Getting to the Truth about Privacy & Security Ann Cavoukian Ph.D. Information and Privacy Commissioner/Ontario Privacy & Security: Totally Committed November.

Slides:

Advertisements

Similar presentations

Office of the Information and Privacy Commissioner, Ontario, Canada

Advertisements

29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY.

BUSINESS B2 Ethics.

And the finer details of patient privacy TCH Confidential Understanding HIPAA.

1. As a Florida KidCare community partner families entrust you to not only help them navigate the Florida KidCare system but to keep the information they.

NAU HIPAA Awareness Training

National Security in a Post-9/11 World: The Rise of Surveillance, … the Demise of Privacy? Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario.

PIPA PRESENTATION PERSONAL INFORMATION PROTECTION ACT.

VIU Workshop: Creating a Culture of Privacy Awareness June 12, 2013 By Justin Hodkinson OIPC Policy Analyst/Investigator Office of the Information & Privacy.

Securing North America’s Power Grid Dr. Ann Cavoukian, Ontario information and privacy commissioner Mark Fabro CISSP, CISM, President and Chief Security.

Building Privacy into Health Information Technology Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario Information Technology.

Surveillance and Privacy on the Internet Presented by Jill Homes and Marion Barry.

The Privacy Imperative: Go Beyond Compliance to Competitive Advantage Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario Bell.

Seamless Customer Experience: What Will It Take? Offering Security and Privacy Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario The Access.

Preserving Privacy in a Security-Centric World Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario Canadian Information Processing.

Privacy in Ontario Brian Beamish Office of the Information and Privacy Commissioner/Ontario Presentation to Security Canada Central 2002 International.

Business Plug-In B7 Ethics.

Biometrics & the Privacy Paradigm: Separating Fact from Fiction Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario Security.

1 The Engineer as a Professional Privacy. 2 After reading the articles please answer the following questions. 1) Is privacy a concern that engineers have.

Getting to Privacy A Presentation to: Presented by: Mike Gurski.

Taking Steps to Protect Privacy A presentation to Hamilton-area Physiotherapy Managers by Bob Spence Communications Co-ordinator Office of the Ontario.

SmartPrivacy for the Smart Grid Catherine Thompson Office of the Information and Privacy Commissioner Ontario, Canada Practical Smart Grid Security (SG-11)

Exposing the Myths, Exploring the Solutions Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario Privacy & Security: Seeking the.

E-Commerce Barriers in a Networked World Mike Gurski Senior Policy & Technology Advisor Information & Privacy Commission, Ontario Canada CITO October 10.

Public Sector Case Studies: THE ESTABLISHMENT OF A PRIVACY OFFICE.

Privacy by Design: Building Trust into Technology Ann Cavoukian, Ph.D. Information and Privacy Commissioner/Ontario 1 st Annual Privacy & Security Conference.

Privacy: Do We Need It? Mike Gurski Senior Policy & Technology Advisor Information & Privacy Commission, Ontario Canada JetNet September 25, 2001 Ottawa.

2 1.Client protection principles 2.Principle #6 in practice 3.Two components of protecting client data 4.Participant feedback 5.Practitioner lessons and.

The Privacy Imperative: Go Beyond Compliance to Competitive Advantage Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario Cambridge.

The Privacy Payoff: Build Your Business By Building Customer Trust Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario Coast.

Privacy and Information Management ICT Guidelines.

Privacy of Home Energy Usage Data Jim Williams June 26, 2012 Jim Williams June 26, 2012.

Chapter © 2009 Pearson Education, Inc. Publishing as Prentice Hall.

The Privacy Imperative: Go Beyond Compliance to Competitive Advantage Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario Transcend.

Federal Trade Commission required to issue and enforce regulations concerning children’s online privacy. Initial COPPA Rule effective April 21, 2000;

Part 6 – Special Legal Rights and Relationships Chapter 35 – Privacy Law Prepared by Michael Bozzo, Mohawk College © 2015 McGraw-Hill Ryerson Limited 34-1.

Exposing the Myths, Exploring the Solutions Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario Privacy & Security: Seeking the.

Initial reflections of the privacy commissioner on Ontario’s draft privacy bill Ann Cavoukian, Ph.D. Information and Privacy Commissioner/Ontario Toronto.

Privacy Professional Practice for Computer Science Guest Lecture, 05 March 2007 Philippa Lawson Director, Canadian Internet Policy & Public Interest Clinic.

The Privacy Imperative: Go Beyond Compliance to Competitive Advantage Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario IABC.

Health Information Protection Act: A Major Step in Healthcare Privacy Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario St.

PricewaterhouseCoopers 1 Administrative Simplification: Privacy Audioconference April 14, 2003 William R. Braithwaite, MD, PhD “Doctor HIPAA” HIPAA Today.

1 Ethical Issues in Computer Science CSCI 328, Fall 2013 Session 15 Privacy as a Value.

Patient Confidentiality and Electronic Medical Records Ann J. Olsen, MBA, MA Information Security Officer and Director, Information Management Planning.

PIPEDA and Receivables Management Robin Gould-Soil Receivables Management Association of Canada November 16, 2011.

