Document

Privacy Risk Management: Building privacy protection into a Risk Management Framework to ensure that privacy risks are managed, by default

Summary  The idea that privacy – an individual’s right to control the collection, use and disclosure of information about him or herself – may present risk, seems to be a new one to many. That it should be a novel concept to those responsible for managing risk, however, needs to be addressed. Personal information is an asset, the value of which is protected and enhanced by a suite of security practices and business processes. Like other operational risks, those related to the protection of personal information benefit from the scrutiny of a formal risk management discipline.
Keywords  privacy, Risk management, personal information
Author(s)  Office of the Information & Privacy Commissioner of Ontario

Ontario Lottery and Gaming

YMCA of Greater Toronto
Published Date  Apr 28, 2010

<< Back
Back to Top
25 Years of Access and Privacy
To search for a specific word or phrase, use quotation marks around each search term. (Example: "smart meter")