<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: usama]]></title>
    <link>http://securityratty.com/tag/usama</link>
    <description></description>
    <pubDate>Mon, 17 Dec 2007 07:12:06 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Segregation of data protection duties]]></title>
      <link>http://securityratty.com/article/75c4eb0e9f62557a4cba093084bb8c27</link>
      <guid>http://securityratty.com/article/75c4eb0e9f62557a4cba093084bb8c27</guid>
      <description><![CDATA[Business Week recently published a profile of Usama Fayyad , the chief data officer of Yahoo!. In this profile they highlight that his responsibilities are
make both sense and money from the vast...]]></description>
      <content:encoded><![CDATA[<p>Business Week recently published a <a href="http://www.businessweek.com/technology/content/dec2007/tc20071213_341756.htm">profile of Usama Fayyad</a>, the chief data officer of Yahoo!. In this profile they highlight that his responsibilities are: </p>

<ol><li>&quot;...make both sense and money from the vast amounts of information Yahoo collects on the doings of 500 million people who visit its site every month.&quot; </li>

<li>&quot;Fayyad... [is] engaged in a major battle over how freely that information can be used to tailor ads to individuals.&quot;</li></ol>

<p>These goals are almost diametrically opposed. I searched for a chief privacy officer for Yahoo! as well, but did not find any references to one. While I am sure that Mr. Fayyad very competent and wants to strike the right balance, Yahoo! has opened themselves up to additional business risks by placing the duty to protect information, and make money from it in the same person. Much like our legal system, data protection and data usage need two different people on opposing sides in order to effectively bring the issues to light and find the right balance. That is why these two duties should be separated, and why it is important to have a chief privacy officer. There are already many other people on the opposite side of the issue, like the heads of business or marketing officers. Even still, it may not be a fair competition, but at least someone will be standing up for the consumer trying prevent privacy violations. </p>]]></content:encoded>
      <pubDate>Mon, 17 Dec 2007 07:12:06 +0000</pubDate>
      <category domain="http://securityratty.com/tag/protect information">protect information</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/information yahoo collects">information yahoo collects</category>
      <category domain="http://securityratty.com/tag/additional business risks">additional business risks</category>
      <category domain="http://securityratty.com/tag/yahoo">yahoo</category>
      <category domain="http://securityratty.com/tag/chief privacy officer">chief privacy officer</category>
      <category domain="http://securityratty.com/tag/business week recently">business week recently</category>
      <category domain="http://securityratty.com/tag/usama fayyad">usama fayyad</category>
      <source url="http://blogs.forrester.com/srm/2007/12/segregation-of.html">Segregation of data protection duties</source>
    </item>
  </channel>
</rss>
