PRIVACY
INFORMATION PRIVACY
In general, privacy, is the right to be left alone
and to be free of unreasonable personal
intrusions.
information privacy is the right to determine
when, and to what extent, information about
you can be gathered and/or communicated to
others
RULES
1.right to privacy is not absolute and must be
balanced against the needs of the society
2.public’s right to know supersedes the
individuals right of privacy
DIGITAL DOSSIER
electronic profile of you and your habits and the process of forming a digital dossier is
called profiling. Data aggregators (ex. LexisNexis, ChoicePoint)
02
ELECTRONIC SURVEILLANCE
way of tracking people’s activities with the aid of information technology
emerging
technologies facial recognition
(cameras, sensors technology
and readers)
PERSONAL
INFORMATION IN
DATABASES
Modern institutions store information about individuals in
many databased
HOW LONG WILL IT TAKE TO TO WHOM ARE THE
DO YOU KNOW WHERE DATA GIVE N OR SOLD
MAKE A CHANGE?
THE RECORDS ARE?
UNDER WHAT
ARE THE RECORDS CIRCUMSTANCES WILL HOW SECURE ARE THE
ACCURATE? PERSONAL DATA BE DATA AGAINST ACCESS
RELEASED? BY UNAUTHORIZED
CAN YOU CHANGE HOW ARE DATA USED? PEOPLE?
INACCURATE DATA?
PRIVACY CODES AND
POLICIES
OPT-OUT MODEL (PERMITS)
are organization’s guidelines for protecting
OPT-IN MODEL (PROHIBITS)
the privacy of its customers, clients, and
employees
P3P, PRIVACY TOOL
COMPLIANCE
AUDITS
PRIVACY POLICY GUIDELINES
DATA COLLECTION
Data should be collected on individuals only for
the purpose of accomplishing a legitimate
business objective
Data should be adequate, relevant and not
excessive in relation to the business objective
Individuals must give their consent before data
pertaining to them can be gathered. Such
consent may be implied from the individal’s
actions
PRIVACY POLICY GUIDELINES
DATA ACCURACY
Sensitive data gathered on individual should be
verified before they are entered into the
database
Data should be kept current, where and when
necessary
File should be made available so that the
individual can ensure that the dat are correct
In any disagreements about the accuracy of the
data, the individual’s version should be noted
and included with any disclosure of the file
PRIVACY POLICY GUIDELINES
DATA CONFIDENTIALITY
Computer security procedures should be
implemented to ensure against unauthorized
disclosure of data
Third parties should not be given access to data
without the individual’s knowledge or
permission, except as required by law
Disclosure of data, other than the most routine,
should be noted and maintained for as long as
the data are maintained
Data should not be disclosed for reasons
incompatible with business objectives
THANK YOU
FOR TAKING THE TIME TO LEARN ABOUT OUR
DATA PRIVACY AND COMPLIANCE SERVICES
