Addressing Privacy Issues During Disaster Recovery

Abstract

Businesses possess a staggering amount of private and personally identifiable information (which I will collectively reference for the rest of this article as “PII”), not only about their customers, but also about their employees. Under which circumstances and representations was the information collected? How is that information being used? To whom is that information being transmitted? How is that information being stored? Who has access, authorized or not, to that information? Unfortunately, many, if not most, businesses do not know the answers to these questions even under normal business circumstances.