The U.S. Federal Trade Commission has announced it submitted a comment to the National Institute of Standards and Technology on its preliminary draft of the "NIST Privacy Framework: A Tool for Improving Privacy through Enterprise Risk Management." The FTC used its comment to recommend five improvements to the framework. The suggested changes include a greater emphasis on addressing privacy breach risks throughout the framework, considerations for sensitive information, increasing consumer awareness of an organization's data privacy practices, defining roles for deploying a privacy program and more emphasis on risk assessment as a first step of incident response.
Full Story