Creating a Culture of Privacy Michael Kaiser Executive Director National Cyber Security

Board Companies

Core Initiatives

Is it IoT? Or the Interne t of Me?

Privacy: By the Dictionary The state of being apart from other people or concealed from their view; solitude. The state of being free from unwanted or undue intrusion or disturbance in one's private life or affairs; freedom to be let alone. Freedom from damaging publicity, public scrutiny, secret surveillance, or unauthorized disclosure of one’s personal data or information, as by a government, corporation or individual. The state of being concealed; secrecy.

What is the difference between privacy and security? Traditionally, security and privacy have been seen as two different arenas: Security has referred to the ways we protect ourselves and our property. It is defense against unwanted intruders and measures to remain safe. Privacy is the freedom to lead our lives without others knowing what we do or think unless we agree to share it.

Security: We often know when something is lost or breached

Privacy: Can be subjective

What is the difference between privacy and security in the digital age? In the Internet age, privacy and security are very much linked. For example, we may agree that a device or service can collect things about our likes and behaviors with the understanding that doing so makes that service or device work better. We may also understand that the company providing that service has no intention of sharing it with others. However, if that company entrusted with our personal information loses our information we have suffered both a security risk since that information may be used to commit cybercrimes against us and and a privacy violation since information we thought would not be public becomes public.

Division on whether online privacy and online security are viewed as the same or different Pg. 22 Same 48% Tech late adopters: 60% Black: 59% Hispanic: 59% Spend 1-5 hours online per week: 59% Different 52% College grads: 58% Tech early adopters: 57% Spend hours online per week: 56% BASE: ALL QUALIFIED RESPONDENTS Q815. Thinking about both online privacy and online security, do you think those two things are: Do you think online privacy and online security are…?

Loss of personal or financial information and information shared without consent are top concerns Pg. 23 BASE: ALL QUALIFIED RESPONDENTS Q400. How concerned are you that the following might happen to you or those you care about? 89% 87% 78% 76% 75% 74% 71% 66% 60% 59% 54% Top 2 Box

Who has access to my information How my information is used What personal information is collected about me What current measures are in place to protect my data What options I have to delete or correct my personal information What controls are in place for me to limit how the company shares my information How and/or can I access the personal information collected about me What information does the company have about me, whether collected from me, third parties, or created by the company itself Where is my personal information is stored Does the company share my personal information to any other companies Notification about how the company shares my information with other companies Why my personal information is shared with other companies Under what circumstances will my information be shared with the government What information is optional vs. required What information is collected to track my history of usage of websites or apps What information is collected about me for a product or service to function correctly How to contact the company or app provider if I have concerns or questions What assumptions are made about me The amount of time a company or app provider keeps my personal information Who has access to info, how info is used, and what info is collected are most important to Americans to know Pg. 24 BASE: SPLIT SAMPLE (n=500) Q650a. Thinking about some of the things you might want to know about your personal information, please select which top 3 things from the list below are MOST important for you to know. Most Important to Know Note: Top items for Americans to know are consistent across age groups.

How do we create a culture of privacy?

Transparency

Who is it shared with and where and how Securely is it stored?

Educate users about what controls they do have and how to use them

We have to message in ways that make sense Own your online presence. Personal information is like money. Value it. Protect it. Privacy is good for business.

Raise our children in the digital age Share with care. Know what’s being collected and why and how it will be used. Post only about others as you have them post about you. Be aware of what’s being shared.

Resources @STOPTHNKCONNECT Facebook.com/staysafeonline