A new privacy tool developed by the Canadian Institute of Chartered Accountants will provide valuable assistance to businesses in complying with privacy laws, says Ontario Information and Privacy Commissioner Ann Cavoukian.
“For months, businesses have been asking me what tools are available to them to assess whether their privacy practices are effective and legally compliant,” said Cavoukian. “So, when the CICA approached me about its new program to provide independent reviews and attestations on an organization’s privacy practices, I was delighted to help CICA get it up and running.”
The privacy tool, called the CICA Privacy Framework, is a joint product of the CICA and its American counterpart, the American Institute of Certified Public Accountants. The framework can be used by organizations to guide and assist them in implementing privacy programs with assistance from CAs. The framework incorporates concepts from significant domestic and international privacy laws, including Canada’s Personal Information Protection and Electronic Documents Act. For each of the 10 privacy components, there are objective and measurable criteria for evaluating an organization’s privacy policies, procedures and controls.
“It is critical that companies effectively manage privacy issues in a manner that serves their customers, suppliers and shareholders,” adds Cavoukian. “The program is the first of its kind and our review found that it addresses many of the needs business has raised with me.”
The CICA framework can be used in conducting independent reviews of an organization’s privacy practices and provide an attestation level report of compliance, for those that pass. This attestation report, (similar to a financial audit) will independently assure all stakeholders that the organization’s privacy practices appropriately address legislative requirements.
The CICA Privacy Framework is available for for sale online at www.knotia.ca/store/privacysolutions
Ontario Privacy Commissioner pleased with CICA privacy tool
Will help businesses comply with privacy laws says Cavoukian
- By: IE Staff
- March 3, 2004 March 3, 2004
- 13:20