Story image

Tech firm launches data privacy toolkit to help navigate the minefield

14 Mar 2019

An Auckland-based business insights and analytics firm has launched a data privacy toolkit that it says could help businesses protect personally identifiable customer and employee data.

As the New Zealand Privacy Act is currently under review, Data Insight says that traditionally the focus of breaches has been on customer data, but not employee data.

With Europe’s GDPR and other regulations throwing the spotlight on data privacy, businesses need to reconsider what data privacy is – or they could end up in hot water.

“A common misconception is privacy only relates to customers when in reality, the law governs any and all data relating to individuals, and often this is sensitive information held about employees,” says Data Insights general manager Claire Bonham-Holden.

“An issue has grown as the drive for productivity and increasing speed of work means we are all using platforms where sharing and collaboration is part of the process - it’s great for workflow but there’s a downside.”

While template documents are often used in situations when general information is the same and facts change, it’s actually a dangerous way of keeping track of changes.

Sometimes information can include salary, health, financial or disciplinary actions. Bonham-Holden says revisions can be searched.

“This is increasingly common, partly because management is focused on the need for speed and productivity, there’s a lack of understanding about the dangers of compromising personal privacy.”

It’s important that businesses ensure that all employees are acting appropriately, she says.

Data Insights explains that every year hundreds of data breaches are reported to the New Zealand Privacy Commission, including when personal electronic information had been sent to the wrong recipient.  

These can have significant financial implications as well as damaging reputation with customers. Any compromise of employee personal information can also impact an organisation’s culture and degree of trust in management.

Data Insights’ toolkit is designed to help businesses understand the risk and potential for damage.

“It starts with a review of the data held, where it is stored, how it’s used and shared, after which a security score is provided along with suggestions about improvements,” says Bonham-Holden.

“It’s a practical data housekeeping process to help companies avoid getting burned.  The result is a Risk Register that keeps track of all data and ensures appropriate policy and procedures are in place,” she concludes.

Salesforce continues to stumble after critical outage
“To all of our Salesforce customers, please be aware that we are experiencing a major issue with our service and apologise for the impact it is having on you."
D-Link hooks up with Alexa and Assistant with new smart camera
The new camera is designed for outdoor use within a wireless smart home network.
Slack users urged to update to prevent security vulnerability
Businesses that use popular messaging platform Slack are being urged to update their Slack for Windows to version 3.4.0 immediately.
Secureworks Magic Quadrant Leader for Security Services
This is the 11th time Secureworks has been positioned as a Leader in the Gartner Magic Quadrant for Managed Security Services, Worldwide.
Google puts Huawei on the Android naughty list
Google has apparently suspended Huawei’s licence to use the full Android platform, according to media reports.
Using data science to improve threat prevention
With a large amount of good quality data and strong algorithms, companies can develop highly effective protective measures.
General staff don’t get tech jargon - expert says time to ditch it
There's a serious gap between IT pros and general staff, and this expert says it's on the people in IT to bridge it.
ZombieLoad: Another batch of flaws affect Intel chips
“This flaw can be weaponised in highly targeted attacks that would normally require system-wide privileges or a complete subversion of the operating system."