In The Privacy Dividend, a report published on 4 March 2010, it said public and private sector organisations can use business cases to justify spending on privacy protection.
It says the benefits of protecting privacy derive from four areas in which information has value. Firstly, protecting personal information as an asset can help to make an organisation's operations efficient, agile and attractive to the public. Secondly, respecting people's privacy helps to win their trust, and can enhance an organisation's reputation.
Thirdly, protecting information from other parties can save people from the harm associated with privacy violations. Finally, winning people's trust will support working with other organisations.
"Enhanced public trust in one central government department could encourage citizen engagement with all departments," the report says.
It recommends that any business case should include an executive summary, the background and reasons for the case, a list of objectives and options, an assessment of benefits and costs, the identification of critical success factors and an investment appraisal. These should be followed by implementation, operation and business engagement.
The report also advocates the use of calculation sheets to assess the value of personal information and put figures to the business case.
Information commissioner Christopher Graham said: "No organisation can neglect to protect people's privacy. Not only is it the law, but there is also a hard headed business imperative. This report provides organisations with the tools to produce a financial business case for data protection ensuring privacy protection is hardwired into organisational culture and governance."
Staff
You have characters left
Please read our community standards.
Closing this window without pressing "Post your comment" will result in your words being lost.
Are you sure?
Thank you for your comment. This has been submitted for moderation.
Your comment has been successfully posted.
Sorry, something has gone wrong and this action cannot be completed. Please try again later.