Samples, Tools and Templates    Finance

Data Privacy Accountability Scorecard

Nymity’s Data Privacy Accountability Scorecard is an evidence based, scalable framework for privacy offices to demonstrate accountability by monitoring, measuring and reporting ongoing privacy management activities in order to further realize benefits from their current investments in privacy management and from their future investments in privacy management.

U.S. State Laws Related to the Privacy of Online Activities

The National Conference of State Legislatures has compiled this list of U.S. state laws related to the privacy of Internet users' online activities.

Employee Training Video

This video from Intel aims to encourage employees to put greater importance on data privacy considerations using statistics on consumer trust and outlining how technology is driving the emphasis on protecting privacy protections.

Privacy notices code of practice

This code of practice from the UK Information Commissioner’s Office is designed to help businesses collect and use information appropriately by drafting clear and genuinely informative privacy notices.

FTC FACT Act Red Flags Rule Template

This template is an optional guide for firms to assist them in fulfilling their requirements under the Federal Trade Commission’s Red Flags Rule.

Complying with the Red Flags Rule: A Do-It-Yourself Prevention Program for Businesses and Organizati

The U.S. Federal Trade Commission has designed this compliance template to help businesses and organizations at low risk for identity theft design their own identity theft prevention program. It has two parts: Part A to help you determine whether your business organization is at low risk, and Part B to help you design your written identity theft prevention program if your business is in the low risk category.

Fighting Fraud with the Red Flags Rule

This guide from the U.S. Federal Trade Commission offers help for businesses in educating staff about complying with the Red Flags Rule including FAQs, who needs to comply and what compliance looks like.

Best Practices for Social Media

This paper from the CIO Council addresses various ways the Federal Government can use social media for information sharing, situational awareness, and to support agency operations, and the key considerations for each. The paper also explains privacy best practices for establishing a social media program, from pulling together an intra-agency team of experts to establishing internal social media polices and ensuring transparency of social media uses through published privacy notices and documentation.

The OECD Privacy Framework

This booklet brings together the key components of the OECD privacy framework, along with the supplementary documentation to provide context and explanation. The cornerstone of that framework is the revised Privacy Guidelines, which form Chapter 1.

OECD Guidelines Governing the Protection of Privacy and Transborder Flows of Personal Data

These new guidelines constitute the first update of the original 1980 version that served as the first internationally agreed upon set of privacy principles and focus on the practical implementation of privacy protection through an approach grounded in risk management and the need for greater efforts to address the global dimension of privacy through improved interoperability.

Personal Computing Device Access to Company Computing Systems

This sample policy addresses the use of employee-owned personal computing devices to access, with certain limitations, the Company’s computing systems.

Computing Systems Use Acknowledgement

A sample contract between an employee and employer outlining acceptable uses of company owned computing systems and data owned, operated or controlled by the company.

Short Form Notice Code of Conduct To Promote Transparency in Mobile App Practices

This voluntary Code of Conduct for mobile application (app) short notices developed through the Multi-Stakeholder Process on application Transparency convened by the United States Department of Commerce. The purpose of the short form notices is to provide consumers enhanced transparency about the data collection and sharing practices of apps that consumers use.

ACCESS AWARE toolkit for businesses

The UK ICO created this toolkit for businesses as part of its ACCESS AWARE campaign aimed at helping prompt employees to recognize a request for personal information and know how to deal with it. It includes employee awareness posters and a ‘subject access request’ step-by-step guide.

Cloud Computing - A guide to making the right choices

The Privacy Commissioner of New Zealand developed this privacy checklist to help organizations figure out whether their client and staff information will be safe if they switch to cloud services.

Page 3 of 11 pages  < 1 2 3 4 5 >  Last ›