|
|
News and Events:
ITPMG Announces New Data Privacy Compliance Consulting Service Offering
Bethel, CT, July 14, 2009… ITPMG (www.itpmg.com), a leading edge on-demand consulting services company that specializes in personalized service that improves company performance announced today a new service offering designed to help companies craft a program that can be judged compliant using common practices based on the industry and organization size.
Many states have recently passed legislation designed to prevent exploitation of an individual's private data. Following the path forged by the Health Information Portability and Availability Act ("HIPAA"), private data has expanded from Personally Identifiable Information containing health and medical information to information that points to any specific financial or demographic data that is not explicitly publicized by the individual.
As a result of these state laws and regulations, organizations are now charged with implementing procedures and deploying resources that providing for protecting what has been termed private data at rest, in transit and during use. In some instances, these restrictions apply to both physical (paper) data and electronic data elements.
In many cases, these state laws are punitive in that they define and assess fines, penalties and possibly criminal charges that may be attributed to any failure to protect data privacy of individuals or organizations. The recent filings have also been prescriptive in that they define what should be done to help protect this data privacy. These newer regulations can also specify fines, penalties and possible criminal charges that can apply for organizations that do not comply even if no privacy breach occurs. This latter point is important because it is not predicated on an event, but rather can be applied be virtue of an audit or review by the state or an independent authority. In some cases, that may mean an individual (either placid or disgruntled) can bring about an investigation of an organization that they believe may not comply. In short, you are being charged with "doing the right thing" regarding data privacy.
These prescriptive regulations often define very specifically what you must do. Recently passed laws expect organizations that have a business presence in their states, or have customers, employees, contractors, or business partners who reside in their respective states adhere to these regulations. That means that you don't need to have presence in the state to be subject to its laws.
Obviously, each state law is applied differently, and as one would expect, each state has been cognizant of an organization's size and financial position in applying the regulation. That doesn't excuse any organization from complying with the law, but it does imply the company be at least as diligent as "common practices" would dictate.
Today, ITPMG is pleased to announce its new Data Privacy Compliance offering that will give our clients a proven approach in developing and executing strategies for effective, sustainable data compliance risk reduction.
The ITPMG Data Privacy Compliance offering provides a "Play Book" process that leverages its three phases to help clients develop and execute data privacy compliance strategies and plans. The "Play Book" process phases are outlined below:
· Compliance Assessment
· Technology Plan and Test Exercise
· Incident Management Planning
This new service offering is an extension of ITPMG's current innovative client solutions in the area of Security and Regulatory Compliance Strategy and Planning. It is our intent to continue to grow our business and increase our on-demand personalized client support solutions such as this new service offering. This is just the newest example of our commitment to helping our clients transform themselves into a high performance business.
About ITPMG
ITPMG is an industry leader in providing personalized on-demand targeted, actionable consulting services. This global firm, with headquarters in Bethel, Connecticut, focuses on improving company performance and increasing shareholder wealth and value through its services, tools, experts and processes.
For more information about ITPMG and its services contact ITPMG via e-mail at information@itpmg.com.
Bethel, CT, July 14, 2009… ITPMG (www.itpmg.com), a leading edge on-demand consulting services company that specializes in personalized service that improves company performance announced today a new service offering designed to help companies craft a program that can be judged compliant using common practices based on the industry and organization size.
Many states have recently passed legislation designed to prevent exploitation of an individual's private data. Following the path forged by the Health Information Portability and Availability Act ("HIPAA"), private data has expanded from Personally Identifiable Information containing health and medical information to information that points to any specific financial or demographic data that is not explicitly publicized by the individual.
As a result of these state laws and regulations, organizations are now charged with implementing procedures and deploying resources that providing for protecting what has been termed private data at rest, in transit and during use. In some instances, these restrictions apply to both physical (paper) data and electronic data elements.
In many cases, these state laws are punitive in that they define and assess fines, penalties and possibly criminal charges that may be attributed to any failure to protect data privacy of individuals or organizations. The recent filings have also been prescriptive in that they define what should be done to help protect this data privacy. These newer regulations can also specify fines, penalties and possible criminal charges that can apply for organizations that do not comply even if no privacy breach occurs. This latter point is important because it is not predicated on an event, but rather can be applied be virtue of an audit or review by the state or an independent authority. In some cases, that may mean an individual (either placid or disgruntled) can bring about an investigation of an organization that they believe may not comply. In short, you are being charged with "doing the right thing" regarding data privacy.
These prescriptive regulations often define very specifically what you must do. Recently passed laws expect organizations that have a business presence in their states, or have customers, employees, contractors, or business partners who reside in their respective states adhere to these regulations. That means that you don't need to have presence in the state to be subject to its laws.
Obviously, each state law is applied differently, and as one would expect, each state has been cognizant of an organization's size and financial position in applying the regulation. That doesn't excuse any organization from complying with the law, but it does imply the company be at least as diligent as "common practices" would dictate.
Today, ITPMG is pleased to announce its new Data Privacy Compliance offering that will give our clients a proven approach in developing and executing strategies for effective, sustainable data compliance risk reduction.
The ITPMG Data Privacy Compliance offering provides a "Play Book" process that leverages its three phases to help clients develop and execute data privacy compliance strategies and plans. The "Play Book" process phases are outlined below:
· Compliance Assessment
· Technology Plan and Test Exercise
· Incident Management Planning
This new service offering is an extension of ITPMG's current innovative client solutions in the area of Security and Regulatory Compliance Strategy and Planning. It is our intent to continue to grow our business and increase our on-demand personalized client support solutions such as this new service offering. This is just the newest example of our commitment to helping our clients transform themselves into a high performance business.
About ITPMG
ITPMG is an industry leader in providing personalized on-demand targeted, actionable consulting services. This global firm, with headquarters in Bethel, Connecticut, focuses on improving company performance and increasing shareholder wealth and value through its services, tools, experts and processes.
For more information about ITPMG and its services contact ITPMG via e-mail at information@itpmg.com.
© 2011 ITPMG, LLC. All rights reserved.