Chapter 3

Chapter 3

1. Telecommunications Sector

2. Healthcare sector

   • US HIPAA
   • EU Data Protection Directive , Article 8.

3. Financial Sector

   • US GBLA
   • Japan Act of Protection of Personal Information

4. Online Privacy

5. Public Sector

   • Canada privacy law: federal, province, territory and municipality.
   • US Privacy Act 1974
   • EU data protection Directive

6. HR

7. Smart Grid

   • EU "Communication Smart Grids: from innovation to deployment" policy, 2011
     • Technical standards ensuring data protection for consumers.
   • Canada: "privacy by design", 2011
   • EU Article 29 Working Party Opinion, 2011
     • Clarifies legal framework aplying to smart meters
   • IoT= Internet of Things
     • Mitigating risks
       • Users: Auditing, disconnect, encryption, internet, passwords
       • Vendors: Auditing, defaults, encryption, filtering, passwords, security patches

8. Direct Marketing

   • Opt-out systems
   • National "Do not call" registry, enforced by FTC.
   • NAI: Network Advertising Initiative
     • Entities adopting this must provide opt-out clause
   • E-Privacy Directive/2002 Privacy and Electronic Communications Directive: affirmed right of individuals to set limits on direct marketing in the EU.
     • e-privacy directive ammended 2009: Cookie Directive.
   • US "do not trace" proposal by te FTC.
   • W3C: Worldwide Web Consortium
     • Establising Do not track standards, providing guidance on definition of "tracking".