<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>DiskShred Blog &#187; Privacy</title>
	<atom:link href="http://blog.diskshred.co.uk/category/privacy/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.diskshred.co.uk</link>
	<description>Debate and advice on data security</description>
	<lastBuildDate>Mon, 09 Aug 2010 11:34:03 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Google back on the streets</title>
		<link>http://blog.diskshred.co.uk/2010/08/09/google-back-on-the-streets/?utm_source=rss&amp;utm_medium=rss&amp;utm_campaign=google-back-on-the-streets</link>
		<comments>http://blog.diskshred.co.uk/2010/08/09/google-back-on-the-streets/#comments</comments>
		<pubDate>Mon, 09 Aug 2010 11:34:03 +0000</pubDate>
		<dc:creator>Keith Pryde</dc:creator>
				<category><![CDATA[Data Protection]]></category>
		<category><![CDATA[DiskShred]]></category>
		<category><![CDATA[Legislation]]></category>
		<category><![CDATA[Privacy]]></category>

		<guid isPermaLink="false">http://blog.diskshred.co.uk/?p=147</guid>
		<description><![CDATA[Google have become yet another organisation to escape the wrath of the Information Commissioner’s Office.
Since April this year the entire infosecurity industry in the UK and beyond has been waiting with baited breath for the dreaded £500,000 fine to be levied.
It is now August and yet with several high profile breaches, including that of Barnet [...]]]></description>
			<content:encoded><![CDATA[<p>Google have become yet another organisation to escape the wrath of the Information Commissioner’s Office.</p>
<p>Since April this year the entire infosecurity industry in the UK and beyond has been waiting with baited breath for the dreaded £500,000 fine to be levied.</p>
<p>It is now August and yet with several high profile breaches, including that of <a title="ICO Barnet Council Statement" href="http://www.ico.gov.uk/upload/documents/pressreleases/2010/joint_council_undertakings_080710.pdf" target="_self">Barnet Council </a>and the <a title="ICO Kent Police statement" href="http://www.ico.gov.uk/upload/documents/pressreleases/2010/kent_police_enforcement_notice_press_release_180610.pdf" target="_blank">Kent Police</a>, made public, a financial penalty has yet to be issued by the ICO.</p>
<p>When Google revealed its Street View cars inadvertently collected data from unsecure Wi-Fi networks, the authorities in Germany, Australia and America were quick to take action.</p>
<p>And while it is not fair to lay all the blame at Google’s door – why were so many<a title="What's privacy got to do with it?" href="http://blog.diskshred.co.uk/2010/06/01/what%e2%80%99s-privacy-got-to-do-with-it/ " target="_blank"> Wi-Fi networks left unsecure</a>?? – we can’t ignore the fact that personally identifiable information was harvested by Street View without our knowledge.</p>
<p><a title="ICO Google Street View statement" href="http://www.ico.gov.uk/upload/documents/pressreleases/2010/ico_statement_google_wifi_data_290710.pdf" target="_blank">The ICO </a>visited Google HQ and examined a sample of the ‘payload’ only to find the information did not include “meaningful” details which could be linked to an individual.</p>
<p>They said in a <a title="ICO Google Street View statement" href="http://www.ico.gov.uk/upload/documents/pressreleases/2010/ico_statement_google_wifi_data_290710.pdf" target="_blank">statement</a>: “As we have only seen samples of the records collected in the UK we recognise that other data protection authorities conducting a detailed analysis of all the payload data collected in their jurisdictions may nevertheless find samples of information which can be linked to identifiable individuals.</p>
<p>“However, on the basis of the samples we saw we are satisfied so far that it is unlikely that Google will have captured significant amounts of personal data”.</p>
<p>So while Google gets sued in the US, Street View cars are back on the beat in the UK, albeit this time without the offending antennas.</p>
<p>At least we can watch horse boy in Aberdeen, shark attacks in Oxford and Paddington Bear strolling down Trafalgar Square, while we wait for the ICO to bear its teeth.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.diskshred.co.uk/2010/08/09/google-back-on-the-streets/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>How much does data loss cost you?  Try £600k</title>
		<link>http://blog.diskshred.co.uk/2010/07/26/how-much-does-data-loss-cost-you-try-600k/?utm_source=rss&amp;utm_medium=rss&amp;utm_campaign=how-much-does-data-loss-cost-you-try-600k</link>
		<comments>http://blog.diskshred.co.uk/2010/07/26/how-much-does-data-loss-cost-you-try-600k/#comments</comments>
		<pubDate>Mon, 26 Jul 2010 09:04:15 +0000</pubDate>
		<dc:creator>Keith Pryde</dc:creator>
				<category><![CDATA[Data Disposal]]></category>
		<category><![CDATA[Data Protection]]></category>
		<category><![CDATA[Privacy]]></category>

		<guid isPermaLink="false">http://blog.diskshred.co.uk/?p=141</guid>
		<description><![CDATA[Time and time again we read about data losses and breaches.  We read articles about hospitals losing private patient information or corporate giants misplacing unencrypted USB drives but aside from the “tut tut” head shake does the average Joe really worry about this?
