Security & Risk Management

« Keeping up with global regulations | Main | What Constitutes A $7B Control Failure? »

Posted by Jen Albornoz Mulligan on January 11, 2008

Highlighting the importance of data privacy... one person at a time

I've seen an increasingly common trend for vendors or others to post sensitive personal information in public places, to prove that no harm will come, or that their solution will protect against any possible misuse. One person to do this recently, in response to the data loss by HM Revenue and Customs is Jeremy Clarkson, a TV broadcaster specializing in cars. Despite having no background in finance and fraud, he published his personal information in a newspaper column trying to diminish the idea that harm could come from the data breach. And that has come back to haunt him, as someone set up an automatic debit from his account of 500 GBP a month to be given to charity. My favorite part of the story is his new attitude:

"We must go after the idiots who lost the discs and stick cocktail sticks in their eyes until they beg for mercy."

Beyond a good laugh, what can we get from this story?

  1. Review your bank accounts online regularly whenever possible. He did not check his account until the end of the month statement came and lost valuable time to oppose the debits.
  2. Don't make yourself an easy target. He obviously called attention to himself as a TV personality that most regular people wouldn't be able to do (publish their bank account in a newspaper), but you should still remove the low-hanging fruit (easy data to steal). For instance, shredding sensitive information and only sharing it when mandatory.
  3. As more people are harmed by misuse of their data, the outcry for better protection will grow stronger. This will filter up to the ears of our legislatures who will strengthen data protection laws to assist identity theft victims. Especially once it strikes their parent, sibling, or children.

TrackBack

TrackBack URL for this entry:
http://www.typepad.com/services/trackback/6a00d8341c50bf53ef00e54fdcca528834

Listed below are links to weblogs that reference Highlighting the importance of data privacy... one person at a time :

Comments

Claudio Criscione

I agree with most of what you say Jen, but yet I feel that taking a low profile isn't a very good advice.
If you start spreading the idea that "if I'm no one those things won't happen" you get on the wrong road, in my opinion. Mind you, from a personal - one person at a time - perspective it is, but we really have to spread awareness. Anyone can be a target: that's not paranoia, that's a matter of fact.
We don't want to have "more and more people harmed", we need privacy awareness before that.

Jen Albornoz Mulligan

Hi Claudio,
I didn't mean to imply that if you're a nobody this won't happen to you. Rather I am a big advocate for greater privacy protection awareness. And seeing public figures go through this kind of trouble does raise awareness. But many people have been beating the privacy awareness drum for a long time, and the biggest changes to business operations has come from mandated legislation. So while the every day person can do some things (like destroying unsolicited credit card applications), I don't expect major changes until the government takes further action.

The comments to this entry are closed.

Enter your email address:

Delivered by FeedBurner

Search this blog

Security & Risk Analysts on Twitter