Personal information leaked in sensitive contexts can spark violence, discrimination, exclusionary policies. Yet my NGO shares confidential data freely
Until recently, I worked for an international development organisation that prides itself on being evidence-driven and using data to determine its social impact. As such, it collects reams of data on its beneficiaries, much of it personal and sensitive. This includes data on health, finances, consumption, and personally identifiable information such as birthdates and national identity numbers of poor and highly vulnerable individuals.
And yet, this organisation has no data protection policies and no senior-level staff charged with monitoring the collection, storage, use, or disposal of the personal data of beneficiaries. There are no threat models to assess the risks nor security protocols in place to protect the private and confidential data of the people it purports to serve.
Continue reading...from Voluntary Sector Network | The Guardian http://ift.tt/2rdA1Yl
0 comments:
Post a Comment