Last year the National Cybersecurity Alliance (NCA) expanded Data Privacy Day, celebrated each Jan. 28, into Data Privacy Week because protecting sensitive data in an increasingly digital-first world is becoming a top priority.
“An unfathomable excess of online data is generated every day as the global economy churns; individuals take to social media; and modern life strives to keep pace with advancing technology,” says the NCA. “Securing that data is rapidly becoming a necessity as companies recognize it is an asset and realize the potential value in collecting, using, and sharing it.”
Data Privacy Day in the United States and Canada was first celebrated in 2008, following on the heels of Europe’s Data Protection Day, which was started in 2006.
Jan. 28 was chosen as Data Privacy Day and Data Protection Day each year to commemorate the Jan. 28, 1981 signing of Convention 108, the first legally binding international treaty dealing with privacy and data protection.
The increasing importance of data privacy is evident in the expansion of Data Privacy Week.
“The goal of Data Privacy Week is to spread awareness about online privacy. We think data privacy should be a priority both for individuals and organizations. Our goal is twofold: we want to help citizens understand that they have the power to manage their data and we want to help organizations understand why it is important that they respect their users’ data,” says the NCA.
Data privacy, also known as information privacy, is the branch of data security involving properly handling the collection, storage, and dissemination of information — including to third parties.
“In recent years, many companies have learned the importance of data privacy through breaches and privacy failures. To avoid such calamities, having protective measures and strategies in place is crucial. From the smallest of businesses to major corporations, everyone is at risk,” says the NCA. “As the data economy continues to evolve, companies find the roles of data protection officers and similar professionals becoming a demand. This demand intensifies with new regulations and standards on information security.”
In the U.S., there is legislation in place regarding data privacy and protection in many industries, including:
“While there are several regulations at state and federal levels, consumer privacy is regularly compromised by companies and governments. We are poised to see a significant increase in regulation in the future. As data protection regulation grows worldwide, the demand for global privacy and requirements also increases,” says NCA.
Organizations can take three central steps to protecting data privacy:
Here is a closer look at each area:
Conduct an Assessment
Adopt a Privacy Framework
o AICPA Privacy Management Framework
o ISO/IEC 27701 – International Standard for Privacy Information Management
Educate Employees
“Integrating data privacy training into your onboarding process and general training programs is a first step. Implement free security tools available on the market such as VPNs, encrypted storage solutions, and password managers. You can reduce vulnerability with these tools that are relatively easy to install and operate,” says the NCA. “Next, be sure to monitor your network for suspicious activity and potential attacks. These breaches can happen to organizations of all sizes.”
Consumers can protect their data privacy by taking these steps:
Here is a closer look at all three:
Know the Tradeoff Between Privacy and Convenience
Adjust Privacy Settings to Your Comfort Level
Protect Your Data
“On a consumer level, there are some steps to take to improve your privacy despite not having much control over how organizations store and secure your data. A good first protective measure to take is in line with businesses. Password managers and VPNs are available on an individual level to encrypt your Internet connection and keep sensitive information safe,” says the NCA. “Also, be sure to back data often to secure it in the event of a compromise. Lastly, ignoring click-bait content and strange requests via email or social media is a simple way to protect your network and data.”
The recommendation(s), advice and contents of this material are provided for informational purposes only and do not purport to address every possible legal obligation, hazard, code violation, loss potential or exception to good practice. Dean & Draper Insurance Agency specifically disclaims any warranty or representation that acceptance of any recommendations or advice contained herein will make any premises, property or operation safe or in compliance with any law or regulation. Under no circumstances should this material or your acceptance of any recommendations or advice contained herein be construed as establishing the existence or availability of any insurance coverage with Dean & Draper Insurance Agency. By providing this information to you, Dean & Draper Insurance Agency does not assume (and specifically disclaims) any duty, undertaking or responsibility to you. The decision to accept or implement any recommendation(s) or advice contained in this material must be made by you.