McGraw-Hill/Irwin © 2006 The McGraw-Hill Companies, Inc. All rights reserved. 2-1 BUSINESS DRIVEN TECHNOLOGY Business Plug-In B2 Ethics.

Ontario’s New Health Information Protection Act: The Wait is Over Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario Emergis.

Malcolm Crompton APEC Information Privacy Framework: review, impact, & progress APEC Symposium on Information Privacy Protection in E Government & E Commerce.

Go Beyond Compliance to Competitive Advantage: Make Privacy Pay Off Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario IFB Toronto.

Information Security IBK3IBV01 College 2 Paul J. Cornelisse.

LEARNING FROM POLICE INVESTIGATIONS. Be Professional Follow the Law – Don’t deviate You are in the spotlight Expect to be challenged You are in charge!

Fred Carter Senior Policy & Technology Advisor Information and Privacy Commissioner Ontario, Canada MISA Ontario Cloud Computing Transformation Workshop.

Organizing a Privacy Program: Administrative Infrastructure and Reporting Relationships Presented by: Samuel P. Jenkins, Director Defense Privacy Office.

1 The Privacy Impact Assessment Guidelines Guy Herriges Manager, Information and Privacy Office of the Corporate Chief Strategist, MBS November 2000.

APEC Privacy Framework “The lack of consumer trust and confidence in the privacy and security of online transactions and information networks is one element.

Health Information Protection Act: A Major Step Forward in Healthcare Privacy Ann Cavoukian, Ph.D. Information & Privacy Commissioner/Ontario.

Data protection—training materials [Name and details of speaker]

Service Organization Control Reports What Have We Learned? Chris Bruhn DIRECTOR, IT RISK SERVICES, BKD, LLP SAS 70 ENDS EXIT TO SSAE 16.

INFORMATION ASSURANCE POLICY. Information Assurance Information operations that protect and defend information and information systems by ensuring their.

Data Protection Regulation

Health Information Protection Act An Overview

Privacy Education Session CMHA-WECB/CCHC Volunteers/Students

Richard Purcell Corporate Privacy Officer Microsoft Corporation

2016 Annual CPNI Training CPNI & PI Awareness Beth Slough,

 How does GDPR impact your business? Pro Tip: Pro Tip: Pro Tip:

Privacy Principles Melinda Clarke.

Presentation transcript:

Getting to the Truth about Privacy & Security Ann Cavoukian Ph.D. Information and Privacy Commissioner/Ontario Privacy & Security: Totally Committed November 7, 2002 Toronto

The Privacy/Security Relationship  Privacy relates to personal control over one’s personal information  Security relates to organizational control over information  These represent two overlapping, but distinct activities

Security  Privacy Security  Privacy What Privacy is Not

The Foundation for Information Security  The rights of data users or their surrogates  Functions: –Authentication –Authorization –Confidentiality –Data Integrity –Non-repudiation –Availability

The Foundation: Fair Information Practices  Accountability  Identifying Purposes  Consent  Limiting Collection  Limiting Use, Disclosure, Retention  Accuracy  Safeguards  Openness  Individual Access  Challenging Compliance

Privacy & Security: A Visual

The Security/Privacy Dilemma

Privacy is more than Policy  The misconception: –Privacy is essentially a policy issue while security is a technology issue –PIA’s can avoid the technology design and implementation components as long as they identify the risks and privacy issues

Privacy/Policy, Security/Technology  Privacy is essentially a policy issue  Security is a technology issue  Oh yeah? What about:

Most Individuals Don’t Care About Privacy  The misconception: “What's the point of regulating Internet privacy? Consumers sure don't care.” The Privacy Hoax Eric Goldman The Privacy Hoax Eric Goldman, Forbes

Wrong: They do Care  It doesn’t take much for people to get really concerned about a company’s…privacy practices. Johnathan Gaw, IDC Corp. March 29, 2001

Well, maybe they care, but it’s not my responsibility.  Who’s responsibility is it? –CEO? –IM/IT? –Line managers? –3 rd Party Contractors? –Front-line staff? –Vendors/Consultants?

PRIVACY VS. BRAND VALUE CAN $679 M PRIVACY VS. SHAREHOLDER VALUE CAN $979 M Privacy Brand Valuation Privacy Value vs. Overall Value Privacy accounts for an estimated 14% of overall Brand Value, and 7% of overall Shareholder Value,

It’s not me, it’s the other guy  The misconception: –It is up to the application suppliers to provide appropriate safeguards as part of their products and services

We Don’t Need a CPO  The misconception: –Things are just fine, we don’t need a CPO –OK, things could be better, so give the job to the Chief Security Officer

Privacy is Primarily a Public Relations Exercise  The misconception: –If we have a privacy policy we are home free. –We have a privacy policy now – we’ll get to the details next quarter.

Conclusion  In order to address privacy effectively, you need to clear your mind of the misconceptions  Privacy and security are both essential, they’re just not the same.

How to Contact Us Ann Cavoukian Ph.D. Information & Privacy Commissioner/Ontario 80 Bloor Street West, Suite 1700 Toronto, Ontario M5S 2V1 Phone: (416) Web: