ResourceCenter

The U.S. Securities and Exchange Commission requires most publicly traded companies to annually disclose potential risk factors, including cybersecurity concerns. The IAPP’s second annual study of the disclosure statements of 150 publicly traded companies shows that 100 percent of these companies id...

The U.S. Securities and Exchange Commission requires most publicly traded companies to annually disclose potential risk factors, including cybersecurity concerns. According to an IAPP study of the disclosure statements of more than 100 publicly traded companies, losing customers’ or employees’ perso...

IAPP Global Privacy Summit 2012, Washington, DC In the past, information that was rendered anonymous or pseudonymous, encrypted or key-coded was considered to be exempt from the scope of privacy and data security laws. Yet technological breakthroughs over the past two decades, including advances in...

This chart offers a method for categorizing personal information held by organizations based on the sensitivity of that data. ...