sb-nz logo
Story image

Tech firm launches data privacy toolkit to help navigate the minefield

14 Mar 2019

An Auckland-based business insights and analytics firm has launched a data privacy toolkit that it says could help businesses protect personally identifiable customer and employee data.

As the New Zealand Privacy Act is currently under review, Data Insight says that traditionally the focus of breaches has been on customer data, but not employee data.

With Europe’s GDPR and other regulations throwing the spotlight on data privacy, businesses need to reconsider what data privacy is – or they could end up in hot water.

“A common misconception is privacy only relates to customers when in reality, the law governs any and all data relating to individuals, and often this is sensitive information held about employees,” says Data Insights general manager Claire Bonham-Holden.

“An issue has grown as the drive for productivity and increasing speed of work means we are all using platforms where sharing and collaboration is part of the process - it’s great for workflow but there’s a downside.”

While template documents are often used in situations when general information is the same and facts change, it’s actually a dangerous way of keeping track of changes.

Sometimes information can include salary, health, financial or disciplinary actions. Bonham-Holden says revisions can be searched.

“This is increasingly common, partly because management is focused on the need for speed and productivity, there’s a lack of understanding about the dangers of compromising personal privacy.”

It’s important that businesses ensure that all employees are acting appropriately, she says.

Data Insights explains that every year hundreds of data breaches are reported to the New Zealand Privacy Commission, including when personal electronic information had been sent to the wrong recipient.  

These can have significant financial implications as well as damaging reputation with customers. Any compromise of employee personal information can also impact an organisation’s culture and degree of trust in management.

Data Insights’ toolkit is designed to help businesses understand the risk and potential for damage.

“It starts with a review of the data held, where it is stored, how it’s used and shared, after which a security score is provided along with suggestions about improvements,” says Bonham-Holden.

“It’s a practical data housekeeping process to help companies avoid getting burned.  The result is a Risk Register that keeps track of all data and ensures appropriate policy and procedures are in place,” she concludes.

Story image
New project development inhibited by cybersecurity, Kaspersky research states
"There are still some practical steps that can be taken to make sure that an emerging technology or a product reaches its launch. Cybersecurity doesn’t have to be another corporate barrier, but it should be on an integral part of the project all long."More
Story image
Video: 10 Minute IT Jams - protecting data with user behaviour analytics
In this video, Forcepoint senior sales engineer and solutions architect Matthew Bant discusses the company's DLP solution, the importance of integrating compliance into security solutions, and why cybersecurity strategies should take a more people-based approach.More
Story image
Commvault expands Metallic SaaS portfolio
Metallic Cloud Storage Service brings together technology from Commvault and Microsoft Azure for security and scale.More
Story image
Report reveals relationship between boardroom and cybersecurity investments
“While boards are definitely listening and stepping up with increased budget for cybersecurity, they tend to view any investment as a cost rather than adding business value."More
Story image
Experiencing ransomware significantly impacts cybersecurity approach
"The survey findings illustrate clearly the impact of these near-impossible demands. Among other things, those hit by ransomware were found to have severely undermined confidence in their own cyber threat awareness."More
Story image
Network visibility is the crux of security in 2020
Resilience sits at the heart of security, and there is a need for organisations’ architecture, processes and strategies to be more impervious in order to continue to ensure protection, writes Gigamon A/NZ manager George Tsoukas.More