IPC - Office of the Information and Privacy Commissioner/Ontario | Discussion Papers

Biometric Encryption Chapter from the Encyclopedia of Biometrics

Thu, 24 Dec 2009 00:00:00 GMT

The following is a chapter on Biometric Encryption excerpted from the Springer Encyclopedia of Biometrics.

A Discussion Paper on Privacy Externalities, Security Breach Notification and the Role of Independent Oversight

Tue, 22 Dec 2009 00:00:00 GMT

Prepared for The Eighth Workshop on the Economics of Information Security University College, London, England June 24, 2009

SmartPrivacy for the Smart Grid: Embedding Privacy into the Design of Electricity Conservation

Tue, 17 Nov 2009 00:00:00 GMT

(News Release)

A Pragmatic Approach to Privacy Risk Optimization: Privacy by Design for Business Practices

Tue, 10 Nov 2009 00:00:00 GMT

This paper introduces Nymity’s Privacy Risk Optimization Process (PROP), a process that enables the implementation of privacy into operational policies and procedures, which results in Privacy by Design for business practices. The PROP is based on the International Organization for Standardization (ISO) concept that risk can be both positive and negative. Based on this concept, ISO also defines Risk Optimization as a process whereby organizations strive to maximize positive risks and mitigate negative ones. The PROP uses these concepts to implement privacy into operational policies and procedures. (News Release)

Remote Home Health Care Technologies: How to Ensure Privacy? Build It In: Privacy by Design

Mon, 02 Nov 2009 00:00:00 GMT

(News Release)

Privacy by Design: Essential for Organizational Accountability and Strong Business Practices

Mon, 02 Nov 2009 00:00:00 GMT

Get rid of it Securely to keep it Private - Best Practices for the Secure Destruction of Personal Health Information

Thu, 29 Oct 2009 00:00:00 GMT

This is joint publication between Commissioner, Dr. Ann Cavoukian and Robert Johnson, Executive Director of the National Association for Information Destruction (NAID). This publication was borne out of a particular Health Order (HO-006) which Commissioner Cavoukian issued this past summer regarding records containing personal health information being found scattered on the streets, in Ottawa, outside a medical centre housing a medical laboratory. The publication outlines a number of Best Practices that can be employed in the secure destruction of personal health information records. These include: developing a secure destruction policy that is clear, understandable and leaves no room for interpretation; segregating and securely storing records; determining the best methods of destruction; documenting the destruction process; considerations prior to employing a third-party service provider; disposal of securely destroyed materials; and ensuring compliance.

Youth Online - Beware of the "5 Ps' When Using Social Networks: Focus!

Thu, 22 Oct 2009 00:00:00 GMT

31st International Conference of Data Protection and Privacy Commissioners, Madrid, November 4-6, 2009

Privacy by Design: The 7 Foundational Principles

Thu, 20 Aug 2009 00:00:00 GMT

This useful sheet outlines The 7 Foundational Principles of Privacy by Design - a concept that Commissioner Cavoukian developed back in the 90’s, to address the ever-growing and systemic effects of Information and Communication Technologies, and of large-scale networked data systems. Privacy by Design asserts that the future of privacy cannot be assured solely by compliance with regulatory frameworks; rather, privacy assurance must ideally become an organization’s default mode of operation. Privacy by Design now extends to a “Trilogy” of encompassing applications: 1) IT systems; 2) accountable business practices; and 3) physical design and infrastructure.

(Revised December 2009)

The Relevance of Untraceable Biometrics and Biometric Encryption: A Discussion of Biometrics for Authentication Purposes

Wed, 15 Jul 2009 00:00:00 GMT

Commissioner Cavoukian and Max Snijder, CEO, European Biometrics Forum co-authored this vision paper that discusses the need for secure storage and privacy protection for biometric reference data. Their discussion is meant to touch on the distinguishing features of the algorithmic process defined by BE, the terminology that best describes this process, and to provide a springboard for further thought leadership on the policies and guidelines needed to distinguish between conventional and untraceable biometrics schemes.

(Updated August 2009)