CYB_260_Project_Two_Jenn_Arsenault.docx CYB-260 Project Two Legal and Ethical Recomme

CYB_260_Project_Two_Jenn_Arsenault.docx    CYB-260  Project Two  Legal and Ethical Recommendations Brief      The provisional approval of the partnership between Helios Health Insurance and Fit-vantage is a step in the right direction. In order to ensure that it can be formally approved, there are many safeguards that will need to be put in place, implemented and that these safeguards are in compliance at all times.  With regards to data privacy, there are a multitude of things that need to be considered.  Limiting the type and amount of information that is collected is a good place to start. There is very specific information that is collected when the user agrees to the terms and wears the fit-vantage gear. Being transparent in how that information is collected and used is top priority. Developing a security policy, having people consent to this information being collected, and outlining the steps that will be taken to ensure this information stays private. If there was to be a breach in any of these steps, then it will be a direct violation of HIPPA laws.  The guidelines that will be set forth will be given to each user, the user will then need to give consent for any of it to move forward.   Recommendations for addressing data security would initially start with doing a risk assessment.  Creating an outline to address each key element that could potentially be a risk. Making priority lists as well as plan for the protection of each. Setting up backups for the data is another procedure that I would recommend. T