Understanding Data Privacy Week: A North Carolina Perspective
A Timely Reminder
Data Privacy Week, culminating this coming Friday, is an annual opportunity for individuals and organizations to reflect on the importance of protecting personal information. This year, North Carolina brings added weight to the occasion through a proclamation from Gov. Josh Stein, declaring Thursday as Data Privacy Day. In his announcement, he emphasized that “personal information is valuable, and there are bad actors who work to profit from it at your expense.” This highlights not just the gravity of data privacy, but also acts as a catalyst for ongoing conversations about it beyond the week itself.
Beyond the Headline
While these formal acknowledgments help raise awareness, the real work of protecting data privacy continues throughout the year. Chief Information Officer Teena Piccione remarked that the notion of privacy should not remain an abstract concept, but rather one that North Carolinians can engage with actively in their daily lives. This tangible engagement is essential for creating a culture of privacy.
Behind-the-Scenes Efforts
In North Carolina, privacy initiatives are led by Chief Privacy Officer Martha Wewer, who has been at the helm of the Office of Privacy and Data Protection since May 2025. According to Wewer, privacy in state governance is far from theoretical; it is intricately connected to the systems that residents depend on daily. State employees manage vast amounts of sensitive data about constituents and the operations of the state itself.
Identifying Privacy Gaps
Upon her appointment, Wewer prioritized uncovering potential privacy gaps within state agencies. As technology evolves, understanding the data already at hand becomes crucial before further advancements, especially in artificial intelligence (AI). She emphasized that “data classification became our priority pretty quickly,” pointing out that it involves knowing the nature of the data, its sensitivity, and its location.
Integrating Privacy and AI
North Carolina is taking strides to develop governance structures that link privacy and AI policy. Recently, the state hired its first AI governance and policy executive, I-Sah Hsieh. Wewer collaborates closely with Hsieh to ensure that AI policies align seamlessly with good data privacy practices. “We work really, really closely to align the AI policies with good data privacy practices,” Wewer noted, emphasizing that the frameworks already in place for overseeing government data can serve as a guide for approaching AI.
The Interconnectedness of Privacy and Cybersecurity
The partnership between privacy, cybersecurity, and AI oversight shows how these elements are interconnected. Wewer humorously likens this collaboration to “three legs of a stool,” indicating that AI must work in concert with cybersecurity and privacy to protect data effectively.
Building Privacy into Systems
One crucial concept Wewer advocates is “privacy by design,” which emphasizes the importance of incorporating privacy considerations into systems from the outset rather than as an afterthought. To facilitate this, North Carolina has established processes that bring privacy questions to the forefront early in the implementation of new tools.
Simplifying Data Collection
Wewer often emphasizes the rule of simplicity: collect and work with only the data that is absolutely necessary. This principle of minimalism extends beyond government operations and informs broader discussions around responsible data use, particularly in light of recent legislative efforts such as the proposed North Carolina Consumer Privacy Act. This proposed legislation aims to provide residents with greater control over their personal information held by businesses.
Encouraging Informed Choices
Wewer believes that legislation fostering choice and transparency is merely one piece of the puzzle; the public’s understanding of their data rights and the practices of companies is just as vital. Conversations sparked during Data Privacy Week are important, but she hopes residents think critically about the data they share every day. “It’s easy for people to get into the habit of thinking that I have to provide my information in order to get this service,” Wewer explained, urging individuals to assess whether the information requested is truly necessary.
A Call for Responsibility
Ultimately, Wewer articulates two fundamental ideas that should guide both the public sector and private entities: choice and transparency. It’s imperative for individuals to not only demand these principles but also to actively engage in the ongoing narrative around data privacy, ensuring they are informed and empowered when interacting with various systems that collect their personal information.