U.S.A. Department of Commerce - How to Join Privacy Shield.

In order to receive Privacy Shield benefits, an organization must self-certify annually to the Department of Commerce that it agrees to adhere to the Privacy Shield Principles, a detailed set of requirements based on privacy principles such as notice, choice, access, and accountability for onward transfer. 

Data Protection Officer: Requirements.

The DPO should be given the opportunity to develop his/her skills. This could include the possibility to obtain certification as privacy professional. 

The most relevant certification at this stage would be the one provided by the International Association of Privacy Professionals (IAPP), which offers various privacy professional certifications, including Certified Information Privacy Professional (CIPP) and Certified Information Privacy Professional/Information Technology (CIPP/IT). An EU specific certification will be offered in the near future.

Canada amends federal data protection law, PIPEDA

Canada’s Senate and House of Commons passed the Digital Privacy Act to amend the country’s federalPersonal Information Protection and Electronic Documents Act (PIPEDA)  - By Christine Carron (CA) - http://www.dataprotectionreport.com

Workshop for SysAdmin

E.U. Privacy Regulation - Data Protection Impact Assessment

Article 33 - 1. Where a type of processing in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk for the rights and freedoms of individuals, the controller shall, prior to the processing, carry out an assessment of the impact of the envisaged processing operations on the protection of personal data. A single assessment may address a set of similar processing operations that present similar high risks.

Sharing an IDEA . . . connect the dots for an ISMS (ISO 27001 - NIST 800-53) Remote Audit System. http://t.co/dcvUsLM2VC

— Giuseppe Serafini (@g_serafini) September 30, 2014

SANS Institute InfoSec Reading Room

Information Risks & Risk Management
(by John Wurzler)

EU Data-Privacy Overhaul in Limbo as Some States Drag Feet http://t.co/slmK8bse1q via @BloombergNews

— Giuseppe Serafini (@g_serafini) 5 Dicembre 2013

New Privacy Law Gives California's Youngsters an Internet Eraser http://t.co/YSPcvF1DOV #privacy

— PrivacyMemes (@PrivacyMemes) September 24, 2013

Behavioral advertising - World Privacy Forum.

I.A.B. releases flawed guidelines for controlling behavioral advertising practices.

The Interactive Advertising Bureau has released its self-regulatory guidelines for online advertisers. The guidelines are inadequate to protect consumers, and in some cases, create loopholes for significant consumer harm. In the area of sensitive information, the guidelines are especially weak. The IAB definition of sensitive information is much weaker than the definition of sensitive information already adopted by industry in the formal NAI agreement, which is still in effect today.

Social network

Come tutelare la propria privacy ai tempi di Facebook, MySpace & Co.? Come difendere la propria reputazione, l'ambiente di lavoro, gli amici, la famiglia, da spiacevoli inconvenienti che potrebbero essere causati da un utilizzo incauto o improprio degli strumenti offerti dalle reti sociali?

Sono queste alcune delle domande a cui risponde la guida messa a punto dal Garante per la privacy "Social Network: Attenzione agli effetti collaterali". Non un manuale esaustivo, ma un agile vademecum sia per persone alle prime armi, sia per utenti più esperti, pensato per aiutare chi intende entrare in un social network o chi ne fa già parte a usare in modo consapevole uno strumento così nuovo.