Media

March 10, 2004

IAPP Establishes Privacy Certification Program

Grants from HP and Microsoft Enable World’s Leading Privacy Group to Establish Educational
and Testing Standards for Professional Privacy Certification Credential

Philadelphia, PA, March 10, 2004 – The International Association of Privacy Professionals (IAPP), the
world's largest association for individuals in the profession of privacy, announces the establishment of a
program to develop testing and certification standards for the privacy profession. The Certification
program is made possible by special grants from HP and Microsoft, and will be co-developed through a
panel of IAPP and independent resources, including the Ponemon Institute, a leading privacy research
group, and the CIO Institute at Carnegie Mellon University.

An Advisory Board for the Certification program was announced at the IAPP Privacy & Data Security
Summit in February in Washington, D.C., including: Dan Swartwood, Data Privacy Officer, HP (chair);
Peter Cullen, Chief Privacy Strategist, Microsoft; Sandy Hughes, Global Privacy Executive, Procter &
Gamble; Kirk Herath, Chief Privacy Officer and Associate General Counsel, Nationwide Insurance
Companies; Richard Purcell, CEO, Corporate Privacy Group; Trevor Hughes, Executive Director, IAPP;
Dr. Larry Ponemon, Ponemon Institute; Tammy Oswald, Privacy Manager, Nordstrom; and Dennis
Becktell.

“Microsoft is honored to be working with the industry to support the privacy profession,” said Peter
Cullen. “As more and more businesses begin to recognize privacy as a business imperative, building
impactful privacy professionals globally is essential.”

“The privacy profession grows more complex each day, and with state, national, and international privacy
regulation affecting nearly every industry, the importance of a certification program cannot be
understated,” said Trevor Hughes. “Organizations need to know they are hiring privacy professionals who
are well qualified to provide the level of oversight required to mitigate the risks associated with noncompliance
while engendering the trust and value a properly managed privacy program affords.”

“The IAPP has clearly emerged as the center for the privacy profession,” said Dan Swartwood. “HP takes
a proactive approach to exploring and shaping regulations and global standards around privacy. Building a
Certification program within the IAPP is an important step towards further defining and promoting the
profession.”

For more information on the IAPP Certification Program, please contact Peter Kosmala, IAPP
Director of Certification, at (207) 351-1500 ext. 103, or peter@privacyassociation.org.

ABOUT THE IAPP
The IAPP is the world’s leading association of privacy and security professionals. With more than 1,000
individual and corporate members, the IAPP defines and supports the profession of privacy by being a
forum for interaction, education, and discussion across industries. Further information on the IAPP can
be found at www.privacyassociation.org.