Probably not.
Well what if I told you some of these data leaks cost [...]]]></description>
			<content:encoded><![CDATA[<p>Time and time again we read about data losses and breaches.  We read articles about hospitals losing private patient information or corporate giants misplacing unencrypted USB drives but aside from the “tut tut” head shake does the average Joe really worry about this?</p>
<p>Probably not.</p>
<p>Well what if I told you some of these data leaks cost you money.</p>
<p>Now I’ve got your attention.</p>
<p>It seems our very own Government is the biggest culprit of data storage equipment loss but it’s the average Joe tax payer that foots the bill.</p>
<p>According to <a title="Lewis PR Statistics" href="http://live.lewispr.com/LEWISPR/2010/07/22/lewis-pr-uncovers-huge-loss-of-laptops-by-mod-staff-00466" target="_blank">figures</a>, released by Lewis PR following a Freedom of Information request, between June 2008 and the end of May this year 340 laptops have been lost or stolen from Ministry of Defence staff, costing us a whopping £620,000.</p>
<p>A further 593 CDs, DVDs and floppy disks, 215 USB memory sticks, 96 hard-disk drives and 13 mobile phones also went missing.</p>
<p>And if that wasn’t bad enough, some of the stolen items weren’t encrypted so could be accessed by criminals.</p>
<p>Of 1,257 hi-tech items that disappeared from the MoD, a staggering 983 were not encrypted.</p>
<p>Yet only nine staff were disciplined over the losses.</p>
<p>The statistics also detailed a further 10 Governmental departments that incurred major data losses.  In fact more than 500 laptops were lost or stolen from 11 UK Whitehall departments during this period. </p>
<p>These combined losses cost the tax payer approximately £777,854.29 in the last two years.</p>
<p>Only 17 staff members were disciplined over these incidents.</p>
<p>These are worrying statistics indeed particularly as many of the lost items were Blackberries, USB sticks and mobile phones.</p>
<p>In these days of heightened global security how can this amount of data be unencrypted? </p>
<p>How can staff continue to be so lax with our private information?</p>
<p>If they’re that careless about their current equipment containing sensitive data, do they have a strictly audited security disposal policy for data destruction of these portable storage devices at their normal end-of-life?  Or do they just leave them lying around?</p>
<p>How long will the taxpayer be expected to pay for these mistakes?</p>
<p>I don’t know about the average Joe but I would rather have the money in my pocket&#8230;wouldn’t you?</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.diskshred.co.uk/2010/07/26/how-much-does-data-loss-cost-you-try-600k/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Smartphones…not so smart now</title>
		<link>http://blog.diskshred.co.uk/2010/06/28/smartphones%e2%80%a6not-so-smart-now/?utm_source=rss&amp;utm_medium=rss&amp;utm_campaign=smartphones%25e2%2580%25a6not-so-smart-now</link>
		<comments>http://blog.diskshred.co.uk/2010/06/28/smartphones%e2%80%a6not-so-smart-now/#comments</comments>
		<pubDate>Mon, 28 Jun 2010 09:40:10 +0000</pubDate>
		<dc:creator>Keith Pryde</dc:creator>
				<category><![CDATA[Data Disposal]]></category>
		<category><![CDATA[Data Protection]]></category>
		<category><![CDATA[Data Retention]]></category>
		<category><![CDATA[Privacy]]></category>

		<guid isPermaLink="false">http://blog.diskshred.co.uk/?p=137</guid>
		<description><![CDATA[It’s the age of the Smartphone.  The market is saturated with them whether it’s the iPhone, Blackberry, Palm Pre, Samsung…the list goes on.  And if you don’t have one you’re probably planning on getting one.
The beauty of these models is you can do everything on the go – check emails, send texts, make calls, surf [...]]]></description>
			<content:encoded><![CDATA[<p>It’s the age of the Smartphone.  The market is saturated with them whether it’s the iPhone, Blackberry, Palm Pre, Samsung…the list goes on.  And if you don’t have one you’re probably planning on getting one.</p>
<p>The beauty of these models is you can do everything on the go – check emails, send texts, make calls, surf the net and even arrange your schedule.  It’s like carrying a mini laptop in your pocket.</p>
<p>But the problem with having so much information stored on your phone is that you have so much information stored on your phone.</p>
<p>Take a minute and think about how much personally identifiable information is on your phone.  Portable devices carry personal data relating to recent calls made, photos, emails, route from home to work, stored texts which are all potentially comprising data.</p>
<p>Now imagine your phone is lost or stolen.</p>
<p>Scary thought isn’t it.  Especially if you use the phone for business.</p>
<p>But it’s not just theft and loss that are dangerous.  Even the simply upgrading your phone can be hazardous.  Has your phone been completely wiped of all data?  That’s the risk you take when you hand in your old phone over for a shiny new replacement.</p>
<p>It is important, especially for those who store both personal and work related information on their smartphones, to ensure the data is secure.  It’s not enough to shred the storage devices from servers, laptops and PC’s, these handheld devices also need to be physically destroyed if they are no longer used.</p>
<p>It is vital that all categories of personally identifiable information are securely disposed of.</p>
<p><a title="Pwc Report" href="http://www.pwc.co.uk/pdf/protecting_your_business_security_awareness.pdf " target="_blank">A new report from consultancy PwC </a>this week found that a company&#8217;s employees are its best defence against security threats, and should be empowered and educated about technology risk including mobile phones.</p>
<p>So let’s all start by taking much more ‘personal accountability’ by looking after portable business data as carefully as you would your own personal filing cabinet.  You wouldn’t leave your last itemised phone bill, bank details, personal address book or photos lying around would you?</p>
<p>And beware of the honey trap.  Just ask <a title="Gordon Brown's aide's Blackberry stolen" href="http://www.theregister.co.uk/2010/06/15/gchq_iphone/ " target="_blank">Gordon Brown’s aide </a>about securing his BlackBerry.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.diskshred.co.uk/2010/06/28/smartphones%e2%80%a6not-so-smart-now/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>What’s privacy got to do with it?</title>
		<link>http://blog.diskshred.co.uk/2010/06/01/what%e2%80%99s-privacy-got-to-do-with-it/?utm_source=rss&amp;utm_medium=rss&amp;utm_campaign=what%25e2%2580%2599s-privacy-got-to-do-with-it</link>
		<comments>http://blog.diskshred.co.uk/2010/06/01/what%e2%80%99s-privacy-got-to-do-with-it/#comments</comments>
		<pubDate>Tue, 01 Jun 2010 08:04:53 +0000</pubDate>
		<dc:creator>Keith Pryde</dc:creator>
				<category><![CDATA[Data Protection]]></category>
		<category><![CDATA[Privacy]]></category>

		<guid isPermaLink="false">http://blog.diskshred.co.uk/?p=128</guid>
		<description><![CDATA[The news has been rife over the last few weeks with stories of privacy breaches by names we trust and use on daily basis.
First it was Google.  The corporation with the most popular search engine in the world came under heavy fire after it was revealed its Street View cars inadvertently collected data from unsecured [...]]]></description>
			<content:encoded><![CDATA[<p>The news has been rife over the last few weeks with stories of privacy breaches by names we trust and use on daily basis.</p>
<p>First it was Google.  The corporation with the most popular search engine in the world came under heavy fire after it was revealed its Street View cars inadvertently collected data from unsecured Wi-Fi networks.  Now Google is being sued across the globe and <a title="Stephen Conroy news article" href="http://www.theaustralian.com.au/business/media/conroy-accuses-google-of-biggest-privacy-breach-in-western-world/story-e6frg996-1225871306422" target="_blank">Australian Communications Minister Stephen Conroy </a>has dubbed the incident possibly “the largest privacy breach in the history across western democracies&#8221;.</p>
<p>Then came Facebook.  The social networking site has been repeatedly criticised for its privacy controls and last week <a title="Facebook CEO" href="http://www.washingtonpost.com/wp-dyn/content/article/2010/05/23/AR2010052303828.html" target="_blank">CEO Mark Zuckerberg </a>finally acknowledged that they had “missed the mark” with their privacy settings.  They have now released new “simplified” privacy settings to fix the problem.</p>
<p>But is it fair to lay all the blame at the doors of Google and Facebook?</p>
<p>In the Google case there is a lesson to be learned here.  Why are so many of us not securing our home and business Wi-Fi networks? </p>
<p>Anyone can sit outside your house or business and use your internet service to download your private information including bank account details, passwords, date of birth&#8230;the list goes on.</p>
<p>Securing your Wi-Fi network is vital whether it is at home or at work.  If you are a business owner ensure your employees are aware of your data security protocols and the dangers of unsecured wireless networks.  Nobody wants a staff member sharing private corporate information while using free Wi-Fi at the corner Starbucks.</p>
<p>With Facebook, the privacy settings were getting too complicated and steps needed to be taken to ensure users were fully aware of what information was private and what was not.</p>
<p>However how much information is too much to share on these sites? </p>
<p>Most people include their name, date of birth, place of residence, relationship status, children’s names while others share much more including phone numbers, email addresses and corporate information.</p>
<p>How many times has someone on your friends list lost their mobile phone and posted their new number or in fact asked you to post your number to reload onto the new phone.   They wouldn’t normally contemplate leaving their address book lying around, so why publicise this type of personally identifiable information?</p>
<p>A seasoned fraudster could potentially use this information to bypass security questions about you&#8230;think about it how many of us use our date of birth or child’s name as a password?  Not to mention the number of Facebook ‘Friends’ who we have never met or even know.</p>
<p>While I agree Facebook needed to review the privacy controls, we need to review how much information we reveal online.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.diskshred.co.uk/2010/06/01/what%e2%80%99s-privacy-got-to-do-with-it/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

