{"id":4754,"date":"2020-01-28T16:51:02","date_gmt":"2020-01-28T20:51:02","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4754"},"modified":"2020-01-28T16:51:02","modified_gmt":"2020-01-28T20:51:02","slug":"data-privacy-day-part-ii-passwords-and-the-ccpa","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/data-privacy-day-part-ii-passwords-and-the-ccpa\/","title":{"rendered":"Data Privacy Day Part II: Passwords and the CCPA"},"content":{"rendered":"

\"Data<\/p>\n

Just moments ago, we shared expert commentary from <\/span>identity and access management<\/span><\/a> experts for Data Privacy Day. We shared their insights into consumer privacy and enterprise identity management efforts to protect it. In fact, we shared quite a few interesting quotes and best practices for identity management.\u00a0<\/span><\/p>\n

However, this event\u2014an international celebration of security awareness on privacy\u2014generated a lot of commentaries. As we sorted through the insights, we found two common themes: passwords and the California Consumer Privacy Act (CCPA).\u00a0<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Therefore, we decided to share those expert commentaries as well. Here they are!\u00a0<\/span><\/p>\n

Data Privacy Day Part II: Passwords and the CCPA\u00a0\u00a0<\/b><\/h2>\n

Laurence Pitt\u00a0<\/b><\/h3>\n

Laurence Pitt is Global Security Strategy Director at<\/span><\/i> Juniper Networks<\/span><\/i><\/a><\/p>\n

\u201cData protection affects all of us and this will not change. We share more online than ever before. What this means is that while the burden of responsibility for protecting online data resides with the vendor, we (as consumers and users) also need to step up and ensure that our online activities are well-protected. Many breaches still occur where the basics, such as weak or reused passwords, are a root issue.\u201d<\/span><\/p>\n

\u201cIf I were to give a single piece of advice to help people be better protected, it would be to make sure to use the best password you can. Believe it or not, \u2018password\u2019 and \u2018123456\u2019 are still the most commonly used passwords in 2019.\u201d\u00a0<\/span><\/p>\n

\u201cThere are many ways to create strong passwords manually. My personal recommendation is to use a password vault…Not only will these store passwords and automatically share them across devices, but they are also able to create new and strong passwords automatically. This means every site you access can easily have a strong and different password and you only need to remember the single strong password created to access the tool.\u201d<\/span><\/p>\n

Ido Safruti<\/b><\/h3>\n

Ido Safruti is the co-founder and CTO of<\/span><\/i> PerimeterX<\/span><\/i><\/a><\/p>\n

\u201cA less-known but critically important piece of the CCPA is that liability for breaches extends to third-party services that web application publishers and operators use. This includes information security companies, payment processors, chatbot operators, and any other provider of third-party services. Your organization may be responsible not only for security problems and breaches affecting your own code but also for code that is not even operating on your site. <\/span><\/p>\n

“This is true as long as that third-party code is included in your user experience or exposed to your users in the web application. Nearly all web applications (including web, mobile web, and hybrid mobile applications) use third-party JavaScript libraries and services to add functionality and improve performance.\u201d<\/span><\/p>\n

\u201cNow is a good time to protect yourself from liability, to ask all third-party service providers for detailed answers to the following questions.<\/span><\/p>\n