personal data and the organization ......control cross-device tracking manage customer expectations...

1
CONTEXT META DATA LOCATION SOCIAL MEDIA COMMUNICATIONS CAMERAS VIDEO PASSWORDS PHOTO CONTACT INFO Data is constantly generated across every aspect of our lives and our environment. The complexity of sources and types will continue to grow at an exponential rate, and as the variety of data produced expands, so will the types of data being used to support critical daily activities. COMPUTER SMARTPHONE WEB BROWSING LAPTOP TABLET WEARABLES SMART CITY ED TECH CONNECTED CARS, SCOOTERS WEB SITES, MOBILE APPS SMART HOME HEALTH DATA STUDENT DATA CATEGORY FINANCIAL BIOMETRIC IDENTIFIABLE AGGREGATED IDENTIFIED TYPE OF DEVICE, SENSOR, PLATFORM STATUS OBSERVED INFERRED DATA BROKERS PARTNERS EMPLOYEES CUSTOMERS PROSPECTS VENDORS CONSUMERS STATE PSEUDONYMOUS DESCRIPTION GOVERNMENT RESTRICTED PUBLIC DATA SENSITIVE CONFIDENTIAL SPECIAL CATEGORIES www THE EVER-EXPANDING DATA LANDSCAPE As more data is collected, connected, processed, and used, new risks emerge. Organizations should weigh these new costs, understand new responsibilities, and make benefit risk decisions consciously and fairly. MEDIA SCRUTINY PROFILING COMPATIBLE USES SUPPORT STRONG DATA GOVERNANCE MANAGE GLOBAL DATA FLOWS REPORTING ENSURE GOOD DATA HYGIENE ENSURE DATA INTEGRITY ENSURE DATA AVAILABILITY FRAUD DETECTION DATA BREACH CONFIDENTIALITY NETWORK & SYSTEM MANAGEMENT DATA COLLECTION PREPARE FOR NEW LAWS PROVIDE INPUT ON PROPOSED LEGISLATION ASSESS LAWFUL BASIS ANTITRUST & COMPETITION PARTNERS & VENDORS HANDLING DATA NEW ACQUISITIONS/MERGERS SPECIAL CATEGORIES /SENSITIVE DATA AUTOMATED PROCESSING NAVIGATE MULTIPLE STANDARDS COMPLY WITH LOCAL, NATIONAL, INTERNATIONAL LAWS ENSURE ETHICAL DATA COLLECTION & USAGE ENSURE ACCEPTABLE ADVERTISING PRACTICES (ONLINE IDENTIFIERS, TRACKING METHODOLOGIES, TARGETING, PROFILES) ENSURE USER PRIVACY, CHOICE, CONTROL CROSS-DEVICE TRACKING MANAGE CUSTOMER EXPECTATIONS (DON’T BE CREEPY) TECHNOLOGY COMMUNITY & SOCIETY ENSURE PROPER DATA OWNERSHIP & DATA RIGHTS LEGAL & REGULATORY BRAND & CUSTOMERS PROTECT FROM DATA MISUSE PROTECT FROM DISCRIMINATION & BIAS CHILDREN & TEENS GROUP PRIVACY HARMS HUMAN RIGHTS SENSITIVE DATA, VULNERABLE POPULATIONS, SEXUAL PRIVACY PROTECT FROM DISCLOSURE OF SENSITIVE DATA THAT EXPOSES VULNERABLE POPULATIONS & SITUATIONS MANAGE GAP BETWEEN EMERGING TECHNOLOGY & REGULATION ENSURE TECHNOLOGY FEATURES ALIGN WITH USER EXPECTATIONS FAIR ENGAGEMENT/ ADDICTIVE BEHAVIORS ALGORITHMIC ACCOUNTABILITY MACHINE LEARNING BIAS, EXPLAINABILITY RESPONSIBLE A/B TESTING AVOID DARK PATTERNS SCRUTINIZE AUTOMATED PROCESSING ETHICS OF AUTONOMY DATA RISKS & RESPONSIBILITIES ? ? ? ? ? FUTURE RISKS DATA ACCESS & USAGE ENSURE INDIVIDUAL PRIVACY & SAFETY PRIVACY NOTICE LOCALIZATION/ CONFLICT OF LAWS LE & REGULATORY DEMANDS BRAND Risks are managed by people, tools, and systems in order to incorporate Ethics, Privacy, Security, and Trust and ensure processing is lawful, transparent, and fair. An accountable organization manages risk and benefits so that data can be used to support a mission. ORGANIZATIONAL TOOLS ETHICS TRUST SECURITY PRIVACY PRIVACY TEAM DATA MINIMIZATION POLICIES INVESTIGATIONS ACCOUNTABILITY TRANSPARENCY GOVERNANCE TRAINING FIPPS CONSUMER & PUBLIC EDUCATION SUBJECT ACCESS REQUESTS VENDOR & PARTNER DUE DILIGENCE DE-IDENTIFICATION PRIVACY IMPACT ASSESSMENTS COMPLIANCE DASHBOARDS CODES OF CONDUCT PRIVACY BY DESIGN LEGAL REVIEW POLICY TEAM SELF REGULATION BEST PRACTICES RISK OFFICERS CONSENT MANAGEMENT ETHICAL REVIEWS DATA INVENTORY CERTIFICATION DATA MAPPING & DISCOVERY CONTROLS INFORMATION GOVERNANCE CPO, DPO & PRIVACY TEAM PRIVACY AUDITS DELETION MANAGEMENT ESCALATION RISK ASSESSMENTS SIMULATION DRILL Data processing shall be proportionate to the legitimate purpose pursued and reflect a fair balance between all interests concerned and the rights and freedoms at stake. THE RESPONSIBLE USE OF DATA PEOPLE, TOOLS, & SYSTEMS RESEARCH ANALYTICS PROGRESS MARKETING & ADVERTISING PERSONALIZATION & CUSTOMIZATION PRODUCE GOODS PROVIDE SERVICES IMPROVEMENT DRIVING NEW PRODUCT & SERVICE DEVELOPMENT INNOVATION BRAND DEVELOPING & STRENGTHENING REPUTATION SOCIAL RESPONSIBILITY SUSTAINABLE DEVELOPMENT BY DELIVERING ECONOMIC, SOCIAL, & ENVIRONMENTAL BENEFITS FOR ALL STAKEHOLDERS INCREASING REVENUE & MARKET SHARE GROWTH INTEGRITY, AVAILABILITY, CONFIDENTIALITY MISSION V I S I O N DATA RISKS DATA BENEFITS v1.0 / ©2019 FUTURE OF PRIVACY FORUM With data being increasingly core to organizational success, managing data risk has become central to realizing its rewards. Current and emerging risks pose powerful and complex challenges to individuals, organizations and society. Personal Data, processed lawfully, fairly and transparently, enables business, government, researchers, and NGOs to better serve their mission. Responsible uses of data benefit individuals and society across almost every sector of the economy. PERSONAL DATA ORGANIZATION: STEWARDSHIP AND STRATEGY and the Produced by FPF.ORG

