#dataprivacyandsecurity

During our recent class session, our professor revisited previous topics and offered insights from a recent accreditation video webinar. He particularly highlighted a Google Form used by the National Service Training Program (NSTP) that incorporated a data privacy consent section, which was commendable. However, as we examined the form more closely, it became evident that there were instances where personal information was being overly disclosed.

The NSTP enrollment form initially requested the student's name and USEP ID, followed by a demand for a Certificate of Registration (COR). Our professor rightly pointed out that since the COR already contains the student's name and USEP ID, there was redundancy in asking for this information separately. This redundancy raised concerns about unnecessary data collection and potential misuse of personal data.

To underscore the significance of data privacy and security, our professor shared a personal anecdote. During the freshmen convocation, his photograph underwent editing and alterations, resulting in an inaccurate representation. Though he felt disrespected by this incident, he chose not to pursue legal action but rather to use it as an opportunity to educate others about responsible personal information handling.

Our professor also posed a stimulating question: "How do businesses profit from significant discounts, such as 50% off during Christmas sales or Cebu Pacific's famous piso fare?" His answer delved into the concept of markup pricing, explaining how businesses set prices at a 125% markup over costs, ensuring profitability even with substantial discounts.

This discussion evolved into a more profound question: "What holds greater value, data or money?" Our professor emphasized the immense value of data, as opposed to money, because while theft of money results in loss, theft of personal data grants access to potentially much more, including financial assets.

Reflecting on these insights, we are reminded of the imperative for responsible data handling and the necessity for individuals and institutions to prioritize data privacy and security. Through robust consent practices, minimizing unnecessary data collection, and educating stakeholders on data's value, we can foster a safer and more trustworthy environment.

In a recent exploration of data privacy and security within USEP's enrollment process, our class unearthed several critical issues demanding immediate attention. As we delved into the subject, I found myself contemplating the profound importance of shielding sensitive data and the potentially dire consequences of any lapses in data protection.

One particularly concerning matter we uncovered relates to the College of Education's practice of housing student records in a shared Google Drive. While the intention may have been to streamline access and collaboration, this method poses significant privacy risks. Should the link to this drive fall into the wrong hands, it could precipitate a catastrophic data breach, exposing the personal information of countless students.

Equally alarming was the College of Information and Computing's habit of publicly posting room assignments. This inadvertent disclosure not only unveils students' schedules and attendance patterns but also leaves them vulnerable to exploitation by nefarious individuals.

Moreover, our discussions unveiled instances of data inaccuracy within the enrollment system. A classmate narrowly escaped being labeled as an irregular student due to a system glitch, underscoring the necessity for enhanced data integrity and quality control measures to safeguard students' academic records.

The reliance on student IDs without additional verification within the enrollment system also raises red flags regarding identity theft. Unauthorized access to a student's ID could potentially enable an imposter to manipulate their data, wreaking havoc on their academic journey.

Furthermore, the practice of sharing student records via a shared Google Drive exponentially heightens the risk of a data breach, potentially compromising the privacy of numerous students and inflicting irreparable harm.

A poignant example was our professor's action of capturing our images during the activity without prior consent. His observation regarding the potential violation of data privacy laws and erosion of institutional trust struck a chord, emphasizing the importance of securing individuals' consent before utilizing their personal information.

Drawing from our professor's wealth of experience as a former Data Privacy Officer and Systems and Data Management Division (SDMD) Director, we gleaned valuable insights into crafting effective security protocols. His collaboration with Sir Bong in developing a security manual presents a tangible resource for addressing these concerns and establishing robust data handling and storage practices.

Reflecting on our professor's time and motion study during his tenure as SDMD Director, which revealed an average enrollment time of 3.4 hours during face-to-face interactions, prompts considerations for enhancing efficiency in the current online system. Addressing data privacy and security concerns in tandem with process optimization could yield significant improvements in enrollment procedures.

During a recent activity focused on data privacy and security in USEP's enrollment process, our class identified several concerning issues that require attention. As we delved into the topic, I couldn't help but reflect on the significance of safeguarding sensitive information and the potential consequences of lapses in data protection.

One issue that stood out was the College of Education's practice of storing student records in a shared Google Drive. While the intention may have been to facilitate access and collaboration, this approach raises significant privacy concerns. If the link to this drive were to fall into the wrong hands, it could lead to a catastrophic data breach, exposing the personal information of countless students.

Another practice that caught my attention was the public posting of room assignments by the College of Information and Computing. By displaying this information openly, the college inadvertently revealed the schedules and attendance patterns of its students. Such exposure could potentially make them vulnerable to harm or exploitation by malicious individuals.

During our discussions, we also learned about instances of data inaccuracy within the enrollment system. One of my classmates narrowly avoided being marked as an irregular student due to a system error. This experience highlighted the need for improved data integrity and quality control measures to ensure that such errors do not compromise a student's academic standing or progress.

The tracking feature within the enrollment system, which relies solely on student IDs without additional verification, also raised concerns about identity theft. If an unauthorized individual were to gain access to a student's ID, they could potentially impersonate that student and compromise their data, causing immense damage.

Furthermore, the practice of sharing student records through a shared Google Drive increases the risk of a data breach. If a malicious actor were to gain access to the drive, they could leak sensitive information about numerous students, violating their privacy and potentially causing harm.

Our professor's example of taking our picture during the activity without prior consent also struck a chord with me. As he rightly pointed out, capturing and using an individual's image without permission could violate data privacy laws and erode trust in the institution.

As we explored these issues, our professor shared insights from his experiences as a former Data Privacy Officer and Systems and Data Management Division (SDMD) Director. He and Sir Bong had created the security manual, which should serve as a valuable resource for addressing these concerns and establishing best practices for data handling and storage.

Our professor's time and motion study during his tenure as SDMD Director, when enrollment was conducted face-to-face, revealed an average enrollment time of 3.4 hours. This insight made me wonder about the potential for efficiency improvements in the current online system, particularly if data privacy and security concerns were adequately addressed.