https://www.meetup.com/net2van/events/242476477 Privacy is all around us. In a hyper connected world where data insight gives organizations a competitive edge, the risks of managing and safeguarding that data - specifically personal data - have increased exponentially. How then, not-for-profit organizations, can influence the importance of privacy and security management while at the same time continue forging relationships with the communities they serve? Join us for this event where we will explore the opportunities that lie ahead in terms of increasing trust, reputation and brand exposure through the management of Private information. Ale Brown, Certified Information Privacy Technologist (CIPT) Ale started her career as an IT professional working for large corporations such as Procter & Gamble and Johnson & Johnson. She also ventured into the entrepreneurial world working for boutique consulting firms when she moved to Vancouver. Her specialties at the time were the implementation and management of Customer Relationship Management (CRM) strategies. During her last corporate job with J&J, she partnered with various commercial groups in the organization, providing IT solutions in the area of Sales Force Effectiveness and Digital Marketing. This is when she was thoroughly exposed to the world of Privacy management. She founded Kirke Management Consulting in 2014, with the goal to help organizations excel in their business objectives by finding opportunities for growth, while at the same time managing risks that could prevent their success. About Kirke Management Consulting – www.kirke-consulting.com (http://www.kirke-consulting.com/) Strategy. Transformation. Results. We are a strategy consulting firm that enables business growth and minimizes corporate risk. We believe that safeguarding personal information has become paramount in a rapidly expanding digital world, therefore we help organizations gain relevant data insights to build tighter relationships with their customers, all within a strong privacy management framework. This results in increased brand recognition, improved reputation in the industry and trust within their customer-base. Kirke (pronounced "Kur-keeh"), the Greek goddess of transformation, used her powers and knowledge to transform anything that posed a threat into something harmless. At Kirke Management Consulting we strive to empower our customers to make that transformation happen and revolutionize their businesses.

1. Privacy for NFP
Alejandra Brown, CIPT
Kirke Management Consulting
2017-11-07© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential

2. What we will cover
Privacy key concepts and world privacy regulations1
Canadian privacy guiding principles2
Privacy vs. security3
Examples of privacy breaches in the NFP world4
Importance of privacy in NFP and advantages of proactive management5
Common areas of vulnerability and incident causes6
Impacts of a breach7
Effective privacy management program8
What is coming9
Where do we go from here?10
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential

3. Privacy – Key Concepts
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential
• Generally considered to be any information about an identifiable individual
• Information privacy is the right to have some control over how your personal information is
collected and used
Canadian Privacy – Data Protection Law and Policy for the Practitioner. Kris Klein, CIPP/C. Second edition. IAPP

4. World Privacy Regulations
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential
Canada USA EU

5. Canadian Privacy Guiding Principles
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential

6. Privacy vs Security
• Privacy focuses on governance around
use, disclosure and retention of Personal
Information
• Security is concerned with measures to
restrict access and protect Personal
Information during collection, storage,
and transmission
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential

7. NFP Privacy Breaches
https://www.501c3lawblog.com/2017/08/09/data-breaches-nonprofits/ https://www.privacyrights.org/data-breaches?title=&org_type%5B%5D=263 https://www.oipc.ab.ca/decisions/breach-notification-
decisions.aspx
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential
King Edward Child Care Society Edmonton AB - Sep 2017
Little Red Door – Jan-Mar 2017
YMCA San Diego – July 2017
Legal Aid Society of Orange County – Jan 2017

8. Importance of Privacy for NFP
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential

9. Advantages of Managing Privacy
How can transparent privacy management help NFPs grow in terms of funding, increased client satisfaction,
volunteering, and talent acquisition?
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential

10. © 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential
Common Areas of Vulnerability

11. Privacy Incident Causes
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential
Technology Human Error
•
•
•
•

12. Impacts of a Breach
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential

13. Effective Privacy Program











© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential

14. Key IT Security Measures
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential
IT
Security

15. What Is Changing
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential

16. Where Do We Go From Here?
➢Determine what is your level of Privacy maturity
➢Assess your risk and current gaps
➢Adopt “quick-wins”
➢Appoint a CPO
➢Create or review privacy policy
➢Train employees, volunteers on privacy practices and their obligations
➢Identify IT security areas of risk
➢Include appropriate disclaimers in your e-Newsletter sign up form
➢Establish an incident response procedure
➢Bring in experts when required
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential

17. Resources
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential
Privacy assessment questionnaire
Privacy policy checklist for NFP
Privacy and data concerns for NFP
Minimizing the risk of a data breach: A guide for NFP organizations

18. About Kirke
Strategy.
Transformation.
Results.
We are a strategy consulting firm that enables business growth and minimizes corporate risk. We believe that
safeguarding personal information has become paramount in a rapidly expanding digital world, therefore we
help organizations gain relevant data insights to build tighter relationships with their customers, all within a
strong privacy management framework. This results in increased brand recognition, improved reputation in the
industry and trust within their customer-base.
http://www.kirke-consulting.com/

19. Contact Us
www.kirke-consulting.com
Ale Brown – Founder & Principal Consultant
abrown@kirke-consulting.com 604.787.3230
Sonny Samra – Managing Director
ssamra@kirke-consulting.com 604.782.9114
© 2017 Kirke Management Consulting. All Rights Reserved - Private and Confidential