|
If a business is able to perform analysis in real time, the
data will be better able to serve the organization’s needs. “Given the enormous
volumes of [data] out there, it's really important to be able to have the most
accurate and current information that exists, which is why you have to operate
in a near real-time environment,” she said. “If the data is dated, it may no
longer be relevant.”
At the same time, Cavoukian explained, features such as de-identification
methods and tamper-resistant audit logs must be put in place to control the
vast amount of data as it is recorded. These tools are crucial in ensuring accountability
and transparency.
The popularity of social media networks generates a diverse mix
of data, which is collected from various individual activities. Companies can combine
the data from multiple sources to help generate business insights, but as
Cavoukian noted, this also increases the risk of inadvertent disclosure or
unauthorized access, creating significant privacy risks.
To reduce this threat, Cavoukian asks that the data be
anonymized before transfer, so data at rest in the recipient database will automatically
be anonymous. “If the data can be de-identified at the source, then you have
little to be concerned about in terms of the privacy risks that may appear in
the analytics process.”
From there, the use of tamper-resistant audit logs ensures
that each data element has a source attached to it. Not only is the data now
traceable, but it cannot be tampered with. “The tamper-resistant audit logs are
really an integral, mandatory component of these systems,” Cavoukian said. “And
it's very important for senior management of the organization to ensure that
they exist in this tamper-resistant methodology.”
Integrating Privacy
by Design into infrastructure
If an organization is building a new application or system, Privacy by Design can be embedded
directly into the new technology, Cavoukian explained. “If you embed it into
code, then you can be assured that it's going to follow through because it's
right in the program you've written.”
|
