Information Governance and Privacy and Security Functions*

Privacy and security go hand in hand. Privacy programs are often required to manage the national and international requirements to protect consumer information. The Generally Accepted Privacy Principles can be used to guide privacy programs. In 1980, the Organisation for Economic Co-operation and Development (OECD) published guidelines on the protection of privacy and personal data and were updated in 2013. In 2009, the Madrid Resolution brought 50 countries together to provide further guidance on information privacy. Privacy came of age in 2018, when the European Union's General Data Protection Regulation went into effect. Privacy programs are often required to manage the national and international requirements to protect consumer information. The protection of personally identifiable information is a core focus of information governance efforts. Various privacy laws have been enacted in an effort to protect privacy. Information rights management embeds protection into the data (using encryption technology), allowing files to protect themselves.