Confirmation bias is a cognitive bias whereby people consume information in a way that reinforces their previously held beliefs. Many users and implementers of the NIST Privacy Framework do just that, diverting their attention away from many of the important and central concepts in the framework.
“Privacy by design” has been part of the privacy practitioners’ vernacular for well over a decade, but for many the phrase remains vague. In this talk, the author of the IAPP CIPT textbook, Strategic Privacy by Design, will walk through the development of a hypothetical smart thermostat following the recently released Design Process Standard from the Institute of Operational Privacy Design. For many participants this will open up a new avenue of thinking about privacy beyond the laws, principles and programmatic elements they are most familiar with and provide a level of concreteness to the concept beyond the broad to “build privacy in.”
Threat modeling is all the rage in the security field, but what is threat modeling in privacy? Join R Jason Cronk as he discusses the nascent field of privacy threat and risk modeling. In this IAPP Sacramento KnowledgeNet, he’ll discuss privacy risk as described in his IAPP book Strategic Privacy by Design, the new MITRE Corporation’s PANOPTIC Threat Model and the risk model used in the forthcoming IOPD standard for privacy by design.
