Best Practices

The World Privacy Forum is pleased to announce its work on a new project with the Center for Global Development (CGD). This project, Governing Data for Development, is led by CGD, with WPF’s Executive Director Pam Dixon as co-chair of the project working group with co-chair and Oxford professor Benno Ndulu, who is also the former Governor of the Central Bank of Tanzania. The project, which has been underway for a year, has produced its first report, which is a scoping report based on interviews with key stakeholders. This blog post, which provides background on the project and links to the first project report, is being jointly posted at WPF and CGD.

The UK Information Commissioner’s Office has published a new code of practice for online services directed to children, Age appropriate design: A code of practice for online services. The new code sets 15 flexible standards and gives specific explanations of how the GDPR applies to childrens’ online activities and pursuits. The code is not a

Today WPF was quoted in an AP article about cameras that detect age, gender, and emotion being installed in retail stores, Coming to You: Cameras that guess your age and sex. For us, this was deja vu. In 2010, we published a report about cameras in retail settings called The One Way Mirror Society. In

The US Department of Health and Human Services (HHS) has produced a set of cybersecurity resources for healthcare provider organizations from small to large. So far, HHS has published four documents: an overview report of cybersecurity issues and practices, two technical volumes, and a toolkit. The documents focus on what an expert multistakeholder consensus group determined to be the five most prevalent cybersecurity threats and the ten core cybersecurity practices. The practices are voluntary, and utilize the NIST cybersecurity framework. The documentation is based in reality, not conjecture, and the documents are not intended to sell any particular products for any particular vendor. This has allowed for a rich and helpful documentation of current challenges along with solutions. See our overview of the four new resources.

In comments to the FTC regarding a proposed revised consent decree with Uber Technologies, Inc., WPF urged the FTC to clarify what the term “assessment” means in the context of a consent decree with a company. The comments note that the requirement for an assessment is not the same as the requirement for an audit.