The Ponemon Institute has released its list of Most Trusted Companies for Privacy. Spoiler alert, they include:
Amazon
American Express
PayPal
Hewlett Packard
IBM
You might also celebrate by joining IAPP and getting access to the Prudence the Privacy Pro comic strip.
https://privacyassociation.org/news/a/guess-what-its-data-privacy-day/
In related news, the FTC has released a Report on the Internet of Things. The report includes the following recommendations for companies developing Internet of Things devices:
- build security into devices at the outset, rather than as an afterthought in the design process;
- train employees about the importance of security, and ensure that security is managed at an appropriate level in the organization;
- ensure that when outside service providers are hired, that those providers are capable of maintaining reasonable security, and provide reasonable oversight of the providers;
- when a security risk is identified, consider a “defense-in-depth” strategy whereby multiple layers of security may be used to defend against a particular risk;
- consider measures to keep unauthorized users from accessing a consumer’s device, data, or personal information stored on the network;
- monitor connected devices throughout their expected life cycle, and where feasible, provide security patches to cover known risks.
And, finally, a move to update ECPA;
• Proponents of updating ECPA, or the Electronic Communications Privacy Act, are using today to renew their call for reform.
“The statute governing access to electronic communications was written in 1986, well before most Americans relied on email and mobile devices to communicate,” said Ed Black, president and CEO of the Computer & Communications Industry Association (CCIA), in a statement. “After nearly 30 years on the books, it’s long overdue for an update.”
An update is what reform legislation, which will reportedly be re-introduced in “the coming weeks” by Sens. Patrick Leahy, D-Vermont, and Mike Lee, R-Utah, would provide. The bill would require a warrant before authorities could search email or other online communications. Under today’s ECPA, no warrants are required for such content that’s older than 180 days.
cyberpeg'd 