Larry Ponemon Quotations

Privacy is not just a compliance issue for the legal department. It should be a priority for everyone. You have to translate privacy into a customer issue because this is really becoming the holy grail of doing business for everyone in an on-line world.

Microsoft's P3P is not the full-blown P3P, ... Most of us thought that P3P would die. The fact that it is here and it is baked into the IE 6 browser -- I think that Microsoft should be applauded for being bold.

Even if it's just 1 or 2 percent churn, it could be devastating to a company,

If you start at zero, 50 percent is only 50 cents,

If a company has a breach and it wants to mitigate the potential costs and loss of customer trust they should start considering it as an important communication opportunity to prove to the customer that it cares about them,

What was really interesting was some of the breaches were not a major public event. It's getting to be such a boring story. Really small breaches, ones that are less than 20,000 names, are not getting into the press at all.

We know a lot of organizations have posted privacy policies that they don't live by, ... We have to make it costly not to walk the walk. If you don't have an enforcement arm, you won't change bad players.

The fact that the White House site used Web bugs that do not capture personally identifiable information is irrelevant. The key issue is government officials were caught completely off-guard when reporters learned that Internet tracking technologies were planted on the White House's site.

AOL's efforts in raising awareness and understanding about good privacy and data protection on the Internet is paying off in terms of positive consumer perception. This is an especially significant accomplishment given the rash of privacy issues such as phishing and spam that impact the ISP industry.

There is a value proposition to protecting information and doing it right.