sb-nz logo
Story image

Tech firm launches data privacy toolkit to help navigate the minefield

14 Mar 2019

An Auckland-based business insights and analytics firm has launched a data privacy toolkit that it says could help businesses protect personally identifiable customer and employee data.

As the New Zealand Privacy Act is currently under review, Data Insight says that traditionally the focus of breaches has been on customer data, but not employee data.

With Europe’s GDPR and other regulations throwing the spotlight on data privacy, businesses need to reconsider what data privacy is – or they could end up in hot water.

“A common misconception is privacy only relates to customers when in reality, the law governs any and all data relating to individuals, and often this is sensitive information held about employees,” says Data Insights general manager Claire Bonham-Holden.

“An issue has grown as the drive for productivity and increasing speed of work means we are all using platforms where sharing and collaboration is part of the process - it’s great for workflow but there’s a downside.”

While template documents are often used in situations when general information is the same and facts change, it’s actually a dangerous way of keeping track of changes.

Sometimes information can include salary, health, financial or disciplinary actions. Bonham-Holden says revisions can be searched.

“This is increasingly common, partly because management is focused on the need for speed and productivity, there’s a lack of understanding about the dangers of compromising personal privacy.”

It’s important that businesses ensure that all employees are acting appropriately, she says.

Data Insights explains that every year hundreds of data breaches are reported to the New Zealand Privacy Commission, including when personal electronic information had been sent to the wrong recipient.  

These can have significant financial implications as well as damaging reputation with customers. Any compromise of employee personal information can also impact an organisation’s culture and degree of trust in management.

Data Insights’ toolkit is designed to help businesses understand the risk and potential for damage.

“It starts with a review of the data held, where it is stored, how it’s used and shared, after which a security score is provided along with suggestions about improvements,” says Bonham-Holden.

“It’s a practical data housekeeping process to help companies avoid getting burned.  The result is a Risk Register that keeps track of all data and ensures appropriate policy and procedures are in place,” she concludes.

Story image
Hybrid IAM solutions are the way of the future, study states
“As this first-of-its-kind research shows, while IT leaders are faced with unique criteria and conditions that shape their IT strategy, hybrid IAM has emerged as a necessity."More
Story image
Why a more secure organisation is a collective responsibility
With vast volumes of data moving to the cloud, many IT professionals are frequently challenged to protect their enterprise environment, and there is a greater focus being placed on advancing cybersecurity strategies.More
Story image
Video: 10 Minute IT Jams - Who is Okta?
Okta is an identity and access management company, specialising in secure user authentication. It's an enterprise-grade identity management service, built for the cloud, but compatible with many on-premises applications.More
Story image
Tesserent to acquire Secure Logic's managed security services business
Secure Logic delivered an audited turnover of $9 million in FY 2020 and a $4.2 million EBITDA, with reportedly ‘strong’ earnings going into FY 2021.More
Story image
Claroty discovers vulnerabilities in Ovarro TBox RTUs
The vulnerabilities could enable attackers to break into the systems and run code, crash systems, and meddle with configuration files, amongst other malicious actions.More
Story image
AvePoint brings Salesforce Cloud Backup to channel partners
The product adds to the AvePoint suite of trusted Cloud Backup for Microsoft 365 and Dynamics 365 to provide managed service providers with backup and restore capabilities across multiple, popular SaaS providers.More