Eric Lawton

Background

About Eric Lawton

Eric is recognized as a credible and trustworthy privacy expert and Privacy Impact Assessment specialist with 20 years of privacy experience in the public sector. He was the City of Toronto's resident data protection expert for more than 14 years. He holds the Master Access and Privacy Professional (MAPP) designation from the Privacy and Access Council of Canada (PACC). He has a proven ability to provide privacy and security risk management advice to senior management and internal governance committees on large transformational customer-focused projects. Eric has directed teams of privacy and security professionals conducting PIAs, Threat Risk Assessments and Penetration Tests on a wide range of IT projects. Eric can help you build a business case for Managed Security Services Provider or a Cloud Access Security Broker and sell it to your Council or Board of Directors. Eric has successfully lead working groups, created privacy and security policies and standards, lead staff training, developed risk management strategies, analyzed privacy issues and project risks. His aim is to build trust with clients and stakeholders that personal information is being managed well. His approach has been based on "Privacy by Design" principles since 2001 and takes into account the Plurality of Privacy as a concept in the sense that Privacy is "not one thing, but a cluster of many distinct but related things." As a hiring manager, leader and innovator in establishing professional standards for the Access to information and Privacy Profession, Eric has deep knowledge about the qualifications for good outcomes in access and privacy processes- Eric is customer-focused. This is demonstrated in both his approach to relationships with clients and colleagues, but also his chosen profession- To him, Privacy means much more than just protecting a certain category of information. Privacy is about respecting the rights and concerns that individuals have about the collection, use and disclosure of their personal information- Eric tries to be a decent human to other humans and animals- Eric believes in being fair, honest and doing the right thing even when no one is watching. Specialties: Privacy Impact Assessments, privacy concepts, access to information, cyber security, information security, information technology, privacy architecture, project management, group facilitation, risk management, records and information management, Open Data, stakeholder relationships, non-profit organization governance, writing and communications.