Katahdin Bankshares : Trust Recognizes National Data Privacy Day

Contact:

Krista Putnam, VP Marketing

Katahdin Trust [e-mail]

FOR IMMEDIATE RELEASE

January 24, 2018

Katahdin Trust Recognizes National Data Privacy Day

Houlton, Maine - January 28th is National Data Privacy Day, and Katahdin Trust is leading the charge in an educational initiative focusing on raising awareness among businesses and individuals about the importance of protecting the privacy of personal information.

"Katahdin Trust is committed to protecting the sensitive information of our customers," said Jean Noyes, Vice President and Information Security Officer for Katahdin Trust. "We take every reasonable step possible to safeguard their personal and financial data and encourage our customers to partner with us in that effort."

To understand the importance of Data Privacy Day, it is vital to understand Personally Identifiable Information (PII) and exactly what privacy is. PII is any combination of data points that can lead to the identification of a specific individual (you). This can mean things such as your name or email address, but most times PII refers to "sensitive PII" such as Social Security, driver's license, state identification, or financial account numbers.

Sensitive PII can also exist if PII is combined with another piece of information about you such as a birthdate, medical information, or even passwords. The more pieces of data combined about an individual, the more valuable and sensitive the body of information becomes.

Privacy is often considered to be the concept of confidentiality, which is keeping information secret from those that should not see it. While that is an aspect of privacy, often called "need to know," privacy is much more.

Privacy is a larger concept centering on you as the individual to whom the information refers. It is about your rights to access, correct, and control the information that another entity has about you.

Privacy Rights

Organizations like Katahdin Trust, that honor your privacy will not only protect confidentiality, but should follow a set of principles related to how they manage your information, including:

•  Not collecting more information than they need to conduct their business with you;

•  Informing you of what they will do with the information that they collect and not doing more with it than they have promised;

•  Retaining the information for only as long as it is needed and then properly destroying the information;

•  Not sharing your information with others without your permission, except as required by law;

•  Allowing you to review and correct information if necessary.

To understand your privacy rights it is essential that you read the privacy policies of any organization to whom you provide information, especially PII. This includes websites, health care providers, insurance companies, and financial institutions, like Katahdin Trust. If you do not agree with how they intend to protect your privacy, consider not using their service.

Privacy is a Shared Responsibility

While organizations and websites have a responsibility to protect your privacy, which most will outline in their privacy policy, this is also your responsibility. Social media users are especially susceptible to privacy concerns. Individuals voluntarily place enormous amounts of information about themselves, their friends, and associates, on social media. It is critical that everyone is aware of the information they post on social media services, such as Facebook, LinkedIn, Snapchat, and Twitter. This awareness is not limited to what you post about yourself, but what you post about others as well!

Identity Theft Protection

Despite many organizations best efforts in handling and using your private information properly, the countless breaches of PII by cyber criminals in the past few years have resulted in the exposure of information about millions of people. One reaction to such breaches can be to provide credit monitoring for one year. This is a very short amount of time to have such a protection. Those that have stolen the information, or those to whom they have passed it on, may hold it for much longer than a year before using it to steal your identity, commit credit card fraud, or worse in your name. If you have been a victim of a breach, visithttp://www.consumer.ftc.gov and check out some of theFTC's resources on starting a credit freeze to protect yourself.

If you are considering Identity Theft protection services, research the firms that you are considering engaging and ensure you understand the services they will and will not provide. Also, read their privacy policies, because for them to deliver these services you must provide them with varying amounts of PII.

Protecting privacy is both your responsibility and that of those individuals and organizations that have information about you. Do everything in your power to be aware of how you personally can compromise your privacy and hold those organizations that you engage with accountable for their management, or mismanagement, of your personal information.

About Katahdin Trust

Katahdin Trust Company, celebrating 100 years of community banking since its founding in 1918, has nearly $800 million in assets and 180 employees. The Bank offers financial services to individuals and businesses from sixteen offices throughout Maine and a full range of online and mobile banking solutions. Katahdin Bankshares Corp., parent company of Katahdin Trust Company, stock is quoted on the OTC Markets quote board OTCQX under the symbol KTHN. Current stock information can be found at otcmarkets.com/stock/KTHN/quote. Learn more about Katahdin Trust on its website atwww.katahdintrust.comand get the latest news and information by following Katahdin Trust on Facebook, Twitter, LinkedIn, and Instagram.

# # #