Story image

Tech firm launches data privacy toolkit to help navigate the minefield

14 Mar 2019

An Auckland-based business insights and analytics firm has launched a data privacy toolkit that it says could help businesses protect personally identifiable customer and employee data.

As the New Zealand Privacy Act is currently under review, Data Insight says that traditionally the focus of breaches has been on customer data, but not employee data.

With Europe’s GDPR and other regulations throwing the spotlight on data privacy, businesses need to reconsider what data privacy is – or they could end up in hot water.

“A common misconception is privacy only relates to customers when in reality, the law governs any and all data relating to individuals, and often this is sensitive information held about employees,” says Data Insights general manager Claire Bonham-Holden.

“An issue has grown as the drive for productivity and increasing speed of work means we are all using platforms where sharing and collaboration is part of the process - it’s great for workflow but there’s a downside.”

While template documents are often used in situations when general information is the same and facts change, it’s actually a dangerous way of keeping track of changes.

Sometimes information can include salary, health, financial or disciplinary actions. Bonham-Holden says revisions can be searched.

“This is increasingly common, partly because management is focused on the need for speed and productivity, there’s a lack of understanding about the dangers of compromising personal privacy.”

It’s important that businesses ensure that all employees are acting appropriately, she says.

Data Insights explains that every year hundreds of data breaches are reported to the New Zealand Privacy Commission, including when personal electronic information had been sent to the wrong recipient.  

These can have significant financial implications as well as damaging reputation with customers. Any compromise of employee personal information can also impact an organisation’s culture and degree of trust in management.

Data Insights’ toolkit is designed to help businesses understand the risk and potential for damage.

“It starts with a review of the data held, where it is stored, how it’s used and shared, after which a security score is provided along with suggestions about improvements,” says Bonham-Holden.

“It’s a practical data housekeeping process to help companies avoid getting burned.  The result is a Risk Register that keeps track of all data and ensures appropriate policy and procedures are in place,” she concludes.

Kiwis know security is important, but they're not doing much about it
Only 49% of respondents use antivirus software and even fewer – just 19% -  change their passwords regularly.
Instagram: The next big thing in online shopping?
This week Instagram announced a new feature called checkout, which allows users to buy products they find on Instagram.
Apple's AirPods now come with 'Hey Siri' functionality
The new AirPods come with a standard case or a Wireless Charging Case that holds additional charges for more than 24 hours of listening time.
NZ investment funds throw weight against social media giants
A consortium of NZ funds managing assets worth more than $90m are appealing against Facebook, Twitter, and Google following the Christchurch terror attacks.
Poly appoints new A/NZ managing director, Andy Hurt
“We’re excited to be bringing together two established pioneers in audio and video technology to be moving forward and one business – Poly."
Unity and NVIDIA announce real-time ray tracing across industries
For situations that demand maximum photorealism and the highest visual fidelity, ray tracing provides reflections and accurate dynamic computations for global lighting.
NVIDIA announces Jetson Nano: A US$99 tiny, yet mighty AI computer 
“Jetson Nano makes AI more accessible to everyone, and is supported by the same underlying architecture and software that powers the world's supercomputers.”
Slack doubles down on enterprise key management
EKM adds an extra layer of protection so customers can share conversations, files, and data while still meeting their own risk mitigation requirements.