Rather than businesses having to expose users’ personal data, and have data brokers collect that data into centralized storehouses, Privacy Enhancing Technology means that companies can work together directly, helping one another to vouch for and validate trustworthy users.
Data Privacy
Technological development has always outpaced privacy concerns, but never more so than in the past decade. Collection and centralization of personally identifiable information (PII), tracking of movements and digital surveillance are all at unprecedented levels. Regulations and laws are only just beginning to catch up to the ability of both governments and private entities to deploy these capabilities.
What exactly is there to worry about? The mass collection and centralization of data by giant multinationals such as Facebook and Google is as good of a place to start as any. Two decades of vacuuming up the personal data of users of various online services has created the most impressive marketing capabilities in history, but these profiles have astounding potential for damage when they are used the wrong way or fall into the wrong hands.
Unauthorized information that is captured in data breaches tends to find its way to massive “combo lists” that are sold and traded on the dark web. Social security numbers are added from this breach, home addresses and phone numbers from that one, personal health information from yet another. Soon, a frighteningly complete profile of millions of individuals is available to anyone willing to pay the asking price.
These are just the established data privacy issues. The emerging ones are even worse. High-quality facial recognition technology is just beginning to roll out across the public places of some countries. Artificial intelligence is not only making mass facial recognition possible, but magnifies the power and reach of any application that involves capturing and sorting information: scanning pictures, analyzing speech, sifting through text and location data. This threatens to not only shatter anonymity and privacy, but allow for highly advanced impersonation and take the concept of “identity theft” to new levels.
Some businesses chafe at the trouble and added expense of new and emerging data privacy regulations, but they are vital to both protecting rights and privacy and instilling confidence in end users. Customers want to be able to submit their payment information without worry about data breaches and identity theft, use services without wondering what is being done with their personal information and use devices without fear of surveillance or having location data tracked. The need for meaningful safeguards only grows greater as technological capabilities increase.
India’s DoT now requires outsourcing providers in India to capture and store certain call records and system logs at their Indian delivery centers. Outsourcing customers should evaluate their agreements to ensure their information and that of their customers is safeguarded while complying with obligations under the Guidelines.
Increasingly a mission critical element, report notes that the return on investment (ROI) of mature digital privacy programs also continues to be high – particularly when privacy is aligned with security.
Facebook is anticipating a loss of $10 billion to the Apple privacy changes in 2022, while Snapchat is in the midst of an overperforming Q1 that has seen the company's shares rally to increase 50% in value.
Lawmaker concerns about storage of biometric identification information and the use of a third-party contractor’s facial recognition technology has prompted a change in plans by the IRS.
In the age of hybrid and remote working, assess your corporation’s plan for data privacy management. Are you educating your employees about safe data sharing practices, and do you have the best infrastructure to mitigate data privacy risk and thwart future attacks?
New insight into a domestic data collection program run by the CIA indicates even more mass surveillance may have taken place, and some senators are demanding answers.
Google recently announced that its Privacy Sandbox initiative is now also being rolled out for Android, in a move comparable to the ad tracking privacy changes made by Apple in 2021.
If the court approves the settlement, this long-running privacy lawsuit will finally be put to bed with $90 million (after the usual legal expenses) being parceled out to eligible users and Facebook forced to "sequester and delete" personal data.
It is difficult to scale without privacy automation while anticipating how rapidly evolving enterprises use data and account for immediate compliance requirements. A more modern privacy approach is to leverage technology, automation, and data management to create an integrated hybrid strategy for compliance.