Monitoring Employee Records and Communications Best Practices

by Benjamin Wright / February 22, 2023

 Should Companies Monitor Employee Records and Communications? When organizations supply their employees with personal electronic devices, such as laptops, cell phones, or tablets, they will often have a policy or contract that explains that the employer reserves the right to monitor employee records and communications while they’re using company-owned equipment. Although these devices are used for personal communication as well as work reasons, such policies exist to ensure that…

Who has the Legal Right to Employee Mobile Phones, Tablets, and Computers?

by Benjamin Wright / December 22, 2022

 What are the Challenges of a Bring-Your-Own-Device Policy? Given that personal electronics are so prevalent in today’s society, navigating how to implement and enforce policies in the workplace regarding the use of devices (such as cell phones, tablets, and computers) can be challenging. It is often questioned who has the control over the records that are created and stored on such devices – is it the employee or the…

What to Ask Your Vendors About GDPR Compliance

by Sarah Harvey / December 16, 2022

Are Your Vendors Data Processors? Vendor compliance management is a key starting point towards GDPR compliance. When your organization is deciding whether to use a vendor as part of your GDPR compliance efforts, you must follow GDPR vendor (processor) compliance management best practices. As a controller, you determine the purpose and means for processing personal data. You have authority and decision-making over personal data and take on the responsibilities of…

Understanding the Importance of Information Security and Personal Privacy for Your Employees

by Benjamin Wright / December 22, 2022

 Why Do You Need a Security Awareness Program? Continuous education is a key way that organizations can ensure that their employees stay up-to-date with current industry best practices, and teaching employees and contractors the importance of information security and personal privacy should be an integral part of it. For organizations who process personally identifiable information (PII) and protected health information (PHI), maintaining a security awareness program allows organizations to…

Been Breached? How to Report Consumer Risk with a Risk Assessment

by Benjamin Wright / April 12, 2023

 Using a Risk Assessment to Report Consumer Risk Because there are so many different laws that regulate how and when an organization must give notice if it has had a data security breach, understanding what the correct plan of action is for your organization or determining how to report consumer risk from breaches might be daunting. Nevertheless, the laws do have one major commonality: does the consumer suffer a…