Privacy Risk Management and Privacy Harms
Privacy risk management identifies and mitigates risks to information assets. Privacy risk is the likelihood individuals will experience problems from data processing plus the impact if they occur; privacy harms include loss of self-determination, discrimination, loss of trust, and economic loss.
How this supports CIPP/US study
Use this lesson to connect a privacy programme decision with the relevant regulator, duty or enforcement route. Continue with the CIPP/US study guide.
Per NIST, privacy risk management helps enterprises weigh the benefits of data processing against the risk and choose a risk response. ISACA frames it as building consumer trust by safeguarding personal data throughout the life cycle. A code of ethics can aid this weighing.
Privacy risk is the likelihood individuals will experience problems from processing plus the impact if they occur. Example risks: lack of safeguards, third-party access, lack of encryption, mobile malware, social media attacks, social engineering, and outdated security software.
Privacy harms are the core of risk calculation: loss of self-determination (autonomy, exclusion, loss of liberty, physical harm), discrimination, loss of trust, and economic loss.
Key terms - quick answers
What is “Privacy risk management”?
What is “Privacy risk”?
What is “Privacy harms”?
What is “NIST”?
Sources and study method
This independent lesson uses active recall, spaced retrieval and scenario practice. Read the full study method.