Identity Theft, Identification, and GDPR E011

Подробнее о видео

Identity Theft, Identification, and the GDPR - E011 2024 03 13
Identification and authentication are different. Biometrics are a strong assertion =of a person's identity, but not a way to verify that identity. It is too easy to copy a biometric piece of evidence - fingerprints and voices can be copied, a 4K video camera can grab an image of an iris precise enough to pass a scan. Consider biometrics useful as assertions of identity but not proof of it.
In one of my presentations while at Gartner, I asked the audience: “How many of you have ever had something stolen?” Many hands went up. Then, “How did you realize it was stolen?” I asked. The answers given were generally the same: "I looked for it, but I couldn't find it." Data theft and especially identity theft are very different. The problem is not that the data you have is lost. It fell into the hands of people who shouldn't have it.
In 1903, novelist Edith Wharton was the victim of identity theft. A woman claiming to be Edith Wharton was raising money to give lectures on Edith Wharton's novels. The publisher asked Ms. Wharton to submit a photograph to be printed in her books to deter this impersonator.
This identification mechanism worked, and identity thefts stopped.
The European Union GDPR (General Data Protection Requirement) regulates that companies appropriately store personally identifiable information. GDPR regulates the following rules for all citizens of the European Union countries, as explained in its article titled "The Concept of Privacy" in the Harvard Law Review newspaper, whose roots date back to 1890;
1) The individual knows what information is collected about him/her,
2) The individual knows how this information is used and
3) The individual has the right to privacy (in other words, they can “opt out”).
If the firm accidentally discloses personally identifiable information, it must understand what happened, ensure it stops, notify those affected, and notify the National Data Protection Authority. The company has 72 hours to make this notification from the moment the violation is detected.
For the full article:
With the tags Security , Briefly About the World of Security , identity theft , Identity Theft and GDPR , Data Theft