Did you realize that when you use an Intemet app, the app could also have access to your data? Other risks, discussed in our next chapter, also expose data, such as the actions of a dishonest employee. Here, we look at some examples of private or confidential data recently exposed.

Desjardins Group

In lume $2019$ Desiarcins Group disclosed that one of its employees had taken unauthorized copies of data from close to $3$ million of its consumer and busines customers and shared those data with others. The Group sells personal and business insurance, and is a financial co$-$operative, providing savings phlans, lbans, registered retirement savings plans, and other financial services and instruments. Desjardins was proactive about the leak, calling in the laval, Gueber police force to investigate the extent of the data exposure and to help determine how it had happened. Once the cause of the breach had been located and stopped, the financial organization informed the public, providing a one$-$year credit monitoring plan to all affected.

Desjardin s proactive actions are in contrast to some other organizations that are repeatedly being questioned about their privacy practices. Think about how organizations with good privacy policies and practices could prevent the actions of unethical employees.