Privacy Impact Assessments - The next challenge for business ?

#GDPR and #ePrivacy are hot topics in the UK and Europe but moving forward we suspect most businesses will need to Privacy Impact Assessments ( #PIA ) whenever a new policy or procedure is introduced or a new project or assignment is under taken. 

A proportionate response that does not involve unnecessary form filling, box ticking, and endless consultation is going to be essential if the related burden is to be minimised

Those completing PIA will need to consider both physical and informational privacy

Informational privacy – the ability of a person to control, edit, manage and delete information about themselves and to decide how and to what extent such information is communicated to others.

Intrusion can come in the form of collection of excessive personal information, disclosure of personal information without consent and misuse of such information. 

It can include the collection of information through the surveillance or monitoring of how people act in public or private spaces and through the monitoring of communications whether by post, phone or online and extends to monitoring the records of senders and recipients as well as the content of messages

Physical privacy - unwelcome searches of a person’s home or personal possessions, bodily searches or other interference, acts of surveillance and the taking of biometric information

We suspect many businesses and organisations will need to introduce policies and procedures around PIAs and train staff to undertake them.    As always Concrew Training aims to provide support in both these areas.  

For more information contact us direct