Data Security and Privacy with the Privacy Professor

Latest Episodes:

Encore: Medical Cannabis Patient Privacy and Data Security Jan 01, 2019

Show notes

Most people assume that their data is safe in cannabis stores & medical cannabis dispensaries. Or they believe if they pay in cash there will be no record of their cannabis purchase. Those are incorrect beliefs. How do dispensaries secure & share data? Who WANTS that data? What security is needed? Some in government, law enforcement & employers want data about state legal marijuana and medical cannabis purchases. Michelle Dumay, Cannabis Patient Advocate, helps cannabis dispensaries & stores to secure their customers’ & patients’ data & privacy. Michelle learned through experience getting treatment for her daughter that most medical cannabis dispensaries are not compliant with laws governing the security and privacy of patient data. So Michelle decided to take action to ensure personal data is protected. In this episode, we discuss information security & privacy practices of cannabis shops, risks & what needs to be done when it comes to securing data and understanding privacy laws.

Encore: Are Encryption Backdoors Really Necessary for National Security? Dec 25, 2018

Show notes

There are continued efforts by US and worldwide governments and law enforcement to compel tech providers to create backdoors into encryption technologies to allow access to the data if they think they need it. We all want terrorists and criminals caught. But is putting backdoor access to encrypted data files actually the only way to solve cases where encrypted data is involved? Are there other methods available to get intelligence information beyond just the encrypted data, and are other methods available to obtain access to encrypted data instead of putting backdoors into the technology? Would such requirements even be effective with so many encryption technologies available from other countries? Or, should law enforcement investigations always be put before privacy risks? What are some important issues that should be considered for putting backdoors into encryption technologies? Tune in to hear this discussion with a world renowned senior cybersecurity leader and expert!For more details after listening see USACM’s statement on extraordinary law enforcement access at: https://www.acm.org/binaries/content/assets/public-policy/usacm/2018-usacm-statement-law-enforcement-access.pdf.

More Needs to Be Done to Protect Student and Teacher Privacy Dec 18, 2018

Show notes

Throughout school history students have heard the threat “That will go on your permanent record!” It didn’t mean much since those permanent records were on paper and usually shoved to the back of a filing cabinet after graduation. But in recent years, now not only grades, but basically all that students & teachers do are recorded digitally to follow them for the rest of their lives; for good & for bad. Plus, US Dept. of Education actions are creating student privacy risks, and so are misguided attempts by school districts to improve safety in ways that invade privacy. Third parties, such as testing organizations, also are taking huge amounts of student personal data and monetizing it, further eroding student privacy. Listen in to this important conversation about privacy in schools, for students and teachers, the success so far of the Educator Toolkit for Teacher and Student Privacy, and much more, with AFT President, Randi Weingarten.

Is Anonymization Possible with Current Technologies? Dec 11, 2018

Show notes

What is possible with regard to de-identification and anonymization? Will anonymization be sufficient only for today? Or, will it keep the data anonymized for decades to come; possibly beyond? What is necessary to minimize re-identification risks? What do you need to know about anonymization before agreeing to allow your health data to be used for research? In this episode Rebecca speaks with world-renowned de-identification and anonymization expert, Dr. Khaled El Emam about anonymization, de-identification, re-identification risks, and related topics. Dr. El Emam has done extensive research in this area and written multiple books on these topics. Rebecca contributed a chapter to Dr. El Emam’s book, “Risky Business: Sharing Health Data While Protecting Privacy.” Dr. El Emam also wrote “Anonymizing Health Data” and “Guide to the De-Identification of Personal Health Information,” in addition to many articles.

FTC Influences on Privacy Sanctions and Regulations Dec 04, 2018

Show notes

The Federal Trade Commission (FTC) is considered by many organizations to be the preeminent arbiter of privacy in the US. How did the FTC develop this authority over the years? What have been some of the most privacy-impacting cases? Where do organizations need to pay more attention within their privacy efforts to avoid fines & decades-long consent decrees? What does the FTC do with all the money from the fines they are paid? Where is the FTC going with privacy regulations and enforcement? How are your posted privacy notices related to the FTC Act when it doesn’t even mention privacy? Listen in to hear Marc Groman, an internationally recognized privacy expert and the first FTC Chief Privacy Officer, discuss these and many more FTC privacy oversight and enterprise privacy management topics with Rebecca. Marc will also let listeners know where to get help with improving the security & privacy of their children’s and teens’ online use.

