1.2: Accountability 1.3: Beyond Law and Compliance 1.4: Why does an org need a privacy program

Question 1

Accountable orgs…

Answer 1

*Have the proper policies and procedures to promote best practices in handling personal information and can generally demonstrate that they have the capacity to comply with applicable privacy laws
*Promote trust and transparency to provide individuals with confidence in their abilities to protect personal information and respect data rights
*Must be able to show/prove their actions

Question 2

Accountability means…

Answer 2

*Taking ownership of the actions an org does / does not take to protect personal data.
*Can provide flexibility about how the org complies w/obligations
*Documenting any deviations and actions taken for failures in complying with data protection policies

Question 3

Consumer trust…

Answer 3

*Is hard to obtain and harder to get back once lost
*Loss of consumer trust can have severe repercussions / be ruinous

Question 4

Why a privacy program?

Answer 4

*Show the company is reputable
*Enhance brand and public trust
*Meet regulatory obligations
*Encourage ethical data-processing practices
*Enable global operations
*Prevent and mitigate effects of data breaches
*Competitive differentiator
*Increase value and quality of data for the business
*Reduce risk of lawsuits
*Be a good corporate citizen
*Meet customer expectations
*Integrate data ethics into decision making

Question 5

Trust

Answer 5

Being transparent, accountable and a good data steward of personal information shows that an org is trustworthy and of the information entrusted to them