Data Privacy And Protection Efforts Start With A Company Policy, But Don’t End There

If your company has a data privacy policy in place, make sure you live up to its provisions. Failure to do so makes it more likely that the Federal Trade Commission (“FTC”) will pursue an enforcement action against the company for engaging in a “deceptive practice” under Section 5 of the FTC Act.

What can you do to prevent this from happening? A recent article, referencing an FTC enforcement action, suggests the following:

• Conduct risk assessments

• Use “reasonable methods” to prevent/detect unauthorized access to personal information

• Train employees

• Employ proper response measures

If your business is a financial institution, or your company maintains personal health information, specific Federal laws (Graham-Leach-Bliley, HIPPA) directly impact your obligations with respect to data security and personal health information, respectively.

LOADING PDF: If there are any problems, click here to download the file.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Robert Freedman - Partner at Tharpe & Howell, LLP | Attorney Advertising

Written by:


Robert Freedman - Partner at Tharpe & Howell, LLP on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.