Privacy Harm and Non-Compliance from a Legal Perspective

In today's data-sharing paradigm, personal data has become a valuable resource that intensifies the risk of unauthorized access and data breach. Increased data mining techniques used to analyze big data have posed significant risks to data security and privacy. Consequently, data breaches are a...

Full description

Saved in:
Bibliographic Details
Main Authors: Suvineetha Herath, Haywood Gelman, Lisa McKee
Format: Article
Language:English
Published: Kennesaw State University 2023-10-01
Series:Journal of Cybersecurity Education, Research & Practice
Online Access:https://digitalcommons.kennesaw.edu/jcerp/vol2023/iss2/3/
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1850095262134960128
author Suvineetha Herath
Haywood Gelman
Lisa McKee
author_facet Suvineetha Herath
Haywood Gelman
Lisa McKee
author_sort Suvineetha Herath
collection DOAJ
description In today's data-sharing paradigm, personal data has become a valuable resource that intensifies the risk of unauthorized access and data breach. Increased data mining techniques used to analyze big data have posed significant risks to data security and privacy. Consequently, data breaches are a significant threat to individual privacy. Privacy is a multifaceted concept covering many areas, including the right to access, erasure, and rectify personal data. This paper explores the legal aspects of privacy harm and how they transform into legal action. Privacy harm is the negative impact to an individual as a result of the unauthorized release, gathering, distillation, or expropriation of personal information. Privacy Enhancing Technologies (PETs) emerged as a solution to address data privacy issues and minimize the risk of privacy harm. It is essential to implement privacy enhancement mechanisms to protect Personally Identifiable Information (PII) from unlawful use or access. FIPPs (Fair Information Practice Principles), based on the 1973 Code of Fair Information Practice (CFIP), and the Organization for Economic Cooperation and Development (OECD), are a collection of widely accepted, influential US codes that agencies use when evaluating information systems, processes, programs, and activities affecting individual privacy. Regulatory compliance places a responsibility on organizations to follow best practices to ensure the protection of individual data privacy rights. This paper will focus on FIPPs, relevance to US state privacy laws, their influence on OECD, and reference to the EU General Data Processing Regulation. (GDPR).
format Article
id doaj-art-2bdcfdf2a53145f5bcbd9928501109e6
institution DOAJ
issn 2472-2707
language English
publishDate 2023-10-01
publisher Kennesaw State University
record_format Article
series Journal of Cybersecurity Education, Research & Practice
spelling doaj-art-2bdcfdf2a53145f5bcbd9928501109e62025-08-20T02:41:30ZengKennesaw State UniversityJournal of Cybersecurity Education, Research & Practice2472-27072023-10-0120232Privacy Harm and Non-Compliance from a Legal PerspectiveSuvineetha Herath0Haywood Gelman1Lisa McKee2Dakota State UniversityDakota State UniversityDakota State UniversityIn today's data-sharing paradigm, personal data has become a valuable resource that intensifies the risk of unauthorized access and data breach. Increased data mining techniques used to analyze big data have posed significant risks to data security and privacy. Consequently, data breaches are a significant threat to individual privacy. Privacy is a multifaceted concept covering many areas, including the right to access, erasure, and rectify personal data. This paper explores the legal aspects of privacy harm and how they transform into legal action. Privacy harm is the negative impact to an individual as a result of the unauthorized release, gathering, distillation, or expropriation of personal information. Privacy Enhancing Technologies (PETs) emerged as a solution to address data privacy issues and minimize the risk of privacy harm. It is essential to implement privacy enhancement mechanisms to protect Personally Identifiable Information (PII) from unlawful use or access. FIPPs (Fair Information Practice Principles), based on the 1973 Code of Fair Information Practice (CFIP), and the Organization for Economic Cooperation and Development (OECD), are a collection of widely accepted, influential US codes that agencies use when evaluating information systems, processes, programs, and activities affecting individual privacy. Regulatory compliance places a responsibility on organizations to follow best practices to ensure the protection of individual data privacy rights. This paper will focus on FIPPs, relevance to US state privacy laws, their influence on OECD, and reference to the EU General Data Processing Regulation. (GDPR).https://digitalcommons.kennesaw.edu/jcerp/vol2023/iss2/3/
spellingShingle Suvineetha Herath
Haywood Gelman
Lisa McKee
Privacy Harm and Non-Compliance from a Legal Perspective
Journal of Cybersecurity Education, Research & Practice
title Privacy Harm and Non-Compliance from a Legal Perspective
title_full Privacy Harm and Non-Compliance from a Legal Perspective
title_fullStr Privacy Harm and Non-Compliance from a Legal Perspective
title_full_unstemmed Privacy Harm and Non-Compliance from a Legal Perspective
title_short Privacy Harm and Non-Compliance from a Legal Perspective
title_sort privacy harm and non compliance from a legal perspective
url https://digitalcommons.kennesaw.edu/jcerp/vol2023/iss2/3/
work_keys_str_mv AT suvineethaherath privacyharmandnoncompliancefromalegalperspective
AT haywoodgelman privacyharmandnoncompliancefromalegalperspective
AT lisamckee privacyharmandnoncompliancefromalegalperspective