It's finally time to embrace Privacy by Design
[Commentary] On Data Privacy Day, it's sobering to remember how many people have been personally affected by devastating breaches. But many of those hacks could have been prevented if companies simply employed a more than 20-year-old principle known as Privacy by Design.
According the PbD standards, companies should consult with data protection officer "prior to the design, procurement, development, and setting-up of systems for the automated processing of personal data, in order to ensure the principles of privacy by design and privacy by default." All this before going live; not after a security breach has exposed an organization's failure to fully operationalize its lack of respect for user privacy. Bolting on privacy protections after a breach, often likened to bolting the barn door after the horses have left the stable, is costly, clunky, and may not win back the trust of consumers.
[Cobb is a global security researcher for Internet security maker ESET]