Upload: others

Post on 22-May-2020

1 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: PERSONAL DATA and the ORGANIZATION ......CONTROL CROSS-DEVICE TRACKING MANAGE CUSTOMER EXPECTATIONS (DON’T BE CREEPY) TECHNOLOGY COMMUNITY & SOCIETY ENSURE PROPER DATA OWNERSHIP

CONTEXTMETA DATA

LOCATION

SOCIALMEDIA

COMMUNICATIONS

CAMERAS

VIDEO

PASSWORDS

PHOTOCONTACT

INFO

Data is constantly generated across every aspect of our lives and our environment. The complexity of sources and types will continue to grow at an exponential rate, and as the variety of data produced expands, so will the types of data being used to support critical daily activities.

COMPUTER

SMARTPHONE

WEBBROWSING

LAPTOP

TABLET

WEARABLES

SMART CITY

ED TECH

CONNECTEDCARS, SCOOTERS

WEB SITES, MOBILE APPS

SMART HOME

HEALTHDATA

STUDENTDATA

CATEGORY

FINANCIAL

BIOMETRIC

IDENTIFIABLE

AGGREGATEDIDENTIFIED

TYPE OF DEVICE,SENSOR,

PLATFORM

STATUSOBSERVED

INFERRED

DATABROKERS

PARTNERS

EMPLOYEESCUSTOMERS

PROSPECTSVENDORS

CONSUMERS

STATE

PSEUDONYMOUS

DESCRIPTION

GOVERNMENT RESTRICTED

PUBLIC DATA

SENSITIVE

CONFIDENTIAL

SPECIALCATEGORIES

w w w

THE EVER-EXPANDINGDATA LANDSCAPE

As more data is collected, connected, processed, and used, new risks emerge. Organizations should weigh these new costs, understand new responsibilities, and make benefit risk decisions consciously and fairly.

MEDIA SCRUTINY

PROFILING

COMPATIBLE USES

SUPPORTSTRONG DATAGOVERNANCE

MANAGEGLOBAL DATA

FLOWS

REPORTING

ENSURE GOODDATA HYGIENE

ENSUREDATA INTEGRITY ENSURE DATA

AVAILABILITY

FRAUDDETECTION

DATABREACH

CONFIDENTIALITY

NETWORK& SYSTEM

MANAGEMENT

DATACOLLECTION

PREPAREFOR

NEW LAWS

PROVIDE INPUTON PROPOSEDLEGISLATION

ASSESSLAWFUL BASIS

ANTITRUST& COMPETITION

PARTNERS& VENDORS HANDLING

DATA

NEW ACQUISITIONS/MERGERS

SPECIALCATEGORIES

/SENSITIVE DATA

AUTOMATED PROCESSING

NAVIGATEMULTIPLE

STANDARDS

COMPLY WITHLOCAL, NATIONAL,

INTERNATIONALLAWS

ENSURE ETHICAL DATA COLLECTION & USAGE

ENSURE ACCEPTABLE ADVERTISING

PRACTICES (ONLINE IDENTIFIERS,

TRACKING METHODOLOGIES,

TARGETING, PROFILES)

