Toronto - A joint paper released today by Information and Privacy Commissioner Ann Cavoukian and Deloitte & Touche, a leading professional services firm, provides corporate executives with suggestions for developing strategies for information security and privacy protection.

The Security-Privacy Paradox: Issues, Misconceptions and Strategies examines the complex and often misunderstood relationship between the disciplines of information security and privacy protection.

"The evolution of the computer from a passive, mechanical record-keeper to an interactive, networked transaction manager has dramatically increased the volume and variety of personally identifiable information collected by organizations," said Commissioner Cavoukian. "This capability for high-speed, high-volume processing and dissemination of personal information creates the potential for substantial risks - as well as large-scale opportunities - associated with information security and privacy protection. However, you must address both - never just one. While information security and privacy do overlap, at times they may appear to contradict. In preserving one alone, companies can do serious damage to the other."

The paper helps to clarify the security-privacy paradox for senior executives and other professionals. The paper:

• Describes and illustrates major characteristics, points of difference and areas of overlap between information security and privacy protection;
  
  
• Addresses issues and misconceptions that can lead to wasted money, time, effort, conflict and, all too often, inappropriate measures and programs; and
  
  
• Recommends and prioritizes business, organizational and technical approaches that are cost-justifiable and can be beneficial in reaching regulatory compliance.

"For those companies that can effectively master building a foundation of trust between themselves and their customers, the rewards will be significant. In doing so, companies must effectively address information security and foster an environment that protects customer privacy," said Robert Parker, Partner, Deloitte & Touche. "The creation of trust in this on-line business world is what can give one company a competitive advantage over another."

The Security-Privacy Paradox cites examples of approaches that work, and those that have failed. In its concluding Roadmap for Successful Strategies section, it offers 16 key steps for smart businesses to follow.

Copies of the paper can be found at: IPC website and www.deloitte.ca.

About the IPC

Recognized internationally as a leading authority on privacy and data protection, Dr. Ann Cavoukian has been Ontario's Information and Privacy Commissioner since 1997. As Commissioner, Dr. Cavoukian oversees the operations of Ontario's freedom of information and privacy laws. Her mandate includes conducting research and educating the public. For more information, please visit the IPC website.

About Deloitte & Touche

Deloitte & Touche (www.deloitte.ca) is Canada's leading professional services firm, providing a full range of assurance and advisory, financial advisory, tax, enterprise risk and consulting services through more than 6,600 people in more than 46 locations across the country. We are dedicated to helping our clients and our people excel. Deloitte & Touche is part of Deloitte Touche Tohmatsu, a global leader in professional services with more than 119,000 people in over 140 countries.