The Price of Privacy: How Holiday Shopping Turns You Into Data Gold Series (Part 1 of 5) — Unwrapped: What the Holidays Reveal About Our Data The holiday season brings out the best in retail. Shoppers get the joy of finding perfect gifts, and companies get a surge of...
SECURITY
Privacy-by-Design: Putting Students at the Center
Privacy-by-Design: Putting Students at the Center Series (Part 4 of 4) — Guardians of Student Data: Rethinking Privacy in the Age of AI After exploring federal and state laws and the rise of AI in classrooms, the final piece of the puzzle is Privacy-by-Design....
Fifty States, Fifty Rules: Navigating Student Privacy Across the U.S.
Fifty States, Fifty Rules: Navigating Student Privacy Across the U.S. Series (Part 3 of 4) — Guardians of Student Data: Rethinking Privacy in the Age of AI For EdTech companies, understanding federal rules like FERPA and COPPA is only the beginning of navigating a web...
Inside the Algorithm: Understanding Risks of AI Processing of Student Data
Inside the Algorithm: Understanding Risks of AI Processing of Student Data Series (Part 2 of 4) — Guardians of Student Data: Rethinking Privacy in the Age of AI AI is no longer just a buzzword in EdTech; it’s actively shaping how students learn. Intelligent tutoring...
When EdTech Meets Privacy: Navigating Compliance and Maximizing Impact
When EdTech Meets Privacy: Navigating Compliance and Maximizing Impact Series (Part 1 of 4) — Guardians of Student Data: Rethinking Privacy in the Age of AI Classrooms are changing fast. Digital tools from interactive apps to AI-powered tutors are opening up exciting...
New US Consumer Health Privacy Laws: Essential Do’s and Don’ts
PDF version accessible here.
HIPAA Breach Notifications 2020: Analysis, Observations and Recommendations
Health Information Security/Privacy professionals should be familiar with the HIPAA Breach Notification Rule, which requires HIPAA covered entities (CEs) and their business associates (BAs) to provide notification to U.S. Department …
GDPR Code of Conduct : Current State and Considerations for Next Steps
Since the EU General Data Protection Regulations (“GDPR”) came into effect in 2018, there has been much discussion, but little action, with regard to Article 40 Codes of Conduct (”Codes”) …
Next time you do a Risk Assessment or Analysis, make sure you have Risk Intelligence on board
I was prompted to write this quick post this morning when I read this article. I think it is a good example of what some (actually many, in my experience) …




