Balancing Privacy and Digitization
Download as PPTX, PDF1 like235 views
The document discusses the balance between privacy and digitization, highlighting the types of personal data collected and the risks associated with privacy breaches. It outlines various laws protecting privacy, including the GDPR and local regulations, and emphasizes the importance of understanding these laws to maintain privacy amid increasing data collection. Companies are encouraged to assess their data practices, update policies, and educate themselves and customers about data usage and privacy rights.
Balancing Privacy and Digitization
- 1. Balancing Privacy and Digitization Maintaining privacy in and increasingly digitized environment 1
- 4. What data? Data about you • Name • Nationality/Residency • Age • Likes and Dislikes • Relatives • Associates • Medical Information • Etc. Data about what you do • Location/Travel (history and current) • Frequent websites/apps • Entertainment you like (music, movies, parties/events, etc.) • Voice 4
- 6. What is it? Digitization • Is the process of moving to a digital business • It is the use of digital technologies to change a business model and provide new revenue and value- producing opportunities *Gartner.com 6
- 7. Data as an Asset • Data isn’t just information on customers anymore • Assets can be used to make money • Assets can be used to acquire more assets • Data informs decisions Acquire Curate EnhanceAnalyze Monetize 7
- 8. Privacy 8
- 9. What is it? Privacy • (IT) what data can be shared with a third party • Being free from unwanted or undue intrusion or disturbance in one’s private life *TechTarget.com *Dictionary.com 9
- 10. Threats and Risks to Privacy • Web Tracking • Data Collections • Lack of Security • Connected Everything – IoT • Public/Free Wi-Fi • Social Networking • Social Engineering Threats: • Discrimination • Disclosure of Information • Lack of Anonymity • Movement of Data Risks: 10
- 11. What Laws Are There To Protect Privacy? • The Jamaican Constitution, The Charter of Fundamental Rights and Freedoms – Chapter 3 • The International Covenant on Civil and Political Rights (ICCPR) – Article 17 Local Laws • General Data Protection Regulation (GDPR) - EU • The Data Protection Act – UK • Personal Information Protection Act – Bermuda • Data Protection Law - Cayman Islands International/Regional Laws 11
- 12. The Balance 12
- 13. Can We Really Have Privacy? Individuals Companies| 13
- 14. Awareness is Key 14 Understand the laws that protect/guide you Understand what you are signing/agreeing to | your obligations to customers Understand the technology you are using Ensure your technology is up to date
- 16. Advancing Business Insights With Privacy in Mind Privacy Systems Analytics Laws People 16
- 17. How Does Your Company Use Data? 17 Process Perform some assessment or transformation of data Control Collect and store data and may process data None Manual business, paper based business *GDPR
- 18. Even More Analytics 18 Identify • Map data on customers • Create flags Classify • Region/Jurisdiction • Exemption/Do not process Action • Update existing analytics • Educate and enforce
- 19. What else can we do? 19 Define what a breach is Develop communication strategy Update policies Prepare/Update privacy clauses Prepare privacy request processes
- 20. Thank you Q&A 20
- 21. Sources • https://www.csoonline.com/article/2130877/data-breach/the-biggest-data- breaches-of-the-21st-century.html • https://www.gartner.com/it-glossary/digitalization/ • https://searchdatamanagement.techtarget.com/definition/privacy • http://www.dictionary.com/browse/privacy • https://www.pocket-lint.com/apps/news/143404-7-biggest-privacy-threats- online • https://searchsecurity.techtarget.com/tip/A-look-at-the-key-GDPR- requirements-and-how-to-meet- them?src=5737362&asrc=EM_ERU_94056887&utm_content=eru-rd2- rcpE&utm_medium=EM&utm_source=ERU&utm_campaign=20180426_ERU %20Transmission%20for%2004/26/2018%20(UserUniverse:%202572767) 21
Editor's Notes
- #2: Welcome everyone Thank you for joining us today
- #3: Very timely topic considering the EU’s General Data Protection Regulation (GDPR) and Cambridge Analytica’s data privacy issues currently in the news. As Information System Auditors/Data Analysts/Business Analysts here at Symptai – changes like this are important/interesting to us – Governance Previous examples of breaches…
- #4: https://www.csoonline.com/article/2130877/data-breach/the-biggest-data-breaches-of-the-21st-century.html image - https://imgflip.com/s/meme/X-Everywhere.jpg
- #5: Pros and Cons
- #7: https://www.gartner.com/it-glossary/digitalization/ Image - https://openclipart.org/detail/289225/clipboard-check Image - https://openclipart.org/detail/296351/desktop-computer-3
- #8: KYC – Know Your Customer TRN – Tax Registration Number
- #10: https://searchdatamanagement.techtarget.com/definition/privacy http://www.dictionary.com/browse/privacy
- #11: https://www.pocket-lint.com/apps/news/143404-7-biggest-privacy-threats-online
- #12: Data Subject’ s Right to: Know Prevent Processing Likely to Cause Damage or Distress Prevent Processing for Purposes of Direct Marketing Constrain Automated Decision Taking Rectification of Inaccuracies Data Controller Registration Appointment of Data Protection Officer Adherence to Processing Standards Data Protection Impact Assessment Prosecution, Penalties, Liabilities ICCPR - provides that no one shall be subjected to an arbitrary or unlawful interference with his or her privacy
- #13: http://freevector.co/vector-icons/business/business-scale-with-a-man-and-resources-gears-symbol.html
- #14: https://qph.fs.quoracdn.net/main-qimg-fab05bfbe22c6f8941c8a400efdd9135 https://www.cqse.eu/images/company/company-landscape.png
- #19: 1 know what data you currently have on customers and what jurisdiction they belong to 2 flags can help to easily manage info on the data you do or do not have 3 know which laws apply to who 4 id quickly and easily remove persons from analytics or even from system if requested 5 refine existing analytics using the map and flags and exemptions | do analytics assume too much discrimination 6 educate customers and staff (personal and office data security) | have someone responsible (data protection officer) https://searchsecurity.techtarget.com/tip/A-look-at-the-key-GDPR-requirements-and-how-to-meet-them?src=5737362&asrc=EM_ERU_94056887&utm_content=eru-rd2-rcpE&utm_medium=EM&utm_source=ERU&utm_campaign=20180426_ERU%20Transmission%20for%2004/26/2018%20(UserUniverse:%202572767)
- #21: Call to Action!