materials

1. IT risk discusion qustion
risk management discussion question and need the explanation and answer to help me
learn.
We discussed in class a number of privacy rights that are protected under recent privacy
laws. Please pick three of the items we discussed, and write a sentence or two to show you
understand how an individual could be hurt without these protections.
Below are the rights for your reference:
Right to know
Right to correct
Right to portability
Right to delete
Right to non-discrimination
Right to opt-out (sale/profiling, targeted advertising)
Requirements: select three and write each 1 or 2 sentence. total about 1 page
3/1/202311IT Risk ManagementLecture 7Introduction to Data Privacy•Review of Privacy
Homework Assignment•Privacy –A Major and Evolving Corporate Risk•Ethical and Social
Issues Driving Privacy Regulation•Why Now?•Consumer Rights•Additional Topics Covered
in Privacy Regulations•Case Study #2 Assigned (Group)•Coming Up Next Week
Topics3Privacy A Major and Evolving Corporate Risk4Privacy: A Major and Evolving
Corporate Risk5Definition: The rights of an individual to trust that others will appropriately
and respectfully use, store, share and dispose of his/her associated personal and sensitive
information within the context, and according to the purposes, for which it was collected or
derivedSource: ISACA GlossaryPrivacy: A Major and Evolving Corporate RiskWHY NOW?•At
its most basic level, privacy has historically been defined as the right to be left alone. •As
companies increasingly collect large quantities of data, privacy has come to mean
accountability for how personal information is collected and used by the organizations that
collect it.6123456
3/1/202327Privacy: A Major and Evolving Corporate RiskWhy Now?8•Financial Risk
•Safety Risk•Political Risk•Misappropriation/Fairness•“Creepiness Factor”•Lack of
Corporate Self RegulationWhy Now?910Why Now?•As big data and data collection have
grown throughout the years, privacy has become increasingly more complicated due to
insufficient privacy strategies, higher customer expectations, and increased regulations.
•Data privacy affects virtually all companies, governments, and institutions. •Many

2. companies are monetizing free services by entering the data-collection and data-sharing
business.•Many service providers have data-collecting methods that are not transparent to
the consumer.•The amount of data available online has exploded due to personal habits, the
development of Internet of things (IOT) and the usage of biometric tools.•The ability to
track across devices and objects coupled with advanced computing power and AI makes
personal data more valuable both for bad actors and corporate players.•Mega-breaches and
high-profile privacy scandals have attracted the attention of lawmakers.•Regulators will
make examples of firms for security and privacy missteps.11Why Now? Traditional Inputs
Social InputsIncome Tax PaymentLoan PaymentCredit Card BillsUtility BillsCourt
Judgement PaymentTraffic Rules AdherenceFamily Planning Limits AdherenceFilial
PietyAcademic HonestyVolunteer ActivityPublic Transportation PaymentCriminal
RecordInternet InteractionsOnline Post Info ReliabilityShopping Habits?Ethical and Social
Issues Driving Privacy Regulation12789101112
3/1/2023313Ethical and Social Issues Driving Privacy RegulationHow to keep the
balance:•Public Safety•Individual Rights•Economic Growth14•Balance between privacy
and social good•Should schools release health records to parents?•Does employer have a
right to know whether you’ve been vaccinated?•Law enforcement surveillance
cameras•Friction between regulation and economic growth•Internet is fueled by freedom
to use data•Trust in authority•Should higher authorities have more access to
information?Ethical and Social Issues Driving in Privacy RegulationConsumer
Rights15•Consumer Rights•Right to know•Right to correct•Right to portability•Right to
delete•Right to non-discrimination•Right to opt-out (sale/profiling, targeted
advertising)•Individual desire to exercise rights may varyConsumer Rights16•In Class
Exercise (the right to know)-Why are there privacy policies at the bottom of websites?-See
Virginia Privacy law Section 591.1-575-See CPRA 1798.110-Go to the privacy policy of your
favorite retailer. -What personal information do they collect?-Who do they share that
personal information with?-How do they use your personal information•Discussion: Is
there value in an online privacy policy?Consumer Rights17•Processor (service provider) vs.
Controller (business)•Special rights for children•Sensitive personal information•Opt-In vs.
Opt-Out•Which Consumers will be Protected•Security Standards•Notification Timing and
Requirements•Company’s Right to Cure•Data MinimizationAdditional Topics Covered in
Privacy Regulations18131415161718
3/1/20234Topics Covered in Privacy Regulations•Notification Timing and
Requirements•International Transfers/Data Localization•Some countries do not allow data
to be transferred to other countries without additional data protections.•Some companies
require data to remain within their borders•Enforcement •private right of action vs.
government oversight•Right to Cure1920Case Study #2 Assigned (Group)•See Group
Assignment in Module 7•Review Grading Rubric21Coming Up Next
WeekReadingsPrinciples of Computer Security•Chapter 25Assignment #4Elements of
privacy rights. We discussed in class a number ofprivacy rights granted to individuals
under recent privacy laws. Please pick three of the items we discussed and write a sentence
or two to show you understand how an individual could be hurt without these protections.
192021