Privacy and Dataveillance,
and Organisational Strategy
Roger Clarke

Keynote Address for the
Conference of the I.S. Audit & Control Association
(EDPAC'96), Perth, 28 May 1996

© Xamax Consultancy Pty Ltd, 1996

Private use of this document is approved, including printing of a copy, provided that the authorship and source remain associated with the copy. Copying of the whole or a substantial part of this document requires the copyright owner's approval, whether for private or for commercial purposes.

This document is at http://www.anu.edu.au/people/Roger.Clarke/DV/EDPAC96.html

This Keynote Address was the first occasion on which my general paper on Privacy Strategy was presented. Because it's a living paper, modified on an ongoing basis, I recommend that you read the current version, rather than the original version I presented in Perth in May 1996.

The special segment on implications for delegates to the conference is reproduced below.

Implications for IS control and audit professionals:

This paper has not focussed specifically on the interests of members of the information systems audit profession. The following implications are, however, readily drawn:

• IS analysis and design methods, education and training need to reflect the new era of privacy-sensitivity;
• where internal auditors are involved in pre-implementation assessment of automated and manual procedures, they need to have a sufficient appreciation of the matter, and to factor privacy considerations into their reviews;
• managerial audits need to question whether dataveillance and privacy are being handled as a risk element of, or an opportunity for, the organisation; and
• periodic external audits need to assess compliance with the law, the exposure to contingent risks, and the extent to which the organisation's practices reflect its strategy, plans, policies and procedures.

Navigation

Go to Roger's Home Page.

Go to the contents-page for this segment.

Send an email to Roger

Original Version: 2 May 1996

Last Amended: 25 June 1996

These community service pages are a joint offering of the Australian National University (which provides the infrastructure), and Roger Clarke (who provides the content).