines the typical incident response process and provides tips on internal communication, notifying affected individuals, and having an incident response plan in place ahead of time.
The Current State of FOI
One hour presentation to cyber and privacy professionals on freedom of information and how it is responding to the internet and the cyber threat.
Cyber, secrecy and the public body
1 hours presentation to IT security and law enforcement audience on how access to information legislation and related pressures affect public bodies in Canada.
The privacy and security implications of AI, big data and predictive analytics
This document discusses the privacy and security implications of AI, big data, and predictive analytics in the workplace. It provides an overview of workplace privacy law in Canada, including statutes that govern the handling of employee personal information. While no Canadian law directly addresses AI and predictive analytics, statutes support employee control over personal information not related to employment and transparent data processing. The document examines potential AI applications in fraud detection, data security, process automation, and employee retention. It also discusses challenges around collecting and using employee data for AI models and the possibility of future AI regulation in Canada.
Advocates' Society Tricks of the Trade 2019 - A Privacy Update
This document summarizes key issues regarding privacy law in Canada. It discusses two questions: whether evidence obtained in breach of privacy would be excluded in non-criminal cases, and what has been learned about the elements and defenses of the intrusion upon seclusion tort since a recent case. Regarding the first question, the document concludes evidence is rarely excluded. For the second question, it outlines the elements and defenses established in the recent case, and analyzes how subsequent cases have applied those standards.
Privacy, Data Security and Anti-Spam Compliance
45 min prez to compliance professionals at Canadian financial institutions. A survey presentation covering privacy, data security and anti-spam (CASL).
Cyber Insurance and Incident Response Practice
Cyber incident scenario and questions designed for lawyers, insurance adjusters and claims managers and risk managers.
Role of a breach coach
I hate the term "breach" - please call it a "security incident" - but the term "breach coach" is certainly ingrained. Posting today's presentation on the role of the coach as I step out the door to an insurance sector event.
PHIPA for school boards
Who is the "health information custodian" when an institution with an educational mandate provides health care? PHIPA gives institutions choice. Here's a presentation i gave yesterday in which I argue that the institution (and not its practitioners) should assume the role of the HIC.
Privacy, Data Security and Anti-Spam Compliance
This document discusses privacy, data security, and anti-spam compliance. It covers privacy legislation in Canada including PIPEDA, and outlines new provisions regarding applicants for employment and sharing personal information to investigate breaches of law. Regarding data security, it discusses regulatory frameworks and standards from OSFI, CSA, and PIPEDA. Breach notification requirements are outlined. Finally, the document discusses CASL spam regulation including express consent requirements and recent enforcement actions.
Finding internet evidence
This document provides tips and tools for collecting internet evidence. It discusses using WHOIS searches to find information about domain registrants, the Wayback Machine for archived website snapshots, reverse image searches to verify identities, and various social media search tools like AllMyTweets, Knowem, and Social Searcher. The document cautions that only clients, not assistants, should directly access online accounts and platforms. It also includes an ethics scenario about using a relative's friendship on Facebook to view information about a plaintiff.
More from Dan Michaluk (20)
Cyber security for the regulator and regulated - Ontario Regulatory Authorit...
Cyber security for the regulator and regulated - Ontario Regulatory Authorit...
Cyber Incident Response - When it happens, will you be ready?
Cyber Incident Response - When it happens, will you be ready?
The privacy and security implications of AI, big data and predictive analytics
The privacy and security implications of AI, big data and predictive analytics
Advocates' Society Tricks of the Trade 2019 - A Privacy Update
Advocates' Society Tricks of the Trade 2019 - A Privacy Update
Recently uploaded
Programming Foundation Models with DSPy - Meetup Slides
Prompting language models is hard, while programming language models is easy. In this talk, I will discuss the state-of-the-art framework DSPy for programming foundation models with its powerful optimizers and runtime constraint system.
