DATA PRIVACY, IS IT REALLY SAFE? - NIK ZAFRI

Data Privacy must be the most important topic for the day.

Organization should have a clear policy outlining how they collect, use, store and protect personal information of individual.  Policy; in this context; must be deemed as a legal statement not simply a written policy pasted on the wall. It must be something that inform users about their rights regarding their personal data.

Data Privacy should take into account :

a) Information collected - details on types of data collected from users/customers - such as names, email, addresses, phone numbers, addresses, even birthdays etc. As such any typical CRM system that collects such data MUST BE protected at the front office level or quality assurance level or public relation level (do not overlap one another)

Three examples :

i) if birthdays are revealed to third parties, it may pave to way to corruption. Or;

ii) like what's happening today; phone numbers are being collected by scammers and conners. There are rumours that these information are being sold internally to 3rd parties - what is the top management action on this issue?

iii) How secure is the protection of the collection system? How good is the firewall or other anti-hacking facilities?

b) Purpose of Data Collection - There should be jsutifications of why the data is being collected especially when being asked by users/customers. This can range from processing orders to improving services or marketing purposes.

c) How will the Data be Used - Information on how the collected data will be utilized by the organization.

d) Data Sharing - Disclosure about whether the organization shares user data with third parties and the reasons for doing so.

e) User Rights - Explanation of users' rights regarding their data, such as the right to access, rectify, or delete their information.

f) Data Security Measure - Details about the security measures in place to protect the collected data from unauthorized access or breaches.

g) Contact Information - Information on how users can contact the organization regarding their data privacy concerns or requests.

h) If there is a breach, exposure, or hacking of the collected data, will there be a specific investigation or special enquiry? What penalties might the organization face if found responsible for such a breach?

(Are our strategies for witness protection, anti-corruption, and governance/transparency proving effective?)

Data Privacy Policies are important for transparency and compliance with data protection laws (such as GDPR in Europe or CCPA in California). They help users understand how their personal information is handled and provide them with a level of assurance about its protection.

CONCERNS ON THE NATIONAL DATA SHARING POLICY

The National Data Sharing Policy may raise several concerns related to privacy, security, and ethical implications. These issues need to be adequately addressed to ensure cooperation and participation from all parties. Among the 7 most significant issues that I've identified are :

1) Privacy Risks - Sharing national data can compromise individual privacy if not handled securely. Sensitive information might be exposed, leading to potential misuse or unauthorized access.

Implementing data sharing is like opening the floodgates to a wide range of potential threats, such as hacking or malware. The more people who have access to the data, the more opportunities there are for unauthorized parties to access it. (Castordoc)

2) Security Breaches - Data sharing introduces the risk of security breaches. If not adequately protected, shared data can fall into the wrong hands, leading to identity theft, fraud, or other malicious activities.

These are all common types of security breach or incidents. For example, a lost laptop, mobile phone, or external hard drive that is unlocked can easily direct to data being stolen if it ends up in the wrong hands. Also, a locked device could be hacked into by a sophisticated attacker (Knowledge Hut)

3) Ethical Considerations - There are ethical dilemmas regarding consent, transparency, and the fair use of shared data. Ensuring data is used responsibly and ethically can be challenging.

Data protection is an ethical issue. It involves respect for individuals and their rights regarding privacy and the use of information about them. External funders, particularly the EU, are seeking increasing levels of assurance with regard to data protection and ethics. (University of Edinburg)

4) Data Accuracy and Quality - Shared data might not always be accurate or up-to-date. This can lead to decisions based on flawed information, impacting policy-making and public services.

There are six main dimensions of data quality: accuracy, completeness, consistency, validity, uniqueness, and timeliness. (Heavy AI)

5) Regulatory Compliance - Complying with various regional or international data protection regulations adds complexity. Different jurisdictions might have conflicting requirements, making it challenging to streamline data sharing processes.

Regulatory data protection (RDP) is an intellectual property right available for a limited duration which protects an innovator's proprietary safety and efficacy data for its innovative product (Merck)

6) Data Monetization and Control - There's a concern about how shared data might be monetized or used for commercial purposes without proper consent or benefit sharing for the individuals whose data is being shared.

With data monetization, personal information is often collected without explicit permission from users. This raises ethical questions about who owns the data and whether individuals have control over how it is used. Another drawback is the risk of data breaches or misuse (The Cable)

7) Public Trust and Perception - Mishandling of data can erode public trust in government institutions or organizations responsible for data sharing, leading to reluctance in participating in future data-sharing initiatives.

Findings suggested that public's trust may not meet the needs of of the policy. There is a majority of the public having lack of trust on the organizations having information and share it on multiple platforms. This requires a new module to gain public trust via knowledge, attitudes, and beliefs to inform policies and practices for data sharing.

Addressing the abovementioned concerns requires robust data protection frameworks, strong encryption, clear policies for consent and usage, regular audits, and a commitment to transparency to maintain trust and safeguard individual rights.