September 17, 2009

International Association of Privacy Professionals Honors Top Privacy Innovators

Barclays Bank, Graduate Management Admission Council, and IBM Research and Stanford University Receive HP-IAPP Privacy Innovation Awards in Boston

BOSTON — September 17, 2009 —Winners of the 7th annual HP-International Association of Privacy Professionals (IAPP) Privacy Innovation Awards were recognized today at the IAPP Privacy Dinner, held in conjunction with the IAPP Privacy Academy 2009. The award recipients are Barclays Bank PLC, Graduate Management Admission Council (GMAC) and IBM Research and Stanford University.

The annual awards recognize privacy leadership and are judged from a field of entries. This year’s winners were determined by a panel of public sector and private sector privacy experts including Brent Carey, Privacy Manager, Victorian Department of Justice, Melbourne, Victoria, Australia; Stan Crosley, CIPP, Chief Privacy Officer, Eli Lilly and Company; Christopher Kuner, Partner, Hunton & Williams, Brussels, Belgium; Debbie Morey, CIPP, Global Privacy Manager, Hewlett Packard Company, and Susan Smith, Americas Privacy Officer, Hewlett Packard Company.

"On behalf of more than 6,000 privacy professionals across 50 countries, we salute this year’s winners for their impressive accomplishments," said IAPP Executive Director Trevor Hughes. "This year's results show privacy can be effectively woven into the fabric of business, society and technology.”

"HP is pleased to sponsor an award that spurs global privacy innovations and advances the discipline," said Hewlett Packard Company Americas Privacy Officer Susan Smith.

In the Large Organization category (more than 5,000 employees), Barclays Bank PLC won for its cross-company approach to privacy that focuses on privacy awareness, compliance and cultural change. The multi-language, multi-media awareness campaign launched by the U.K.-based financial institution included posters, stickers, mouse pads, coffee mugs and other collateral, resulting in an awareness effort that was both distinctly creative and effective. The privacy strategy, which incorporates multiple business units, customers, clients and employees, has received executive support throughout the bank. It has led to an increased privacy capability with the establishment of more than 20 dedicated privacy roles at Barclays.

The winner in the Small Organization category (fewer than 5,000 employees), is Graduate Management Admission Council (GMAC), a not-for-profit organization of graduate-level business schools around the world that also owns and administers the Graduate Management Admission Test, or GMAT. The organization was recognized by the 2009 Innovation Award judges for its data protection program in support of the GMAT exam. This comprehensive program incorporated opt-in consent for all programs and services as well as advanced biometric palm vein technology to authenticate test takers. GMAC became the first organization to be authorized by France’s privacy authority, the CNIL, to process such data.  

This year’s Technology category was topped by IBM Research and Stanford University for their joint work toward a landmark advancement in encryption. The two organizations solved the challenge of “homomorphic encryption” or privacy  homomorphism whereby computers can process encrypted data without the use of a decryption key—a challenge deemed by some as unsolvable and which has eluded researchers for more than 30 years. Computer scientist Craig Gentry first began tackling the challenge first at Stanford University and then at IBM Research and successfully completed the work in 2009. The IBM/Stanford method for privacy-enabled data encryption will allow individuals to have full control over the content and privacy of their data while enabling flexibility of use and maintaining security.

About the IAPP
The International Association of Privacy Professionals is the world's largest association of privacy professionals with more than 6,000 members across 50 countries. The IAPP helps to define and support the privacy profession through networking, education and certification. More information about the IAPP is available at

For more information, press only:
Tammy Vigliotti
International Association of Privacy Professionals
+1 (207) 351.1500