Dandelion Hashtable: beyond billion requests per second on a commodity server
This slide deck presents DLHT, a concurrent in-memory hashtable. Despite efforts to optimize hashtables, that go as far as sacrificing core functionality, state-of-the-art designs still incur multiple memory accesses per request and block request processing in three cases. First, most hashtables block while waiting for data to be retrieved from memory. Second, open-addressing designs, which represent the current state-of-the-art, either cannot free index slots on deletes or must block all requests to do so. Third, index resizes block every request until all objects are copied to the new index. Defying folklore wisdom, DLHT forgoes open-addressing and adopts a fully-featured and memory-aware closed-addressing design based on bounded cache-line-chaining. This design offers lock-free index operations and deletes that free slots instantly, (2) completes most requests with a single memory access, (3) utilizes software prefetching to hide memory latencies, and (4) employs a novel non-blocking and parallel resizing. In a commodity server and a memory-resident workload, DLHT surpasses 1.6B requests per second and provides 3.5x (12x) the throughput of the state-of-the-art closed-addressing (open-addressing) resizable hashtable on Gets (Deletes).
Harnessing the Power of NLP and Knowledge Graphs for Opioid Research
Gursev Pirge, PhD
Senior Data Scientist - JohnSnowLabs
Generating privacy-protected synthetic data using Secludy and Milvus
During this demo, the founders of Secludy will demonstrate how their system utilizes Milvus to store and manipulate embeddings for generating privacy-protected synthetic data. Their approach not only maintains the confidentiality of the original data but also enhances the utility and scalability of LLMs under privacy constraints. Attendees, including machine learning engineers, data scientists, and data managers, will witness first-hand how Secludy's integration with Milvus empowers organizations to harness the power of LLMs securely and efficiently.
"Choosing proper type of scaling", Olena Syrota
Imagine an IoT processing system that is already quite mature and production-ready and for which client coverage is growing and scaling and performance aspects are life and death questions. The system has Redis, MongoDB, and stream processing based on ksqldb. In this talk, firstly, we will analyze scaling approaches and then select the proper ones for our system.
Astute Business Solutions | Oracle Cloud Partner |
Your goto partner for Oracle Cloud, PeopleSoft, E-Business Suite, and Ellucian Banner. We are a firm specialized in managed services and consulting.
Energy Efficient Video Encoding for Cloud and Edge Computing Instances
Energy Efficient Video Encoding for Cloud and Edge Computing Instances
Connector Corner: Seamlessly power UiPath Apps, GenAI with prebuilt connectors
Join us to learn how UiPath Apps can directly and easily interact with prebuilt connectors via Integration Service--including Salesforce, ServiceNow, Open GenAI, and more.
The best part is you can achieve this without building a custom workflow! Say goodbye to the hassle of using separate automations to call APIs. By seamlessly integrating within App Studio, you can now easily streamline your workflow, while gaining direct access to our Connector Catalog of popular applications.
We’ll discuss and demo the benefits of UiPath Apps and connectors including:
Creating a compelling user experience for any software, without the limitations of APIs.
Accelerating the app creation process, saving time and effort
Enjoying high-performance CRUD (create, read, update, delete) operations, for
seamless data management.
Speakers:
Russell Alfeche, Technology Leader, RPA at qBotic and UiPath MVP
Charlie Greenberg, host
“How Axelera AI Uses Digital Compute-in-memory to Deliver Fast and Energy-eff...
“How Axelera AI Uses Digital Compute-in-memory to Deliver Fast and Energy-eff...Edge AI and Vision Alliance
For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2024/06/how-axelera-ai-uses-digital-compute-in-memory-to-deliver-fast-and-energy-efficient-computer-vision-a-presentation-from-axelera-ai/
Bram Verhoef, Head of Machine Learning at Axelera AI, presents the “How Axelera AI Uses Digital Compute-in-memory to Deliver Fast and Energy-efficient Computer Vision” tutorial at the May 2024 Embedded Vision Summit.
As artificial intelligence inference transitions from cloud environments to edge locations, computer vision applications achieve heightened responsiveness, reliability and privacy. This migration, however, introduces the challenge of operating within the stringent confines of resource constraints typical at the edge, including small form factors, low energy budgets and diminished memory and computational capacities. Axelera AI addresses these challenges through an innovative approach of performing digital computations within memory itself. This technique facilitates the realization of high-performance, energy-efficient and cost-effective computer vision capabilities at the thin and thick edge, extending the frontier of what is achievable with current technologies.
