After a company identifies the data privacy framework that works for them, the next step isto consider the right privacy strategy. In simple terms, a privacy strategy covers thecompany’s approach in communicating and obtaining support for the privacy programwithin the organisation. Remember, to drive the privacy program is a team sport, and that requires a …
Most Nigerian Non-Governmental Organisations (NGOs), charities and religious houses overlook the Nigerian Data Protection Regulation. However, NGOs that cannot endure the medicine of the regulation because it is too strong must be content with inefficiency, bungling of data and steadily violating existing local data privacy regulation. Let us put the reason into perspective. A particular …
The adoption of Business Impact Analysis (BIA) in any organisation offers significant potential. With the right focused and strategic approach, any company can preserve their value and capture growth. Gartner, a world-renowned online tech magazine, defines BIA as “the process of determining the criticality of business activities and associated resource requirements to ensure operational resilience …
What might seem like an ‘innocent’ act by an employer in the name of employee monitoring can be viewed as an excessive intrusion when placed under data privacy regulations lens. I relate a practical story for readers’ further comprehension. The Chief Executive Officer of a particular furniture shop in Lagos, Nigeria, places four cameras in …
Companies can become more efficient and effective in combating data breaches, datamismanagement, and improving information security while building the trust of theircustomers and employees, by employing globally accepted information security standards. This implementation creates a challenge for institutions who wanted to be looked at,internally and externally, as a company that puts these features of industry …
Addressing The Information Security Management Framework Question Read More »
In a meeting with some information security personnel, the Chief Executive Officer of a bicycle company in Lagos quipped that “we only sell bicycles. Why should we be spending so much on Information Technology (IT) Governance?” With that statement, he cut the budget for IT governance and proceeded to pour more money on the marketing …
Holdings and Co., a fintech company, has carried out extensive data and information risk assessment of their business procedures. They have policies/ processes to ensure that they satisfactorily answer all anticipated threats to the business operations. In addition to that, Holdings and Co., chief information officer, transferred other risks to an insurance company. However, they …
The Business Case for a business continuity plan Read More »
In this article, I intend to break down some complexities in consent management. Consent, to give contextual meaning, requires that data subjects carry out affirmative action and freely allow data controllers to process their information for specific purposes. When consent is freely given, then it is expected that a data subject can easily withdraw such …
It’s easy to assume that the data protection principles’ especially transparency relies on or ends at publishing privacy notices on websites. Proper transparency methodology, carefully mapped into the data protection framework, can vault a company ahead of its competition into a position of increasing its reputation and increasing their customer loyalty. Those with well-defined transparency, …
THOUGHTS ON THE TRANSPARENCY PRINCIPLE IN DATA PROTECTION Read More »
