Affiliations

Home

Why Use Us!


Privacy is good for business as it creates and maintains customer trust and loyalty.  Not following standard privacy practices is considered an unfair trade practice.  However if you are not complying with your own customer privacy policy, the FTC or a State Attorney General can fine and enforce a 20 year consent order for a deceptive trade practice.  Data transfers from an E.U. country to the U.S. must comply with the U.S. Department of Commerce's Safe Harbor privacy principles.  We build privacy programs that strengthen brand.     

A privacy breach can have a huge impact on your organization's bottom-line.  The Ponemon Institute's 2009 annual data breach cost study found the average breach cost to be $6.7 million based on $204 per compromised record times 33,000 average records.  The Gartner Group found the total cost of encryption, intrusion protection and auditing solutions to average $16 per record.  In other words, the cost to protect data is only 8% of the cost of a single privacy breach on a per record basis.  The good news is that Verizon Business' 2009 data breach investigations report indicates that 96% of breaches are preventable by reasonable controls.  We establish cost-effective data security programs to protect against such damaging breaches.   

When you have a breach, there is no time for learning on the job.  65% of breach costs are due to lost business, including customer defections and higher acquisition costs.  The primary reasons are delayed and poor customer notifications and communication.  We act quickly and effectively to control the damage.  

 

Breaches have wide-reaching, disruptive and costly impacts:

  • Lost business opportunity, including customer churn and higher acquisition losses
  • Fines and penalties, including restitution costs if customers harmed
  • Lawsuits, including class-action law suits if customers harmed
  • Direct operational costs, including legal, notifications, credit monitoring, consultants, call center, forensics, system repair, marketing, public relations
  • Lost productivity dealing with customer concerns, the press and legal responsibilities  
  • Increased regulatory oversight and costs, including regular independent audits 
  • Officer personal liability
  • Stock devaluation
Biggest surprise realized by CEOs after a breach is the lengthy adverse impact on key executive responsibilities, dealing with the media, customers and other stakeholders in crisis management mode to restore company reputation and customer trust.
   

Recent Blog Entries

  • What Are the Privacy Expectations under the Obama Administration and the New Congress? Obama’s advisors include notable privacy advocates.  The following was taken from Obama’s published campaign plan."Safeguard our Right to Privacy: The open information platforms of the 21st ...
    Posted Oct 31, 2010 12:22 PM by Michael Cox
  • New State Privacy Laws Requiring More Prescriptive Data Protection Standards In 2002 California became the first state to enact a privacy breach notification law.  California requires notifications of persons whose "unencrypted" sensitive personal information might be compromised in the event ...
    Posted Oct 31, 2010 12:23 PM by Michael Cox
  • Should the Privacy and Information Security Disciplines Converge? See the prior two blog entries regarding the differences between the privacy and information security disciplines and the risk of having IT responsible for enterprise privacy and information security programs ...
    Posted Oct 31, 2010 12:23 PM by Michael Cox
  • Is There Risk in Having IT Responsible for Enterprise Information Security? See the prior blog entry regarding the differences between the Privacy and Information Security disciplines. Many CEOs place the responsibility for strategic enterprise information security management in the hands of ...
    Posted Oct 31, 2010 12:24 PM by Michael Cox
  • Privacy & Information Security - How Are These Different? Privacy is strategic - information security is tactical Privacy is strategic in nature.  The primary objective is to develop the organizational strategy to protect this sensitive personal information.  This includes ensuring ...
    Posted Oct 31, 2010 12:25 PM by Michael Cox
Showing posts 1 - 5 of 5. View more »

Sign in  |  Terms  |  Report Abuse  |  Print page  |  Powered by Google Sites