In this presentation, Verhoef unveils his company’s pioneering chip technology and demonstrates its capacity to deliver exceptional frames-per-second performance across a range of standard computer vision networks typical of applications in security, surveillance and the industrial sector. This shows that advanced computer vision can be accessible and efficient, even at the very edge of our technological ecosystem.Columbus Data & Analytics Wednesdays - June 2024
Columbus Data & Analytics Wednesdays, June 2024 with Maria Copot 20
Main news related to the CCS TSI 2023 (2023/1695)
An English 🇬🇧 translation of a presentation to the speech I gave about the main changes brought by CCS TSI 2023 at the biggest Czech conference on Communications and signalling systems on Railways, which was held in Clarion Hotel Olomouc from 7th to 9th November 2023 (konferenceszt.cz). Attended by around 500 participants and 200 on-line followers.
The original Czech 🇨🇿 version of the presentation can be found here: https://www.slideshare.net/slideshow/hlavni-novinky-souvisejici-s-ccs-tsi-2023-2023-1695/269688092 .
The videorecording (in Czech) from the presentation is available here: https://youtu.be/WzjJWm4IyPk?si=SImb06tuXGb30BEH .
Monitoring and Managing Anomaly Detection on OpenShift.pdf
Monitoring and Managing Anomaly Detection on OpenShift
Overview
Dive into the world of anomaly detection on edge devices with our comprehensive hands-on tutorial. This SlideShare presentation will guide you through the entire process, from data collection and model training to edge deployment and real-time monitoring. Perfect for those looking to implement robust anomaly detection systems on resource-constrained IoT/edge devices.
Key Topics Covered
1. Introduction to Anomaly Detection
- Understand the fundamentals of anomaly detection and its importance in identifying unusual behavior or failures in systems.
2. Understanding Edge (IoT)
- Learn about edge computing and IoT, and how they enable real-time data processing and decision-making at the source.
3. What is ArgoCD?
- Discover ArgoCD, a declarative, GitOps continuous delivery tool for Kubernetes, and its role in deploying applications on edge devices.
4. Deployment Using ArgoCD for Edge Devices
- Step-by-step guide on deploying anomaly detection models on edge devices using ArgoCD.
5. Introduction to Apache Kafka and S3
- Explore Apache Kafka for real-time data streaming and Amazon S3 for scalable storage solutions.
6. Viewing Kafka Messages in the Data Lake
- Learn how to view and analyze Kafka messages stored in a data lake for better insights.
7. What is Prometheus?
- Get to know Prometheus, an open-source monitoring and alerting toolkit, and its application in monitoring edge devices.
8. Monitoring Application Metrics with Prometheus
- Detailed instructions on setting up Prometheus to monitor the performance and health of your anomaly detection system.
9. What is Camel K?
- Introduction to Camel K, a lightweight integration framework built on Apache Camel, designed for Kubernetes.
10. Configuring Camel K Integrations for Data Pipelines
- Learn how to configure Camel K for seamless data pipeline integrations in your anomaly detection workflow.
11. What is a Jupyter Notebook?
- Overview of Jupyter Notebooks, an open-source web application for creating and sharing documents with live code, equations, visualizations, and narrative text.
12. Jupyter Notebooks with Code Examples
- Hands-on examples and code snippets in Jupyter Notebooks to help you implement and test anomaly detection models.
Essentials of Automations: Exploring Attributes & Automation Parameters
Building automations in FME Flow can save time, money, and help businesses scale by eliminating data silos and providing data to stakeholders in real-time. One essential component to orchestrating complex automations is the use of attributes & automation parameters (both formerly known as “keys”). In fact, it’s unlikely you’ll ever build an Automation without using these components, but what exactly are they?
Attributes & automation parameters enable the automation author to pass data values from one automation component to the next. During this webinar, our FME Flow Specialists will cover leveraging the three types of these output attributes & parameters in FME Flow: Event, Custom, and Automation. As a bonus, they’ll also be making use of the Split-Merge Block functionality.
You’ll leave this webinar with a better understanding of how to maximize the potential of automations by making use of attributes & automation parameters, with the ultimate goal of setting your enterprise integration workflows up on autopilot.
Crafting Excellence: A Comprehensive Guide to iOS Mobile App Development Serv...
