This is the second "chapter" in my open privacy handbook on Substack.
Privacy and data regulation compliance is something that most people will gloss over and stop reading right here… BUT I'm clearly different as my passion for this topic only continues to grow.
Through my experience as a data/engineering leader, I’ve found that not only does privacy present a huge opportunity for becoming more competitive, but that it’s also extremely challenging to ingrain in an organisation because it is so complex.
I’ve proposed a new model for embedding privacy that is friendly to all sizes of organisations, startup and enterprise alike:
1. Improving your privacy policy is the starting point - transparency is key
2. As you make improvements and conduct new business activities, consider privacy at each major step (Privacy folks would call this a "Privacy Impact Assessment")
3. Actively manage the risks that fall out of (2), to make sure they stay inline with (1)
4. Monitor your activities for actual change, and when needed or ready, go back to (1)
My post expands on this. Keen to get your feedback and thanks for reading.
This is the second "chapter" in my open privacy handbook on Substack.
Privacy and data regulation compliance is something that most people will gloss over and stop reading right here… BUT I'm clearly different as my passion for this topic only continues to grow.
Through my experience as a data/engineering leader, I’ve found that not only does privacy present a huge opportunity for becoming more competitive, but that it’s also extremely challenging to ingrain in an organisation because it is so complex.
I’ve proposed a new model for embedding privacy that is friendly to all sizes of organisations, startup and enterprise alike:
1. Improving your privacy policy is the starting point - transparency is key 2. As you make improvements and conduct new business activities, consider privacy at each major step (Privacy folks would call this a "Privacy Impact Assessment") 3. Actively manage the risks that fall out of (2), to make sure they stay inline with (1) 4. Monitor your activities for actual change, and when needed or ready, go back to (1)
My post expands on this. Keen to get your feedback and thanks for reading.