Saturday, June 19, 2021

Privacy policies need more than words: Cavoukian

Corporate privacy policies are more than words on paper or a Web site, says Ontario’s privacy commissioner – they have to be actively worked on, supported and communicated.

“Privacy policies alone, without a proper strategy for implementation and ongoing compliance procedures, will not protect an organization from privacy risks,” Ann Cavoukian said Wednesday as she released a how-to privacy guide for the private sector and governments.

“The seven recommendations presented in this paper will provide organizations with concrete guidance on how to effectively execute an appropriate privacy policy, and have it reflected in actual practice,” she said in a statement.

The 17-page document builds on Cavoukian’s internationally respected Privacy by Design framework.

The importance of following up on privacy policies was highlighted in July when Elections Ontario publicly confessed that two temporary staff had lost track of two data sticks with the unencrypted personal information on as many as 2.4 million voters.

The department had policies to protect the data, but they weren’t followed.

The seven steps are

–After conducting a privacy impact assessment, implement a policy that reflects your organization’s privacy needs and risks;

–Link each requirement to a concrete actionable item;

–Show how each practice will be implemented;

–Create privacy education and awareness training;

–Designate a central person to answer questions;

–Verify policies and procedures are being followed;

–Have a policy ready in case there’s a privacy breach.

Would you recommend this article?

0
0

Share

Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication. Click this link to send me a note →

Jim Love, Chief Content Officer, IT World Canada
Howard Solomon
Howard Solomon
Currently a freelance writer, I'm the former editor of ITWorldCanada.com and Computing Canada. An IT journalist since 1997, I've written for several of ITWC's sister publications including ITBusiness.ca and Computer Dealer News. Before that I was a staff reporter at the Calgary Herald and the Brampton (Ont.) Daily Times. I can be reached at hsolomon [@] soloreporter.com

Related Tech News