Pbd

Privacy by Design: From Policy to Practice

Many organizations have begun to implement the principles of Privacy by Design. In this paper, we consider the case of the IBM Corporation, an early adopter. It follows IBM’s journey from policy to practice – a transformative story of what can happen when PbD guides the architectural foundation of an enterprise’s operations. While it is not surprising that a complex, multi-national organization such as IBM would benefit from such a discipline, it is important to note that the lessons described are also applicable to organizations of any size.

From Policy to Practice (Japanese)

• Author: Information and Privacy Commissioner/Ontario and IBM
• Date Published: September 30, 2011

• En savoir plus: Privacy by Design: From Policy to Practice

Dispelling the Myths Surrounding De-identification: Anonymization Remains a Strong Tool for Protecting Privacy

• About: Recently, the value of de-identification of personal information as a tool to protect privacy has come into question. Repeated claims have been made regarding the ease of re-identification. We consider this to be most unfortunate because it leaves the mistaken impression that there is no point in attempting to de-identify personal information, especially in cases where de-identified information would be sufficient for subsequent use, as in the case of health research.
  
  The goal of this paper is to dispel this myth — the fear of re-identification is greatly overblown. As long as proper de-identification techniques, combined with re-identification risk measurement procedures, are used, de-identification remains a crucial tool in the protection of privacy.
• Author:
  Ann Cavoukian, Ph.D., Information & Privacy Commissioner, Ontario Canada
  Khaled El Emam, Ph.D., Canada Research Chair in Electronic Health Information, CHEO Research Institute and University of Ottawa
• Date Published: June 16, 2011

• En savoir plus: Dispelling the Myths Surrounding De-identification: Anonymization Remains a Strong Tool for Protecting Privacy

Privacy Risk Management: Building privacy protection into a Risk Management Framework to ensure that privacy risks are managed, by default

• Date Published: April 28, 2010
• About: The idea that privacy – an individual’s right to control the collection, use and disclosure of information about him or herself – may present risk, seems to be a new one to many. That it should be a novel concept to those responsible for managing risk, however, needs to be addressed. Personal information is an asset, the value of which is protected and enhanced by a suite of security practices and business processes. Like other operational risks, those related to the protection of personal information benefit from the scrutiny of a formal risk management discipline.

• En savoir plus: Privacy Risk Management: Building privacy protection into a Risk Management Framework to ensure that privacy risks are managed, by default

Privacy by Design: Essential for Organizational Accountability and Strong Business Practices

• About: Ann Cavoukian, Ph.D., Scott Taylor (Hewlett-Packard), Martin Abrams (Hunton & Williams LLP)
• Date Published: November 2, 2009

• En savoir plus: Privacy by Design: Essential for Organizational Accountability and Strong Business Practices

Fingerprint Biometrics: Address Privacy Before Deployment

• Date Published: November 04, 2008
• About: Organizations considering deployment of biometric technologies, that become more and more widespread, should address important privacy issues beforehand. Commissioner Ann Cavoukian’s new paper dispels some misunderstandings about fingerprint biometric technologies and assists organizations in analyzing biometric-specific privacy issues.

• En savoir plus: Fingerprint Biometrics: Address Privacy Before Deployment

Fact Sheet #12 – Encrypting Personal Health Information on Mobile Devices

• Author: May 01, 2007
• About: Fact Sheet regarding PHIPA issues

• En savoir plus: Fact Sheet #12 – Encrypting Personal Health Information on Mobile Devices

Privacy Guidelines for RFID Information Systems (RFID Privacy Guidelines)

• Date Published: June 19, 2006
• About: This document is intended to serve as privacy “best practices” guidance for organizations when designing and operating Radio-Frequency Identification (RFID) information technologies and systems

• En savoir plus: Privacy Guidelines for RFID Information Systems (RFID Privacy Guidelines)

Incorporating Privacy into Marketing and Customer Relationship Management

• Date Published: May 01, 2004
• About: A Joint Report of the Office of the Information and Privacy Commissioner/Ontario and the Canadian Marketing Association

• En savoir plus: Incorporating Privacy into Marketing and Customer Relationship Management