Unsanctioned Intrusion
The topic of a citizens' right to privacy or expectation of privacy has been debated and tested since the drafting of the US Constitution. The common and broad understanding of the term defines it as "freedom from observation". The information security professional is concerned with a narrower area of the law that can be defined as "freedom from unsanctioned intrusion". Specific areas of interest to the information security professional involve access to personal information, online privacy, and the right of publicity.
Laws covering access to personal information include The Privacy Act of 1974, the Financial Monetization Act of 1999 and the Fair Credit Reporting Act and are examples of the application of "freedom from unsanctioned intrusion".
These laws define the right of individuals to review their personal information held by institutions, review that information, and allow for the correction of that information.
Online privacy involves the collection and use of personal information from a internet users online activity by the use of tracking cookies. The majority of tracking cookies is used for marketing purposes and to a body of internet users, this is an invasion of their privacy rights. Users can inhibit cookies and protect their identity by the use of applications such as "Do Not Track Me" and social media users can chose their level of comfort by selecting different privacy settings. The Children's Online Privacy Act established a parents right to control information that may be collected on their pre-teen child. The user can control what information is collected about them.
A person has the right to control the use or misuse of their identity for unauthorized promotional purposes which is known as the right of publicity. The unauthorized use of a persons' likeness is recognized as an invasion of privacy and includes intrusion, appropriation of name or likeness, unreasonable publicly and false light. An example of the misuse of the right of publicity could be the use of a bands name, image, and song in a political campaign without the bands knowledge or consent.
Laws covering access to personal information include The Privacy Act of 1974, the Financial Monetization Act of 1999 and the Fair Credit Reporting Act and are examples of the application of "freedom from unsanctioned intrusion".
These laws define the right of individuals to review their personal information held by institutions, review that information, and allow for the correction of that information.
Online privacy involves the collection and use of personal information from a internet users online activity by the use of tracking cookies. The majority of tracking cookies is used for marketing purposes and to a body of internet users, this is an invasion of their privacy rights. Users can inhibit cookies and protect their identity by the use of applications such as "Do Not Track Me" and social media users can chose their level of comfort by selecting different privacy settings. The Children's Online Privacy Act established a parents right to control information that may be collected on their pre-teen child. The user can control what information is collected about them.
A person has the right to control the use or misuse of their identity for unauthorized promotional purposes which is known as the right of publicity. The unauthorized use of a persons' likeness is recognized as an invasion of privacy and includes intrusion, appropriation of name or likeness, unreasonable publicly and false light. An example of the misuse of the right of publicity could be the use of a bands name, image, and song in a political campaign without the bands knowledge or consent.