5 Ways to Increase Data Privacy Efforts, According to Top Chief Privacy Officers
Chief privacy officers from Visa, Microsoft and other large companies shared their advice and predictions for the future of data privacy at an event Monday.
January 29, 2019 at 03:55 PM
4 minute read
Executives from Microsoft Corp., Verizon Wireless, Visa Inc. and others gathered at LinkedIn's San Francisco headquarters Monday for a series of panels on data privacy.
As part of Data Privacy Day, chief privacy officers discussed their companies' struggles and successes in a changing regulatory landscape. They also shared their observations and advice on developing a strong data privacy program. Here's a roundup of their tips for in-house counsel.
1. Implement privacy by design
Including privacy concepts at a project's beginning can help prevent last-minute security issues that delay or shut down launches, panelists said.
"Thinking about what you're doing with data from the first time you're collecting it, to how you're designing a product to the user interface, so that what data you're collecting and how you're using it is made as transparent as possible," said John Gevertz, the chief privacy officer of Visa.
2. Send the message from the top down
Company leaders should set the tone for privacy and ensure the concept of privacy by design is spread to all layers of an organization.
"You really need to start at the top and have that come down, because that is where priorities get set," said Brendon Lynch, Microsoft's chief privacy officer. "For example … we have a regular meeting with the CEO and the leadership team to report where we're going, how on track we are, where we need additional resources, that kind of thing. And that permeates right through the organization. People know privacy is a priority."
3. Make data privacy information accessible
Privacy counsel should keep data policies transparent, allowing users to know what data is being collected and how it's being used. But it's also important to keep the message as simple and short as possible, so people read and understand the whole thing, Verizon chief privacy officer Karen Zacharia said.
"I often say that one of the hardest things that we do is say something doesn't have to go in a notice. And that's not because I'm saying we should hide something. It's perhaps because it's so obvious that we shouldn't be clogging up, putting additional words into the notice about something that consumers really understand," Zacharia said. "Or perhaps it's less important than the really big thing we think is most important to consumers. Getting that balance right really is a challenge for all of us."
4. Include non-lawyers in the process
Many privacy teams are led by lawyers, but Kalinda Raina, the head of global privacy at LinkedIn, said it's important to get input from other team members as well.
"I have a lot of folks on my team who are not lawyers. We work with our communications team, our design team. Because sometimes you have to get the lawyers out of the way, because we say a little too much that is hard to follow," Raina said. "So sometimes we work with other members of the team to figure out, 'How do we say this in a way people will engage with and understand?'"
5. Build trust with consumers
Stronger privacy regulations could help consumers trust new technology more, according to Lynch.
"Advocate for strong rules to be in place … a regulatory floor, whether it's baseline privacy legislation or regulating the misuses of facial recognition, that type of thing could actually be beneficial into building trust into the broad ecosystem and enabling people to embark on using these technologies," Lynch said.
Read More:
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllAggressive FTC May Force Merging Companies to Bolster Legal Defenses
4 minute readBest Legal Departments: How Blackstone's Legal and Compliance Team Got the All-Clear to Grow Business
CEOs Want Data-Based Risk Management; GCs Lack the Tech to Do So.
InCloudCounsel Hires First GC to Continue Expansion in Asia
Trending Stories
- 1Elon Musk Names Microsoft, Calif. AG to Amended OpenAI Suit
- 2Trump’s Plan to Purge Democracy
- 3Baltimore City Govt., After Winning Opioid Jury Trial, Preparing to Demand an Additional $11B for Abatement Costs
- 4X Joins Legal Attack on California's New Deepfakes Law
- 5Monsanto Wins Latest Philadelphia Roundup Trial
Who Got The Work
Michael G. Bongiorno, Andrew Scott Dulberg and Elizabeth E. Driscoll from Wilmer Cutler Pickering Hale and Dorr have stepped in to represent Symbotic Inc., an A.I.-enabled technology platform that focuses on increasing supply chain efficiency, and other defendants in a pending shareholder derivative lawsuit. The case, filed Oct. 2 in Massachusetts District Court by the Brown Law Firm on behalf of Stephen Austen, accuses certain officers and directors of misleading investors in regard to Symbotic's potential for margin growth by failing to disclose that the company was not equipped to timely deploy its systems or manage expenses through project delays. The case, assigned to U.S. District Judge Nathaniel M. Gorton, is 1:24-cv-12522, Austen v. Cohen et al.
Who Got The Work
Edmund Polubinski and Marie Killmond of Davis Polk & Wardwell have entered appearances for data platform software development company MongoDB and other defendants in a pending shareholder derivative lawsuit. The action, filed Oct. 7 in New York Southern District Court by the Brown Law Firm, accuses the company's directors and/or officers of falsely expressing confidence in the company’s restructuring of its sales incentive plan and downplaying the severity of decreases in its upfront commitments. The case is 1:24-cv-07594, Roy v. Ittycheria et al.
Who Got The Work
Amy O. Bruchs and Kurt F. Ellison of Michael Best & Friedrich have entered appearances for Epic Systems Corp. in a pending employment discrimination lawsuit. The suit was filed Sept. 7 in Wisconsin Western District Court by Levine Eisberner LLC and Siri & Glimstad on behalf of a project manager who claims that he was wrongfully terminated after applying for a religious exemption to the defendant's COVID-19 vaccine mandate. The case, assigned to U.S. Magistrate Judge Anita Marie Boor, is 3:24-cv-00630, Secker, Nathan v. Epic Systems Corporation.
Who Got The Work
David X. Sullivan, Thomas J. Finn and Gregory A. Hall from McCarter & English have entered appearances for Sunrun Installation Services in a pending civil rights lawsuit. The complaint was filed Sept. 4 in Connecticut District Court by attorney Robert M. Berke on behalf of former employee George Edward Steins, who was arrested and charged with employing an unregistered home improvement salesperson. The complaint alleges that had Sunrun informed the Connecticut Department of Consumer Protection that the plaintiff's employment had ended in 2017 and that he no longer held Sunrun's home improvement contractor license, he would not have been hit with charges, which were dismissed in May 2024. The case, assigned to U.S. District Judge Jeffrey A. Meyer, is 3:24-cv-01423, Steins v. Sunrun, Inc. et al.
Who Got The Work
Greenberg Traurig shareholder Joshua L. Raskin has entered an appearance for boohoo.com UK Ltd. in a pending patent infringement lawsuit. The suit, filed Sept. 3 in Texas Eastern District Court by Rozier Hardt McDonough on behalf of Alto Dynamics, asserts five patents related to an online shopping platform. The case, assigned to U.S. District Judge Rodney Gilstrap, is 2:24-cv-00719, Alto Dynamics, LLC v. boohoo.com UK Limited.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250