60% of employers are keeping records of employees diagnosed with COVID-19. CISOs need to know the risks associated with these datasets and help decide what data to collect and how. Forrester Senior Analyst Enza Iannopollo recommends that businesses think carefully about how they leverage COVID related data collection efforts. HR leads many COVID tracking efforts, and HR is leading many tracking efforts. CISO should work closely with the organizations Data Protection Officer (DPO) to help quantify the risk appetite around the data.”]