6e Data confidentiality

6e Data confidentiality

1. Need to keep data confidential

   • Comply to DPA
     • Personal data must be kept secure and not processed without permission
       • Regulation of Investigatory Powers Act enables organisation to view emails between employees in company
       • Freedom of Information gives access to non-personal data for statistics or in public interest
     • Personal details only revealed to employees who need it.
   • Protect commercially sensitive info
     • E.g. sales figures, new products designs, market research, medical research, police investigations
     • Keep a competive advantage
   • Controversy on what info should be released
     • e.g. info released on criminals may lead to vigilanties, others just want to avoid the criminals

2. How to keep data confidential

   • Security Policies
   • Choosing appropriate passwords and changing regularly
   • Locking work stations and using screensavers
   • Use of anti-virus, anti-spyware and firewall
   • Positioning screen away from people. Making sure no-one is look over shoulder
   • Encryption
   • Physical security e.g. locks and guards, CCTV
   • Password guidace
     • Combination of cases, numbers and special characters
     • Not obviously linked to you
     • Changed regularly and not the same as a previous password
     • Never shared

3. Private data includes

   • Address
   • Date of birth
   • Medical records
   • Email address