Privacy Impact Assessment (PIA)
docx
keyboard_arrow_up
School
Swedish Institute of Technology, Wah Cantt Campus *
*We aren’t endorsed by this school
Course
250
Subject
Information Systems
Date
Nov 24, 2024
Type
docx
Pages
2
Uploaded by RASPOD
Introduction:
This Privacy Impact Assessment (PIA) has been prepared for Private Possums, a Queensland-based technology firm that is developing improvements to their unmanned aerial vehicle (UAV) with facial recognition software (codename: Fruit Fly) to sell in Australia and Europe. The company has raised confidential equity from an investor and has an aggregated turnover exceeding AUD$3,000,000. The purpose of this PIA is to evaluate the privacy risks associated with the company's plans to install cameras in all the offices to monitor staff, require staff to ‘sign on’ to the worksite with fingerprint (biometric) scanning, track all staff internet usage and email correspondence, and occasionally intercept and record telephone calls conducted during office hours. The PIA will also provide recommendations for mitigating any identified privacy risks.
Background:
Private Possums is concerned that the details of Fruit Fly will be leaked before they are ready to release the updated model. To address this concern, the company intends to implement a number of
measures to monitor staff and protect the confidentiality of their work. These measures include installing cameras in all the offices, requiring staff to ‘sign on’ to the worksite with fingerprint (biometric) scanning, tracking all staff internet usage and email correspondence, and occasionally intercepting and recording telephone calls conducted during office hours. The company intends to record and retain information they collect through their surveillance on a Google Drive that is shared with the management staff with a common password.
Privacy Risks:
1.
Monitoring of Staff: The installation of cameras in all the offices, along with the requirement for staff to ‘sign on’ to the worksite with fingerprint (biometric) scanning, tracking of all staff internet usage and email correspondence, and occasional interception and recording of telephone calls conducted during office hours, raises privacy risks for staff. These measures may be perceived as intrusive and may lead to staff feeling uncomfortable or demotivated. It may also lead to a decrease in the trust that staff have in the company.
2.
Collection and retention of personal information: The collection and retention of personal information, such as biometric data, internet usage and email correspondence, and telephone calls, raises privacy risks. The company will be responsible for ensuring that this information is handled in accordance with relevant privacy laws and regulations.
3.
Data security: The company will be responsible for ensuring that the data they collect and retain is stored securely. The use of a shared Google Drive with a common password raises concerns about data security and the potential for unauthorized access to the information.
Recommendations:
1.
Monitoring of Staff: To mitigate privacy risks associated with the monitoring of staff, Private Possums should consider implementing the following measures:
•
Clearly communicating the reasons for the monitoring to staff and ensuring that they understand why it is necessary.
•
Providing staff with the option to opt-out of certain aspects of the monitoring, such as the use of cameras or fingerprint scanning.
•
Ensuring that staff are made aware of their rights and how to make a complaint if they feel that their privacy has been compromised.
2.
Collection and retention of personal information: To mitigate privacy risks associated with the collection and retention of personal information, Private Possums should consider implementing the following measures:
•
Conducting a privacy impact assessment (PIA) to evaluate the risks associated with the collection and retention of personal information, and to identify any necessary mitigation measures.
•
Developing and implementing a privacy policy that sets out the company's commitments to protecting personal information and outlines the rights of staff and other individuals.
•
Providing staff with the option to opt-out of certain aspects of the monitoring, such as the use of cameras or fingerprint scanning.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help