Summary

You’ve now covered the threat types described on the cards from the Privacy suit in the Elevation of Privilege with Privacy card deck. These threats deal with the fundamental rights and liberties of individuals. Protecting the privacy and personal information of individuals is something we should feel ethically bound to perform and is something that, in many cases, we are legally bound to perform. However, many organizations neglect this, either because they are unaware or, in some cases, deliberately looking to gain something, as the rewards outweigh the penalties. I implore you to act responsibly and ethically in this regard.

You should now understand the privacy principles defined by the OECD and the GDPR. You should know how to apply them, what rights you have as an individual, and, therefore, what rights your customers also have. You should also know what the customer needs to be informed of when collecting data and what you can do with it.

In the next chapter...