The Only Privacy Framework Your Organization Needs

Digital privacy has become a hot-button issue especially after GDPR and ongoing investigations of the social media giant, Facebook. How can organizations prepare for further online privacy regulations? One way is to consider implementing Privacy by Design (PbD). Privacy expert, Dr. Ann Cavoukian developed the framework of PbD in 1995. The concept proactively builds privacy into the design specifications of information technologies, networked infrastructure and business practices. PbD claims to provide organizations with the strongest protection possible. In 2010, officials at the International Conference of Data Protection Authorities and Privacy Commissioners passed a resolution recognizing PbD as a key component of fundamental privacy protection. The Federal Trade Commission also included Privacy by Design as one of the three recommended practices for protecting online privacy.

The framework has seven foundational principles:

1)Proactive not reactive: preventative not remedial

PbD anticipates risks and prevents privacy invasive events before they occur. The framework was established to proactively consider the risk, so they do not arise.

2) Privacy as the default setting

Personal data is private from the beginning. This means an individual does not need to take an additional step to ensure their data is private.

3)Privacy embedded into design
Privacy is also embedded into the design and architecture of IT systems and business practices. Developing privacy initiatives in both IT systems and business practices provides an holistic plan for organizations.

4)Full functionality: positive-sum, not zero-sum

The framework pursues to accommodate all legitimate interests and objectives in a positive-sum “win-win” manner. Organizations do not have to trade-off on things like privacy and security but can have both.

5)End-to-end security: full lifecycle protection

PbD, embeds security into the system from beginning to the end. This means security will extend the systems entire lifecycle.

6)Visibility and transparency: keep it open

Visibility and transparency are also important in PdB. All stakeholders must be fully aware of personal data being collected, and for what purpose(s).

7)Respect for user privacy: keep it user-centric

PbD requires architects and operators to keep the interests of the individual top-of-mind. This is done effectively by offering such measures as strong privacy defaults, appropriate notice, and empowering user-friendly options. The goal is to ensure user-focused privacy.

One of the critical principles of PbD is full lifecycle protection.  The framework urges organizations to plan every step of data management, which includes how to handle retired IT equipment. The best way to manage your organization’s retired IT equipment is by partnering with a certified ITAD. Liquid Technology is an eStewards, and NAID certified ITAD vendor; we provide secure and auditable data destruction. To learn more about our data destruction services visit: http://www.liquidtechnology.net/secure-hard-drive-data-destruction/