Crafting Excellence: A Comprehensive Guide to iOS Mobile App Development Serv...Pitangent Analytics & Technology Solutions Pvt. Ltd
Discover top-tier mobile app development services, offering innovative solutions for iOS and Android. Enhance your business with custom, user-friendly mobile applications.The Microsoft 365 Migration Tutorial For Beginner.pptx
This presentation will help you understand the power of Microsoft 365. However, we have mentioned every productivity app included in Office 365. Additionally, we have suggested the migration situation related to Office 365 and how we can help you.
You can also read: https://www.systoolsgroup.com/updates/office-365-tenant-to-tenant-migration-step-by-step-complete-guide/
Apps Break Data
How information systems are built or acquired puts information, which is what they should be about, in a secondary place. Our language adapted accordingly, and we no longer talk about information systems but applications. Applications evolved in a way to break data into diverse fragments, tightly coupled with applications and expensive to integrate. The result is technical debt, which is re-paid by taking even bigger "loans", resulting in an ever-increasing technical debt. Software engineering and procurement practices work in sync with market forces to maintain this trend. This talk demonstrates how natural this situation is. The question is: can something be done to reverse the trend?
How to Interpret Trends in the Kalyan Rajdhani Mix Chart.pdf
A Mix Chart displays historical data of numbers in a graphical or tabular form. The Kalyan Rajdhani Mix Chart specifically shows the results of a sequence of numbers over different periods.
Recently uploaded (20)
Programming Foundation Models with DSPy - Meetup Slides
Programming Foundation Models with DSPy - Meetup Slides
Dandelion Hashtable: beyond billion requests per second on a commodity server
Dandelion Hashtable: beyond billion requests per second on a commodity server
Harnessing the Power of NLP and Knowledge Graphs for Opioid Research
Harnessing the Power of NLP and Knowledge Graphs for Opioid Research
Generating privacy-protected synthetic data using Secludy and Milvus
Generating privacy-protected synthetic data using Secludy and Milvus
Astute Business Solutions | Oracle Cloud Partner |
Astute Business Solutions | Oracle Cloud Partner |
Deep Dive: AI-Powered Marketing to Get More Leads and Customers with HyperGro...
Deep Dive: AI-Powered Marketing to Get More Leads and Customers with HyperGro...
Nordic Marketo Engage User Group_June 13_ 2024.pptx
Nordic Marketo Engage User Group_June 13_ 2024.pptx
Energy Efficient Video Encoding for Cloud and Edge Computing Instances
Energy Efficient Video Encoding for Cloud and Edge Computing Instances
Connector Corner: Seamlessly power UiPath Apps, GenAI with prebuilt connectors
Connector Corner: Seamlessly power UiPath Apps, GenAI with prebuilt connectors
“How Axelera AI Uses Digital Compute-in-memory to Deliver Fast and Energy-eff...
“How Axelera AI Uses Digital Compute-in-memory to Deliver Fast and Energy-eff...
Monitoring and Managing Anomaly Detection on OpenShift.pdf
Monitoring and Managing Anomaly Detection on OpenShift.pdf
Essentials of Automations: Exploring Attributes & Automation Parameters
Essentials of Automations: Exploring Attributes & Automation Parameters
Crafting Excellence: A Comprehensive Guide to iOS Mobile App Development Serv...
Crafting Excellence: A Comprehensive Guide to iOS Mobile App Development Serv...
The Microsoft 365 Migration Tutorial For Beginner.pptx
The Microsoft 365 Migration Tutorial For Beginner.pptx
9 CEO's who hit $100m ARR Share Their Top Growth Tactics Nathan Latka, Founde...
9 CEO's who hit $100m ARR Share Their Top Growth Tactics Nathan Latka, Founde...
How to Interpret Trends in the Kalyan Rajdhani Mix Chart.pdf
How to Interpret Trends in the Kalyan Rajdhani Mix Chart.pdf
presentation to lawyers and practicioners on e-mail monitoring
- 1. Employee Computer Monitoring – Whither the most certain management right of all? Dan Michaluk June 9, 2009
- 7. Employee Computer Monitoring – Whither the most certain management right of all? Dan Michaluk June 9, 2009