𝐀𝐠𝐧è𝐬 𝐏𝐞𝐠𝐮𝐫𝐫𝐢, 
Global Performance System & Corporate Learning Director, SITEL Group

𝐉𝐨𝐧𝐚𝐭𝐡𝐚𝐧 𝐁𝐚𝐧𝐦𝐚𝐧,
Program Manager, Corporate Learning & Development, SITEL Group

𝐑𝐞𝐢𝐝 𝐇𝐨𝐮𝐬𝐞𝐫,
Privacy Officer, SITEL Group

𝐒𝐞𝐧𝐬𝐢𝐭𝐢𝐯𝐞 𝐏𝐞𝐫𝐬𝐨𝐧𝐚𝐥 𝐈𝐧𝐟𝐨𝐫𝐦𝐚𝐭𝐢𝐨𝐧 (SPI) is a special category of personal information that is treated differently under some privacy laws.

After the L&L, Elias is in the cafeteria and can’t help overhear his coworkers talking about a customer who wants some personal information mailed to them.

This piques Elias’ curiosity about how private information is shared, so he stops by the compliance office to learn more. There, he sits with Jorge and discusses how Personal Information and Sensitive Personal Information transfers occur.

All data transfers within Sitel must first and foremost comply with our Security and Privacy policies. Transfers may require an inter-company agreement between Sitel subsidiaries in order to facilitate the movement of personal information and sensitive personal information from country to country.

When moving Personal Information/Sensitive Personal Information, you must use an approved and authorized Sitel systems and the data must be encrypted when transmitted between sites (Sitel or third party).

Moving Personal Information/Sensitive Personal Information can be done via the internet through a secure Virtual Private Network (VPN) for classified data.

Sitel internal email can be used to transfer Personal Information/Sensitive Personal Information ONLY when the data is encrypted. Alternate ways to share data internally include secure SharePoint sites, secure VPN, and SFTP sites.

Violations of these type are taken seriously because of the implications associated with being careless. Therefore, it’s important you familiarize yourself with Sitel’s Privacy Policy and rules associated with your workplace.

It is clear Beatriz didn’t mean any harm by leaving her computer unlocked, however, she’s now in her manager’s office getting an earful about the implications of violating data privacy laws and regulations.

Implications of violating data privacy laws and regulations

1 Imprisonment
2 Personal liability
3 Failure to meet client contract requirements
4 Class action law suits
5 Regulatory fines