IOT Security, Privacy and Safety Nov 27, 2018

Show notes

At least one Internet of Things (IoT), or “smart”, device, is already used by each person within the large majority of the population. The number of IoT devices are growing exponentially, and soon every member of the population will own a few to many IoT devices each. IoT devices inherently bring privacy, safety and security risks to those using them, and attached in some way to them. Some risks, such as those created by medical devices, smart homes, smart grids and smart vehicles and roads literally could result in death. What are these data and systems security, privacy and safety risks? What needs to be done to mitigate those risks? Why aren’t device makers building security, privacy and safety controls into these devices? Listen in to hear Abhik Chaudhuri, author of the book “Internet of Things, for Things and by Things” discuss these and many more IoT security, privacy and safety topics with Rebecca.

GDPR: Using Legitimate Interests as a Lawful Basis for Processing Nov 20, 2018

Show notes

• What are considered to be legitimate interests as a basis for legal processing under GDPR? Context is a vital consideration. • What should organizations do with regard to “careful assessment” to determine whether or not a situation is considered to be a legitimate interest of the data controller to enable personal data processing? • What resources and guidance are available to help organizations to determine legitimate interests? • What do organizations struggle with most for this requirement? • How high are the fines for non-compliance? Tune in to hear Teresa Troester-Falk, Chief Global Privacy Strategist, Nymity, and Gabriela Zanfir-Fortuna, EU Policy Counsel, Future of Privacy Forum, provide answers and discuss more GDPR requirements. We will also walk through some case studies for determining legitimate interests for processing, including a real-life IoT case study!

Government Hacking and Surveillance: Activities, Tools and Laws Nov 13, 2018

Show notes

As encryption and other privacy-enhancing tech is increasingly used, government agencies are seeking new ways to access communications & other data that is also being increasingly generated by new computing devices, apps and websites. Methods currently used include government hacking & vulnerabilities exploitation, and pursuing access through such legal paths as Title III & the USA Patriot Act. • What actually is government hacking & what tools are used? • What are the risks for putting backdoors in encryption that governments around the world are still pursuing? • What is US Title III as it relates to government surveillance? • How are data from CCTVs, license plate readers, phone and smart devices being accessed by government agencies? Tune in to hear Michelle Richardson, Director of the Center for Democracy and Technology’s Privacy and Data Project, discuss these & many more related topics with Rebecca. #Privacy #Surveillance #PatriotAct #TitleIII #Government #Hacking

New Toolkit to Mitigate Teacher and Student Privacy Risks Nov 06, 2018

Show notes

Education environments have inherent privacy risks. Schools are in open environments, with students, teachers, parents, guests, sales vendors, & folks from other schools, going through the facilities every day. More new tech is being used by teachers & students, bringing with them data security & privacy risks, creating a perfect storm for privacy breaches to occur. • How are teacher & student personal data collected & used? • Who has access to this personal data & how are they using it? • What legal protections exist & how have they been weakened? • How much privacy training do teachers receive? • What is the Educator Toolkit for Teacher and Student Privacy? FYI You can get it here http://bit.ly/PCSP_EducatorPrivacyToolkit Tune in to hear Marla Kilfoyle, 30-yr public school teacher & former Exec Director of The Badass Teachers Association, & Leonie Haimson, Exec Director of Class Size Matters & co-chair of the Parent Coalition for Student Privacy, answer these questions & more!

Information Security and Privacy Questions from Listeners Oct 30, 2018

Show notes

For this final October episode of National Cyber Security Awareness Month, Rebecca Herold answers questions from listeners and Privacy Professor Tips readers. Just a few of the topics covered include: • 8 things everyone should do to secure their computing devices • Wi-fi security and privacy • ATMs, self-pay devices, and skimmers • Privacy protections • Exactis privacy breach • Web cam hacking Join Rebecca to hear how she answers what your fellow listeners and Tips readers ask! #RebeccaHerold #NCSAM #DataSecurity #CyberSecurity #Privacy #Awareness

Our TOPPODCAST Picks

Follow Us

Stay Connected

Data Security and Privacy with the Privacy Professor

Related Podcasts

Links

Stay Connected