PRIVACY + SECURITY BLOG

News, Developments, and Insights

New Resource Page: How to Make Security Training Effective

I recently created a new resource page —  How to Make Security Training Effective.  The page contains my advice for how  to make security training memorable and effective in changing behavior. Training the workforce is an essential way to protect data security, but not all training endeavors are successful.  Poor training is akin to shouting […]

New Resource Page: Security Awareness Training FAQ

What laws require security awareness training?  What topics do the laws require to be covered?  What should be covered?  How frequently should training be given? I recently created a new resource page — Security Awareness Training FAQ — to answer the above questions and more.  I discuss various legal and industry requirements for security awareness […]

When Is a Person Harmed by a Privacy Violation? Thoughts on Spokeo v. Robins

When is a person harmed by a privacy violation? The U.S. Supreme Court just handed down a decision in an important case, Spokeo Inc. v. Robins.   Plaintiff Thomas Robins sued Spokeo under the Fair Credit Reporting Act (FCRA) because Spokeo had inaccurate information about him in its profile.  Spokeo’s profiles are used by potential employers […]

The Need for a Privacy Profession Pathway: An Open Call for Privacy Law Fellowships

The privacy law profession is growing tremendously, but there is a challenge that we’re facing, one that I’d like to enlist your help in addressing – the bottleneck problem.  There is a huge bottleneck at the entry point to the field.  So I am calling on organizations to address this bottleneck by offering fellowships to […]

CCTV in NYC

There’s a new British import to America, and sadly, it isn’t a rock band. It’s CCTV. In many of Britain’s cities, there is an elaborate network of thousands of surveillance cameras monitored through closed circuit television (CCTV). According to estimates, there are about 4 million surveillance cameras in Britain and a citizen is caught on surveillance […]

6 Reasons to Visit the TeachPrivacy Booth at the IAPP Summit 2016

Please stop by the TeachPrivacy booth at the expo at the IAPP Summit.   1. Play our new game.  See if you can spot all the privacy and data security risks in this scene.  Pick up a copy of the scene, see our poster, and try out our interactive module.

The Solution to All Privacy and Data Security Problems Worldwide

After years of careful study and extensive analysis, I have arrived at a solution to all the privacy and data security problems worldwide. Although I’ve been advised that I shouldn’t give away such a perfect solution to such a vexing problem for free, my drive to altruism is simply too strong. Without further ado . […]

The Triumph of the Privacy Profession: An Interview with Bamberger and Mulligan

The past 20 years have seen the remarkable emergence of the privacy profession. Starting from nothing, this profession originally included a handful of people called Chief Privacy Officers (CPOs). Nobody grew up saying they wanted to be a CPO. Nobody knew what CPOs did.