ResourceCenter

In this paper, the Office of the Information and Privacy Commissioner of Ontario, Canada, shares its approach to applying Privacy by Design, including the application of PbD to surveillance programs and the use of associated technologies. The hallmarks of this approach include an emphasis on communi...

This policy created by Carleton University outlines the requirements for the classification and protection of information assets. The policy establishes a framework for classifying and appropriately handling the use of data and information based on its level of sensitivity and value to the organizat...

Purchase Now  (Free for IAPP members!) Originally broadcast: Tuesday, July 10, 2018 What exactly does the law call for? How is a “California resident” defined, and which organizations will be affected? What are the penalties for non-compliance, and does it provide for a private right of action? J...

Dan Goldstein, CIPP/E, CIPP/US, TueorisKamal Govindaswamy, CIPP/US, TueorisKatharina Winkler, Tueoris One of the most important factors for building an effective and sustainable privacy program is encouraging — even requiring — proactive collaboration between cross-functional stakeholders. Such co...

The IAPP has created this poster to help you determine what kinds of activities are more likely to trigger a mandatory data protection impact assessment under the EU General Data Protection Regulation. Print it out for a quick reference when determining how to move forward with a business activity t...