Cisco GC Shares Privacy Compliance Policies
Private consumer data can be a minefield, especially when you consider the complexity of data management systems and rapidly changing technology. Which is why Van Dang, Cisco's deputy general counsel, has decided to take a collaborative approach.
Dang recently created a cloud-based privacy compliance portal on the company's website. On it, she shares Cisco's privacy policy and compliance mechanisms, as well as a library of reference materials.
She even invites outside law firms and fellow general counsel to chime in.
One of the more interesting areas of the portal describes Cisco's "cloud journey." It includes information on cloud security risks, as well as ways to manage and mitigate the risks associated with the cloud.
The "General Counsel Corner" also includes cloud compliance checklists, a primer on legal issues and data security concerns, and links to auditing solutions. There are also a variety of other checklists, sample agreements and reporting guidelines.
Cisco's privacy policy also includes some unique compliance programs. To help maintain consumer privacy, the company vets outside service vendors through what it calls the Supplier Qualification and Enrollment Program. Cisco also places NDAs and agreements in a central database to simplify management and tracking.
The company has also created a Personal Data Registry, which allows individual employees to register databases. This allows Cisco to manage and track databases that may contain personal data.
Cisco's privacy policy compliance program seems to take advantage of the technology that many companies fear. So even if you can't take advantage of all solutions, you should consider taking a look. You may learn something new.
Related Resources:
- Open Secret: Cisco Site Shares Privacy Approach (ABA Journal)
- Safety In the Cloud (FindLaw's Technologist)
- Accept Credit Cards? What Attorneys Need to Know About PCI Compliance (FindLaw's Technologist)