ENSURE USER PRIVACY, CHOICE,

CONTROL

CROSS-DEVICE TRACKING

MANAGE CUSTOMER

EXPECTATIONS (DON’T BE CREEPY)

TECHNOLOGY

COMMUNITY& SOCIETY

ENSURE PROPERDATA OWNERSHIP

& DATA RIGHTS

LEGAL &REGULATORY

BRAND & CUSTOMERS

PROTECT FROMDATA MISUSE

PROTECT FROMDISCRIMINATION

& BIASCHILDREN

& TEENS

GROUPPRIVACYHARMS

HUMANRIGHTS

SENSITIVE DATA, VULNERABLE POPULATIONS,

SEXUAL PRIVACY

PROTECT FROM DISCLOSURE

OF SENSITIVE DATA THAT EXPOSES VULNERABLE

POPULATIONS & SITUATIONS

MANAGE GAP BETWEEN

EMERGING TECHNOLOGY

& REGULATION

ENSURE TECHNOLOGY

FEATURES ALIGN WITH USER

EXPECTATIONS

FAIR ENGAGEMENT/ADDICTIVE

BEHAVIORS

ALGORITHMICACCOUNTABILITY

MACHINE LEARNING BIAS, EXPLAINABILITY

RESPONSIBLEA/B TESTING

AVOIDDARK

PATTERNS

SCRUTINIZEAUTOMATEDPROCESSING

ETHICS OFAUTONOMY

DATA RISKS &RESPONSIBILITIES

? ??? ?

FUTURE RISKS

DATA ACCESS& USAGE

ENSUREINDIVIDUAL

PRIVACY& SAFETY

PRIVACY NOTICE

LOCALIZATION/CONFLICT OF LAWS

LE & REGULATORYDEMANDS

BRAND

Risks are managed by people, tools, and systems in order to incorporate Ethics,

Privacy, Security, and Trust and ensure processing is lawful, transparent, and fair.

An accountable organization manages risk and benefits so that data can be used

to support a mission.

ORGANIZATIONALTOOLS

ETHICS TRUST SECURITYPRIVACYPRIVACYTEAM

DATAMINIMIZATION

POLICIES

INVESTIGATIONS

ACCOUNTABILITY

TRANSPARENCY

GOVERNANCE

TRAINING

FIPPSCONSUMER& PUBLIC

EDUCATION

SUBJECT ACCESS

REQUESTS

VENDOR & PARTNER

DUE DILIGENCE

DE-IDENTIFICATION PRIVACY IMPACT ASSESSMENTS

COMPLIANCE DASHBOARDS

CODES OFCONDUCT

PRIVACYBY DESIGN

LEGALREVIEW

POLICYTEAM

SELFREGULATION

BESTPRACTICES

RISKOFFICERS CONSENT

MANAGEMENT

ETHICALREVIEWS

DATAINVENTORY

CERTIFICATION

DATA MAPPING

& DISCOVERYCONTROLS

INFORMATION GOVERNANCE

CPO, DPO &PRIVACY TEAM

PRIVACYAUDITS

DELETION

MANAGEMENTESCALATION RISK

ASSESSMENTS

SIMULATIONDRILL

Data processing shall be proportionate to the legitimate

purpose pursued and reflect a fair balance between all interests

concerned and the rights and freedoms at stake.

THE RESPONSIBLEUSE OF DATAPEOPLE, TOOLS, & SYSTEMS

RESEARCHANALYTICS PROGRESSMARKETING& ADVERTISING

PERSONALIZATION& CUSTOMIZATION

PRODUCEGOODS

PROVIDESERVICES

IMPROVEMENT

DRIVING NEW PRODUCT & SERVICE DEVELOPMENT

INNOVATION

BRANDDEVELOPING

& STRENGTHENING REPUTATION

SOCIALRESPONSIBILITY

SUSTAINABLE DEVELOPMENT BY DELIVERING ECONOMIC, SOCIAL, & ENVIRONMENTAL

BENEFITS FOR ALL STAKEHOLDERS

INCREASING REVENUE & MARKET SHARE

GROWTH

INTEGRITY, AVAILABILITY,CONFIDENTIALITY

MISSION

VISIONDATA RISKS DATA BENEFITS

v1.0 / ©2019 FUTURE OF PRIVACY FORUM

With data being increasingly core to organizational success, managing data risk has become central to realizing its rewards. Current and emerging risks pose powerful and complex challenges to individuals, organizations and society.

Personal Data, processed lawfully, fairly and transparently, enables business, government, researchers, and NGOs to better serve their mission. Responsible uses of data benefit individuals and society across almost every sector of the economy.

PERSONAL DATA ORGANIZATION: STEWARDSHIP AND STRATEGYandthe

Produced by

FPF.ORG