Should the privacy profession adopt a code of ethics?

And excellent article by Angelique Carson published in the IAPP's The Privacy Advisor on Feb 28, 2017.

I really want to highlight a few points - in red and in bold:

“What started to grow was the notion of a privacy officer or privacy manager as someone who could run a program that could pull together the technical and the legal piece, and I think everyone in the profession at the time thought that was a really good thing,” Kosa said. “But as the discipline grew, as the domain evolved, a lot more people got interested in it, but a lot of those people got interested not for the same reasons the people who grew the field were interested in it.”

In other words, it turned into a compliance-based exercise.

That shift didn’t sit well with her. What irked her was her sense that the field was losing its strong base of privacy advocates, replaced by professionals who were saying to companies, “I can knock out a privacy impact assessment for you for $50,000, no problem.”

Personally I think she probably got a good deal for $50k ...

 

Let me say this again: PRIVACY IS A COMPLIANCE ACTIVITY

I also particularly like the  learnings she's brought from medicine to the area...specifically she's promoting a the basis of the approach to safety-critical systems .... now, I wonder who promoted that idea before....?