Data Privacy Day; Comment from Symantec

Hi there,

Today is the second annual international Data Privacy Day which aims to make computer users aware of how they can keep data private.

According to Symantec, last year over 35 million personal records were lost in the UK, which equates to more than half the population. This month more breaches have already been unearthed so it’s clear more needs to be done to protect online data.

“While it’s great that data losses are being highlighted by this day, it’s vital companies ensure data privacy is at the forefront of their minds every single day,” said Guy Bunker, chief scientist at Symantec.

Research by Symantec last year investigated attitudes of business and consumers on online risks, and the amount of data held about consumers. The report found that:

• Nearly 4 out of 5 people believe their personal information is not secure in the hands of companies that hold it
• An even higher number, 89 per cent of the respondents, believe that reckless or repeated data breaches should be criminal matter and punishable by imprisonment, with four out of five people saying it should be a ‘one strike and you’re out rule when it comes to data loss

“The US takes data breaches very seriously and its legislation enforces punishment on any company that puts customer data at risk. In the UK we have no such laws. If the problem is not taken seriously, data loss incidents do not only create a huge financial burden, but can also cost the company’s reputation,” said Bunker.

There are measures that can be taken to reduce the risks of data loss and avoid the financial and reputation costs to the business. Symantec’s advice includes:

1. Ensure your employees are aware of, and educated in, data loss avoidance processes and procedures.
2. Lock down computers, mobile devices and removable media using software and/or physical means; e.g. use a secure password, automatically lock screens when computers are left alone; encrypt the data, use a Kensington Lock.
3. Implement network access control or network segmentation to ensure that teams and individuals only have access to relevant systems and information.
4. Monitor data within the IT environment to prevent potential leaks or warn the user of sensitive or confidential information.
5. Centralise backup at the network level to eliminate the need for local devices.

If you would like more information or want to speak to Symantec please us on Symantec@bitepr.com or on 0208 834 3504.


Kind regards,

Holly