Reply To: Teerawat_Tracking Pixel at NYP Hospital

[Panyada Cholsakhon]

Thanks for sharing K.Teerawat. It is very interesting story as it involve the third party service provider. It means the robust security system inside our own business is not enough, the third party itself need to have a strong protection system as well to prevent the incident. Your prevention strategies given are very clear, i would like to add a little bit, apart from the assessment, the contractual agreement between business and third party is might be another way in prevention, making an agreement and having the strong data security and privacy in the contracts with third-party vendors and indicate their responsibilities and liabilities regarding data protection, would be another way to help prevent data breaches as I think it might help the third party realize how crucial it is to keep the business’ s data safe.