Last week the Supreme Court of Canada delivered a groundbreaking decision (Her Majesty the Queen v. Richard Cole) that will have significant implications for workplace privacy rights of employees in Canada. In its decision the SCC declared that employees have an expectation of privacy with regard to personal information contained on workplace computers where the personal use of such computers is permitted or reasonably expected. To learn more please click here>> to listen to my interview with Charles Adler of CJOB|68 radio in which we discuss this important decision.
Supreme Court issues groundbreaking workplace privacy decision: Interview with Charles Adler (AUDIO)October 26, 2012
PriceWaterhouseCoopers (PWC) has just released its Global State of Information Security Survey, which says that corporate spending on data security will increase sharply in the coming years. ComputerWeekly.com reports that more than half of respondents to the PWC survey say that their companies plan to spend more on technological defences against security breaches, an increase of 14% from last year. The survey also reveals that the impact of security breaches is growing. According to ComputerWeekly.com ”the number of companies reporting financial losses from data breaches increased 6% in the past year to 20%, up from only 8% in 2008. Intellectual property theft has increased to effect 15% of companies reporting data breaches, up from just 5% in 2008. An increase in the number of sophisticated attacks aimed at stealing information from specific companies is also driving increased security spending according to the Financial Times.”
The PWC survey demonstrates that spending is shifting to monitoring of company networks, at a time when more employees are bringing their own PDA’s and computers into the workplace. But as PWC states, businesses should be making employees the first line of defence against data leaks.
The PWC survey and commentary serves as a reminder of the need to focus resources for data security (and privacy law compliance) strategically. This means investing in technological safeguards but it should mean investing in privacy training for your staff. It’s an important point because so many of the privacy breaches these days result from mistakes, or human error, by one’s own employees. I’d suggest that you compare your organization’s line item for network monitoring with your line item (if it exists) for privacy training. Are your privacy risk mitigation efforts as strategic as they could be?
Read the Computerworld article here!