ACI-001 Online Ad Campaign r7_response 728x90

AsiaPF15_300x250_Banner_FINAL
CS15_300x250_Banner_FINAL

(Apr 27, 2015) Michael Hamilton, CIPP/E, CIPP/US, and Patrick Curry, CIPP/US, work for McKesson, a large healthcare services company. Because the company frequently needs to transfer protected health information from one department in the company to another, it’s developed a privacy impact assessment process to mitigate risk. Doing so has helped the company stay privacy smart in a number of ways, including frequently reassessing risk. Read More

The Privacy Advisor

Vendor Management Means Managing Your Own Risk: Part Eight

By K Royal

(Apr 27, 2015) The first step to mitigate the risk of data breaches through vendors is to have an effective vendor-management program. It’s the best way to ensure that your vendors are doing their jobs correctly, understanding, of course, that one can delegate responsibility, but not accountability. K Royal, CIPP/E, CIPP/US, offers tips on how best to avoid a breach via your vendor. Read More

The Privacy Advisor

Privacy in the Classroom: What You Need To Know About Educational Software

(Apr 27, 2015) Research released in January 2015 shows that educational applications are the second most popular category in the Apple App Store, comprising just over 10 percent of all app downloads. This indicates a tremendous interest in learning applications across a wide, technically savvy—and growing—demographic, Eduard Goodman, CIPP/C, CIPP/E, CIPP/US, reports. And a lack of regulations and guidelines means privacy isn't always a priority. Read More

The Privacy Advisor

Book Review: Krebs Gives Insights Into Spam Wars

(Apr 27, 2015) In Spam Nation, Brian Krebs takes a fascinating inside look into the extraordinarily complex world behind spam. Have you ever wanted to know who or what is behind spam? Or why pharmaceuticals are frequently the subject matter for it? Who is making money off of it? And maybe most importantly, why is it so challenging to make it stop? Cindy Hahn, CIPP/US, reviews. Read More

The Privacy Advisor

Ohlhausen To RSA: Be Reasonable; That’s All

(Apr 22, 2015) The Federal Trade Commission (FTC) is a privacy regulator, sure. But it’s not out to get the good guys trying to do the right thing. It’s primary concern is making sure organizations are keeping the privacy promises they make to consumers. That was how Federal Trade Commissioner Maureen Ohlhausen kicked off her keynote address at the IAPP’s preconference session at RSA, “Engineering Privacy: Why Security Isn’t Enough.” Read More

The Privacy Advisor

Is There a Future for Data-Transfer Interoperability?

(Apr 20, 2015) The hour was late: Past 5 p.m. on the last day of a conference that saw attendees passionately talking shop for what seemed like 48 hours straight. Yet the conversation continued at the Data Protection Intensive. Hands remained raised for questions. Global CPOs sat forward in their seats and whispered commentary amongst themselves. In front of them, Dutch DPA Jacob Kohnstamm, Sidley Austin Partner and former U.S. Commerce Department General Counsel Cam Kerry and Unilever CPO Steven Wright were simply discussing a topic too important to abandon: Will we ever see a global marketplace with data-transfer interoperability? Read More

The Privacy Advisor

How To Prepare for the GDPR? Spring Cleaning

(Apr 16, 2015) While acknowledging it might be a little early in the game to start any kind of meaningful pragmatic planning, panelists spanning various sectors used their session at the IAPP Europe Data Protection Intensive Wednesday to give privacy pros some practical tips on “How To Implement the Data Protection Regulation in Practice,” taking educated guesses on how certain portions of the regulation will come to reality. Read More

The Privacy Advisor

Five Questions for Your Marketing Department

(Apr 16, 2015) As part of a larger presentation here at the IAPP Europe Data Protection Intensive in London, a particular slide caught the attention of attendees. The panel’s focus was on “Transparency in Marketing,” but in many ways it all seemed to boil down to a couple of basic questions: Is what your marketing department is doing transparent to the privacy team? Is what your marketing department is doing transparent to your customers? And the way to get the answers to those questions popped up on a slid... Read More

The Privacy Advisor