I presented at the SA Privacy Management Summit on 4 March 2014. I discussed themes relating to responsible data protection practices and focused on why transparency is so important and how it helps companies earn data subjects' trust.

1. Privacy Management Summit SA

2. Prevention is better than the cure
(assuming there is a cure!)

3. You can’t undo data leaks

4. Responsible data protection practices
can give you a competitive advantage
… and help you achieve more of your objectives

5. Options
Consent
Legitimate interests
Contract conclusion or performance

6. Transparency is your differentiator
You have little to gain by hiding your activities

7. Poor data protection practices can have
disastrous reputational consequences

8. Who do you trust?

9. POPI places much emphasis on security
“A responsible party must secure the integrity and confidentiality
of personal information in its possession or under its control by
taking appropriate, reasonable technical and organisational
measures …” - Section 19
“A responsible party must, in terms of a written contract between
the 10 responsible party and the operator, ensure that the
operator which processes personal information for the responsible
party establishes and maintains the security measures referred to
in section 19 …” - Section 21

10. Avoid court if you can
It is a drawn out process and reputational harm is
much more immediate and potentially more severe.

11. Identify breaches
Fix vulnerabilities
Be transparent and proactive

12. Adobe security
breach
October 2013
!
2.9 million customers
affected …
!
Later admitted figure
closer to 38 million
customers …
!
Possibly up to 100
million …

13. “The way to gain good reputation is to endeavor to
be what you desire to appear”
!
- Socrates

14. Thank you for your time.

15. @webtechlaw
@pauljacobson
Contact us at http://webtechlaw.com/contact