How to Kickstart a Privacy Program.

NATIONAL Institute of Standards & Technology (U.S.); DATA privacy; DATA protection laws; CIVIL Rights Act of 1964; RIGHT of privacy; GENERAL Data Protection Regulation, 2016

This article discusses the importance of privacy programs and the evolution of privacy laws. It highlights the European Union's role in creating comprehensive privacy protection laws, such as the EU Data Directive and the General Data Protection Regulation (GDPR), which have been adopted by over 160 countries. The article also emphasizes the risks organizations face without a functional privacy program, including reputational harm, monetary loss, and legal consequences. It suggests that organizations can manage these risks by following resources such as the National Institute of Standards and Technology (NIST) privacy framework. The article concludes by recommending steps for organizations to establish or strengthen their privacy programs, including establishing a privacy committee, determining obligations, and implementing policies, privacy-enhancing technologies (PETs), and employee training. [Extracted from the article]

Copyright of Risk Management (00355593) is the property of Risk & Insurance Management Society, Inc. and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)