Most organisations are hungry for the insights and business value to be gleaned from their customer data but wary of falling foul of GDPR. It’s a privacy minefield that many businesses will have to navigate in 2019 and beyond.
Data Privacy
Technological development has always outpaced privacy concerns, but never more so than in the past decade. Collection and centralization of personally identifiable information (PII), tracking of movements and digital surveillance are all at unprecedented levels. Regulations and laws are only just beginning to catch up to the ability of both governments and private entities to deploy these capabilities.
What exactly is there to worry about? The mass collection and centralization of data by giant multinationals such as Facebook and Google is as good of a place to start as any. Two decades of vacuuming up the personal data of users of various online services has created the most impressive marketing capabilities in history, but these profiles have astounding potential for damage when they are used the wrong way or fall into the wrong hands.
Unauthorized information that is captured in data breaches tends to find its way to massive “combo lists” that are sold and traded on the dark web. Social security numbers are added from this breach, home addresses and phone numbers from that one, personal health information from yet another. Soon, a frighteningly complete profile of millions of individuals is available to anyone willing to pay the asking price.
These are just the established data privacy issues. The emerging ones are even worse. High-quality facial recognition technology is just beginning to roll out across the public places of some countries. Artificial intelligence is not only making mass facial recognition possible, but magnifies the power and reach of any application that involves capturing and sorting information: scanning pictures, analyzing speech, sifting through text and location data. This threatens to not only shatter anonymity and privacy, but allow for highly advanced impersonation and take the concept of “identity theft” to new levels.
Some businesses chafe at the trouble and added expense of new and emerging data privacy regulations, but they are vital to both protecting rights and privacy and instilling confidence in end users. Customers want to be able to submit their payment information without worry about data breaches and identity theft, use services without wondering what is being done with their personal information and use devices without fear of surveillance or having location data tracked. The need for meaningful safeguards only grows greater as technological capabilities increase.
Proposed EARN IT Act is viewed as an anti-encryption bill as the government commission tasked to create a "best practices" list is composed of representatives with an interest in encryption backdoors.
Law enforcement is able to issue keyword warrants for specific Google searches, potentially sweeping up the queries of hundreds or thousands of unrelated individuals, something obviously of concern as abortion laws change.
Dating app Grindr quietly sold user location data to a third-party ad network from "at least" 2017 until early 2020, making it available to thousands of parties.
DNA testing companies are collecting millions of DNA samples that include personal health information (PHI) and turning around to sell it to research and pharmaceutical companies. Consumers need to weigh the privacy risks and decide if these DNA testing companies have a heart of gold or are just looking for one.
The wording of Google’s latest privacy policy update essentially declares that the entire internet is its domain to scrape for training its AI models and creation of its AI products, a position that is all but assured to generate legal challenges.
Personalized marketing has been widely embraced by marketers. However, the trend is getting a privacy blowback as 91% of consumers believed that ads know too much about them.
Changes in the risk and compliance arena are accelerating in the recent years. With these developments it is urgently needed to redefine the place of privacy and the privacy team in this evolving landscape just the same as establishing links with overlapping, adjacent and related areas of risk and compliance.
Under the new treaty between U.S. and UK, social media companies could be forced to open encryption backdoor for law enforcement officials to read the messages from criminals, terrorists and pedophiles.
Leaders from China, Japan, Germany and South Africa at Davos voiced support for increased government oversight, tech regulation and data governance in their own countries as well as international cooperation on standards.










