--- title: Protecting Private Data Best Practices description: Protecting data from both external and internal threats is a huge concern for most organizations. These are some best practices to help keep you secure. image: https://blog.techboston.com/hubfs/protecting%20private%20data-1.png --- ### Search engine Use this form to find things you need on this site Search × [![We're better together.](https://blog.techboston.com/hubfs/Tech_Networks_of_Boston_June2018/Images/Logo_without_motto-copy-web.png)](https://techboston.com) - [About TNB](https://techboston.com/about-tnb/) - [Overview](https://techboston.com/about-tnb/) - [Annual Report](https://techboston.com/wp-content/uploads/2023/03/2022-Benefit-Report.pdf) - [Mission](https://techboston.com/about-tnb/mission/) - [Partnerships and Affiliations](https://techboston.com/about-tnb/partnerships/) - [Certifications & Awards](https://techboston.com/about-tnb/certifications-awards/) - [Blog](https://techboston.com/about-tnb/blog/) - [Free Resources](https://techboston.com/about-tnb/resources/) - [Job Opportunities](https://techboston.com/about-tnb/careers/) - [Services](https://techboston.com/our-services/services-overview/) - [Overview](https://techboston.com/our-services/services-overview/) - [Integrated Services](https://techboston.com/our-services/integrated/) - [Managed Services](https://techboston.com/our-services/managed-services-2/) - [Project Services](https://techboston.com/our-services/project-services/) - [Case Studies](https://techboston.com/case-studies/) - [Using IT to Increase Productivity and Reduce Costs](https://techboston.com/case-studies/increase-productivity/) - [Updating Technology for Growing Needs](https://techboston.com/case-studies/updating-technology/) - [Shifting to Remote Work in the Midst of a Crisis](https://techboston.com/case-studies/remote-work/) - [Protecting Your Organization in the Wake of Cybercrime](https://techboston.com/case-studies/cybercrime/) - [Integrating Technology for Mission Driven Success](https://techboston.com/case-studies/integrated-technology-success/) - [Events](https://techboston.com/events/) - [Upcoming Events](https://techboston.com/events/) - [Past Roundtable Events](https://techboston.com/past-roundtable-events/) - [TNB’s Dialogue Series on Nonprofit Data and Evaluation](https://techboston.com/about-tnb/blog/best-practices-data-evaluation/) - [Contact Us](https://techboston.com/about-tnb/contact-us/) - [Home](https://techboston.com/) - [About Us](https://techboston.com/about-tnb/) - [2022 Annual Report](https://techboston.com/wp-content/uploads/2023/03/2022-Benefit-Report.pdf) - [Blog](https://techboston.com/about-tnb/blog/) - [Certifications & Awards](https://techboston.com/about-tnb/certifications-awards/) - [Case Studies](https://techboston.com/about-tnb/case-studies/) - [Job Opportunities](https://techboston.com/about-tnb/careers/) - [Mission](https://techboston.com/about-tnb/mission/) - [Partnerships and Affiliations](https://techboston.com/about-tnb/partnerships/) - [Events](https://techboston.com/events/) - [Services](https://techboston.com/our-services/) - [Contact Us](https://techboston.com/about-tnb/contact-us/) # Protecting Private Data Best Practices [Home](https://techboston.com) / Protecting Private Data Best Practices Return to Previous Page [![image-1](https://blog.techboston.com/hubfs/protecting%20private%20data-1.png)](https://blog.techboston.com/hubfs/protecting%20private%20data-1.png) [View large](https://blog.techboston.com/hubfs/protecting%20private%20data-1.png) ### Protecting Private Data Best Practices Cybersecurity is an essential part of every day life. From personal accounts to work data, every person needs to understand the basic ways they can protect themselves from malicious attacks. We wanted to outline some tips for protecting your employees, your organization, and the people you serve from potential security threats.  **Use a secure connection or VPN ** Private networks, like the ones in your office or most people's homes are typically more protected than public wi-fi. When your staff works remotely, they should use your VPN (virtual private network) to access any company data. This reduces the risk of security breaches and can be a critical point of defense for your organization. Make sure your employees know how to connect to the VPN, and why it matters, before they can work remotely. **MFA/2FA ** Multi-Factor Authentication (MFA) and 2-Factor Authentication (2FA) are methods of ensuring cyberattackers are unable to access your information. MFA uses additional security measures, outside of a password, to ensure the person accessing a given account is the account owner. This can be a text code, phone call, or push notification from a mobile device. While it is still important to use strong passwords, your organization should also implement multi-factor authentication for additional security. **Train your team ** Security starts with people. Train your staff to follow basic security best practices like closing and locking devices when not in use, not clicking on malicious links or emails, and using strong passwords to prevent security breaches. Training should be a part of your onboarding process for new employees and a continuous practice for your entire organization. You can consider using [specific training tools and platforms](https://techboston.com/our-services/phishing-testing/) to ensure your organization is following best practices and actively following standards. **Manage permission settings ** Not everyone in your organization needs access to every file. Determine which roles and teams need access to various documents, including financial information, HR documents, or client or patient data, and lock down access so that only relevant team members can view or edit these files. This will limit the possibility of accidental deletion, edits, or the sharing of sensitive information. **Stay up to date with compliance practices ** Your organization may be subject to laws and regulations like HIPAA, GDPR, or CCPA. Ensuring that your systems are operating under these regulations (when applicable) is key to protecting your customers, patients, and staff. By failing to meet these standards, you subject yourself to fines, operations issues, and a loss of trust between the people you serve and your organization.   **Have a plan in place for a breach ** There is always a risk that the data you store could be subject to a breach. Under some regulations you are required to report data incidents to affected parties, but it is always best practice to document incidents and responses even if the threshold for reporting has not been met. Before an incident occurs, it is important to determine what you consider a breach, create a team to handle your response, and outline your response plan. You should always analyze how the breach occurred and what security measure failed, try to limit any further data loss, and determine how you can prevent similar incidents in the future.    While this list doesn’t encompass everything your organization should do to stay secure, it is a good starting point. We recommend you start with [assessing your current security infrastructure](https://techboston.com/our-services/security-assessment-2/) so you can find gaps and create a plan to fix them.   *This post was originally published in April 2020 and updated in September 2022.* Share Post - - - - - [mailto:?body=https://blog.techboston.com/protecting-private-data-best-practices](mailto:?body=https://blog.techboston.com/protecting-private-data-best-practices) [Previous](https://blog.techboston.com/protecting-your-remote-team-from-cyber-threats) [![](https://blog.techboston.com/hubfs/Protecting%20Remote%20Team-1.png) Protecting Your Remote Team From Cyber Threats](https://blog.techboston.com/protecting-your-remote-team-from-cyber-threats) [Next](https://blog.techboston.com/6-hipaa-compliant-tools-for-your-organization) [![](https://blog.techboston.com/hubfs/compliant%20tools-1.png) 6 HIPAA Compliant Tools for Your Organization](https://blog.techboston.com/6-hipaa-compliant-tools-for-your-organization) ### Leave a Reply [![updatedblogad](https://blog.techboston.com/hs-fs/hubfs/updatedblogad.png?width=312&name=updatedblogad.png)](https://techboston.com/about-tnb/contact-us/)                    ### Contact Us 1 Wadleigh Place South Boston, MA 02127 Phone: 617.269.0299 Fax: 888.527.9333 ### GET UPDATES ### Resources [Server Failure and Recovery](https://techboston.com/resources/server-failure/) [Plan a Successful Email Migration to the Cloud](https://techboston.com/resources/email-migration/) [How to Align Your Staff on Technology Use and Policies](https://techboston.com/resources/technology-policies/) [Data Loss and Recovery: A Guide](https://techboston.com/resources/data-loss-recovery/) [Assess Your IT Needs: Is an MSP Right For You?](https://techboston.com/resources/assess-it/) [IT Audits and Assessments: What Are They Good For?](https://techboston.com/resources/it-audits-assessments/) [The Right Time to Change Your MSP](https://techboston.com/resources/change-msp/) [Privacy Policy](https://techboston.com/privacy-policy/) © 2021 Tech Networks of Boston