Conducting Effective Privacy Impact Assessments

Conducting Effective Privacy Impact Assessments

Instructions

Need Help Writing an Essay?

Tell us about your assignment and we will find the best writer for your paper

Write My Essay For Me

Conducting Effective Privacy Impact Assessments

A privacy impact assessment (PIA) is a process to help you identify and minimize data privacy risk. Specifically, this type of assessment helps identify the risks to an individual when an organization collects personal information for a business purpose. There are many reasons an organization might collect personal data. For example, all businesses must collect personal information from employees to process payroll taxes. Many businesses collect personal information from customers to ship goods and services or conduct research to create new products.An organization should complete a PIA any time it intends to collect a new data element from an individual, such as name, date of birth, age, race, sex, address, biometric identifier, or any other element of personal data. Completing a PIA helps an organization think deeply about privacy issues and risks related to collecting specific types of data. To complete a PIA, an organization should:

• Clearly specify the data that it wishes to collect from a person.
• Clearly document why it must collect that data.
• Describe how the data will be collected, used, and stored.
• Document the risks of collecting, using, and storing, the data.
• Describe the measures that the organization will take to reduce the risks of collecting, using, and storing the data.

Organizational leaders will use the information provided in a PIA to determine whether the need for collecting the data outweighs the risks to the organization that are posed by collecting it. This is a business decision. Stakeholders such as legal counsel, human resources professionals, and information security and privacy professionals will often help prepare and review the PIA. An organization usually does not need to share its PIA with other entities.In this lab, you will learn about and prepare a privacy impact assessment for a fictitious organization.Lab OverviewThis lab has three parts, which should be completed in the order specified.

1. In the first part of the lab, you will document the personal information that a company seeks to collect.
2. In the second part of the lab, you will document the risks of data collection.
3. In the third part of the lab, you will explain why (or why not) the company should collect the personal information specified in Part 1.

Finally, if assigned by your instructor, you will complete a challenge exercise that allows you to use the skills you learned in the lab to conduct independent, unguided work – similar to what you will encounter in a real-world situation.Learning ObjectivesUpon completing this lab, you will be able to:

1. Identify personal data elements.
2. Describe risks to the collection of personal data.

Justify data collection activities.

 

RUBRIC
Excellent Quality 95-100%	Introduction 45-41 points The background and significance of the problem and a clear statement of the research purpose is provided. The search history is mentioned.		Literature Support 91-84  points The background and significance of the problem and a clear statement of the research purpose is provided. The search history is mentioned.			Methodology 58-53 points Content is well-organized with headings for each slide and bulleted lists to group related material as needed. Use of font, color, graphics, effects, etc. to enhance readability and presentation content is excellent. Length requirements of 10 slides/pages or less is met.
Average Score 50-85%	40-38 points More depth/detail for the background and significance is needed, or the research detail is not clear. No search history information is provided.		83-76  points Review of relevant theoretical literature is evident, but there is little integration of studies into concepts related to problem. Review is partially focused and organized. Supporting and opposing research are included. Summary of information presented is included. Conclusion may not contain a biblical integration.			52-49  points Content is somewhat organized, but no structure is apparent. The use of font, color, graphics, effects, etc. is occasionally detracting to the presentation content. Length requirements may not be met.
Poor Quality 0-45%	37-1 points The background and/or significance are missing. No search history information is provided.		75-1 points Review of relevant theoretical literature is evident, but there is no integration of studies into concepts related to problem. Review is partially focused and organized. Supporting and opposing research are not included in the summary of information presented. Conclusion does not contain a biblical integration.			48-1 points There is no clear or logical organizational structure. No logical sequence is apparent. The use of font, color, graphics, effects etc. is often detracting to the presentation content. Length requirements may not be met
You Can Also Place the Order at www.perfectacademic.com/orders/ordernow or www.crucialessay.com/orders/ordernow

 

PLACE THE ORDER WITH US TODAY AND GET A PERFECT SCORE!!!