Data Collection

It is important to appoint data owners in the collection phase and assign classification levels to the data so that appropriate security controls may be implemented as early as possible in the asset life cycle. After collecting the data and classifying it, it is important to make sure controls are in place to maintain the security level required to protect the data throughout its cycle.

Data collection is the gathering and collecting of information, and organizations collect information for research, development marketing, and various purposes.

Data collection has been happening for many years. The way in which it happens, and the increased level of collection has increased as technology develops - advertisers tracking customers on the internet, geo-location on phones, stores tracking via loyalty cards, smart TVs and devices listening for voice commands, etc.

The vast amount of data collection must be viewed from the perspective of the benefit to both parties (the organization collecting the data and the data subject). The individual should be informed that the data is being collected.