Understanding rights and responsibilities for data privacy is critical for businesses and consumers now more than ever. Privacy laws and regulations are being formed and changing. And more people are expressing concerns about privacy and data rights now than ever before. As organisations support remote working environments and cloud-based services and applications, they need to ensure that users understand their critical role in supporting privacy compliance. That’s why we created a new kit to help support businesses with this effort.
Data Privacy Day 2021: Personal info is like money: Value it. Protect it.
National Data Privacy Day 2021 promotes awareness of data privacy issues and challenges. Per the National Cyber Security Alliance (NCSA): “Millions of people are unaware of and uninformed about how their personal information is being used, collected or shared in our digital society. Data Privacy Day aims to inspire dialogue and empower individuals and companies to take action.”
Threat actors continually challenge data privacy; their malicious efforts to steal the personal information of an organisation’s customers, partners and employees grew in 2020 and predictions for 2021 show no signs of slowing. User knowledge is key to transforming users from privacy liabilities to privacy defenders.
Proofpoint is providing free tools in our Data Privacy Day Awareness Kit to help organisations educate their users on privacy fundamentals and how to avoid malicious tactics that could lead to the unauthorised access of private and personal data.
Proofpoint Data Privacy Day Awareness Kit
Remind users of data protection basics
Data protection is the foundation for data privacy. Threat actors are continually refining their tactics to deceive users. This is a great time to remind your users of the routine practices that will help them avoid the malicious deceptions used by hackers. Ensure all your users understand the following:
- Email is the number one threat vector; users should carefully inspect any link before clicking on it. If the user is not sure if the link is safe, instruct them to use the suspicious email reporting button to have the security professionals check it out.
- Attachments can launch malicious code that may jeopardise the security/privacy of personal information; they should only open attachments from trusted co-workers.
- Only download software that is authorised by the organisation.
- Never disclose personal or sensitive information via email.
- Always verify very urgent and or unusual internal requests for personal data of customers, partners or employees.
Phishing remains the number 1 threat to data security and data privacy.
Familiarise users with data privacy fundamentals
Data privacy best practices go beyond data protection—they include considerations for collection of personal data, consent, data erasure and data sharing. All users should be familiar with these foundations to support data privacy:
- Collection of personal data is limited to data that is required to complete transactions and/or to support the customer’s use of the product or service
- To contact customers for promotional reasons, organisations must obtain explicit consent to send promotional or sales offers
- Customers have the right to know what data has been collected about them and how it is being used
- Customers have the right to have their data erased as long as the erasure does not conflict with other laws or regulations regarding retention
- Personal customer data should not be shared across the organisation unless policy explicitly allows the sharing. For instance, developers may want copies of customer data to test new applications or new functions. Depending on their location, the policy may require that they only receive anonymised customer data for testing purposes.
User knowledge and awareness are key to data privacy.
Improve your user's privacy awareness and readiness. Leverage the Proofpoint Data Privacy Awareness Kit
Privacy and cybersecurity best practices and users are critical to data privacy compliance support. To help organisations raise privacy awareness and support Data Privacy Day 2021, we’ve curated a selection of free resources to support your user’s privacy awareness.
The Proofpoint Data Privacy Day Awareness Kit provides written, visual and video content that can be emailed, displayed, posted or presented throughout the season. You’ll find a description and how to use the materials and we provide a suggested communication plan and schedule. Here, you’ll find guidance and tips for successfully and executing a holiday awareness campaign with the materials provided.
Data Privacy Awareness Kit Materials
Start Now
In this template, we provide a 3-week rollout of the Privacy Awareness kit to help your users stay safe!
- Week 1: Launch the program and review best practices for data protection
- Week 2: Familiarise users with how malicious emails can be used to obtain personal information
- Week 3: Provide a fun video on email threats that could jeopardise privacy and actual GDPR training
We encourage you to review your challenges and adjust this suggested rollout to meet the needs of your organisation.
*And Check Out Our Security Awareness Training Content
Want to see Proofpoint Security Awareness Training’s full Content Library? Download our content solution brief.