What are some of the challenges faced in terms of managing data privacy?
1.7k views1 Upvote2 Comments
Sort by:
Manager, Cybersecurity in Travel and Hospitalitya year ago
Being transparent
1
Content you might like
How long does your organization retain original systems logs used to filter SOX-related actions into a system that requires review of the logs and retains the filtered logs for seven years? Does your organization consider those original system logs records subject to record retention requirements, or supporting information used to create the SOX records?
90 Days13%
365 Days41%
3 years28%
5 years9%
7 years9%
Other (share in the comments)
Yes - Maine did the right thing. There are too many security risks with free versions of these tools. Not enough copyright or privacy protections of data.31%
No, but.... - You must have good security and privacy policies in place for ChatGPT (and other GenAI apps). My organization has policies and meaningful ways to enforce those policies and procedures for staff.45%
No - Bans simply don't work. Even without policies, this action hurts innovation and sends the wrong message to staff and the world about our organization.18%
I'm not sure. This action by Maine makes me think. Let me get back to you in a few weeks (or months).4%
Balancing convenience and privacy is a critical challenge that requires careful consideration of risk and innovative solutions. This balance is essential to meet privacy objectives and compliance obligations.
There are times in which the business function may desire a higher level of convenience that conflicts with privacy requirements. In that case, a risk-based approach must drive the actions taken even if the business process must change to achieve the privacy objectives.
Privacy protections should be core, organic functions, not added on after a design is complete. Privacy should be integral both to the design and architecture of IT systems and to business practices.
Maintenance of privacy objectives requires an organization to ensure that it only processes the data that is necessary to achieve its specific purpose, gains proper consent and that PII is protected during collection, storage, use, and transmission.