January 28 is Data Privacy Day, which is a global effort to create awareness for securing data. This date commemorates the signing of Convention 108 on Jan. 28, 1981 that created the first international data privacy treaty.
According to the National Cyber Security Alliance (NCSA), most Americans feel that companies should be transparent about using personal data. To create trust, companies should inform their customers about what data they collect and how it’s used with third parties.
The NCSA offers a list of best practices for creating a culture of respecting privacy and safeguarding data in its guide, Privacy Is Good For Business. This guide highlights security fundamentals, which include:
- If You Collect It, Protect It – Secure personal data by taking reasonable security measures.
- Be Open & Honest – Communicate data collection and sharing practices with customers on how they can manage their privacy.
- Educate Employees – Train employees to understand their role in protecting personal information.
- Monitor Partners & Vendors – Take responsibility for how third parties use and collect data.
Privacy vs. Security
In data management, the concepts of “privacy” and “security” have different meanings. “Privacy” refers to managing “authorized” access to data. Examples of data privacy include acceptable use policies and data sharing agreements. “Security” means preventing “unauthorized access” to company data. The goal of security is to protect the confidentiality, integrity, and availability of data from unauthorized individuals.
Cyber crime is a major threat to a customer’s privacy. A security breach threatens an individual’s privacy when hackers steal and distribute a company’s compromised data throughout the web. Cryptocurrency, such as Bitcoin, offers the ability to make payments that are private and secure. However, these payment methods give criminals a way to hide their crimes, such as a ransomware attack. A business can guard against cyber crimes with preventative measures, such as installing malware detection and making data backups.
Alice M. Porch, Esq., CIPP/US, C|EH, Security+
Alice is a member of the Florida Bar, and she focuses on data privacy and cybersecurity compliance. She attended the Warrington College of Business at the University of Florida and earned a Bachelor of Science in Business Administration. After graduating, she earned a Juris Doctor at the Stetson University College of Law. During law school, she served as an Assistant Executive Editor for Stetson Law Review and also as a Staff Editor for Stetson Journal of Advocacy and the Law. She also served as a member of The Florida Bar Journal/News Editorial Board from 2018-2024. She is currently a member of the Florida Bar Cybersecurity and Privacy Law Substantive Law Committee.
