Customer Reviews

The Privacy Papers: Managing Technology, Consumer, Employee and Legislative Actions

5 star:		(1)
4 star:		(1)
3 star:		(0)
2 star:		(0)
1 star:		(0)

 

 

This book covers the wide spectrum of privacy issues facing businesses today...from laws and regulations to technology to business policies, procedures and other topics. The variety of writers for the many sections provides a great breadth of viewpoints, advice, knowledge, experience and interpretation of many privacy issues and how to address them within an organization.

I have used this often for addressing privacy compliance and awareness issues within my organization. I look forward to getting the next edition when it becomes available!

This book covers a lot of ground, with information that will be of interest to IT security, HR and privacy managers (in some large companies security and privacy are combined into a single function), internal auditors, and database, systems and network administrators.

The first section, Business Organization Issues, covers policies for a number of functional areas, auditing, e-commerce issues, and related concerns at the administrative level. Technology is also addressed as a high-level, as are topical concerns such as identity theft and internet activities.

Section two covers the full range of applicable tools and related technologies, including encryption/cryptography, cookies and profiling, monitoring and content filtering, wireless communications and data mining.

In the final section US and international laws and issues are covered at a high level, but sufficiently detailed to provide the salient issues. Although there are some minor gaps in this section, it was up-to-date when it was published, and the gaps can be addressed through extrapolation and other publications. The most notable gap is the absence of Sarbanes-Oxley Act Section 404 requirements related to data access and manipulation, and other assurance measures. That said, the material in this book is consistent with SOA, and the information and advice map nicely to it if you cross reference requirements to business organization issues, and tools and technologies sections of this book.