Posts

Showing posts from February, 2011

Protection of Personal Information (PPI) and SharePoint – Part 2 of 2

Image
Microsoft answer to PPI is proper Data Governance. Data governance involves the management of personal information in a manner that supports an organization’s mission, complies with imposed regulations as well as its own policies and aligns with customer expectations. Examining how information flows throughout an organization over time, and how it is being accessed by multiple applications and people for various purposes, will clarify the various areas where the organization should deploy technologies to protect private information. This information flow (AKA the Data Governance Life Cycle) comprises four key stages, within which an organization can construct many unique data governance scenarios to address specific considerations.  The four stages are: Collection : Personal information is usually collected from multiple sources (in person, online, via other systems, 3rd party, etc.) and must establish appropriate controls that uniformly assure privacy policy compliance regardl

Protection of Personal Information (PPI) and SharePoint – Part 1 of 2

Image
The Protection of Personal information bill (the bill) has been getting a lot of attention lately, currently it’s a bill that is not yet enforced, but that is set to happen this year. Organisations are expected to take reasonable steps NOW to ensure that they are compliant when this bill becomes law. So lots of seminars and training sessions are now becoming available to educate you on what the bill is all about and what “reasonable” steps can be taken in order for you to be compliant. So what is this bill all about? The bill regulates the collection, storage and distribution of personal information by both private and public bodies. It is based on world standards and is regarded as leading practice baseline for effective data privacy regulation around the world. The bill aims to provide an acceptable balance between the right to privacy and the legitimate need to use personal information. Personal information is regarded as any information related to a person from first na