Your job as a new CPO is to lay the foundation, merge any existing and new pieces into one privacy program and then lead the way on all things privacy. Where do you start? What are the priorities? How do you introduce privacy concepts to the company? You need a plan.
Data Privacy
Technological development has always outpaced privacy concerns, but never more so than in the past decade. Collection and centralization of personally identifiable information (PII), tracking of movements and digital surveillance are all at unprecedented levels. Regulations and laws are only just beginning to catch up to the ability of both governments and private entities to deploy these capabilities.
What exactly is there to worry about? The mass collection and centralization of data by giant multinationals such as Facebook and Google is as good of a place to start as any. Two decades of vacuuming up the personal data of users of various online services has created the most impressive marketing capabilities in history, but these profiles have astounding potential for damage when they are used the wrong way or fall into the wrong hands.
Unauthorized information that is captured in data breaches tends to find its way to massive “combo lists” that are sold and traded on the dark web. Social security numbers are added from this breach, home addresses and phone numbers from that one, personal health information from yet another. Soon, a frighteningly complete profile of millions of individuals is available to anyone willing to pay the asking price.
These are just the established data privacy issues. The emerging ones are even worse. High-quality facial recognition technology is just beginning to roll out across the public places of some countries. Artificial intelligence is not only making mass facial recognition possible, but magnifies the power and reach of any application that involves capturing and sorting information: scanning pictures, analyzing speech, sifting through text and location data. This threatens to not only shatter anonymity and privacy, but allow for highly advanced impersonation and take the concept of “identity theft” to new levels.
Some businesses chafe at the trouble and added expense of new and emerging data privacy regulations, but they are vital to both protecting rights and privacy and instilling confidence in end users. Customers want to be able to submit their payment information without worry about data breaches and identity theft, use services without wondering what is being done with their personal information and use devices without fear of surveillance or having location data tracked. The need for meaningful safeguards only grows greater as technological capabilities increase.
The 10th anniversary of national Data Privacy Day celebrated on January 28 couldn't have come at a better time for Internet users with the past 12 months filled with stories about cyber security attacks, election meddling, state surveillance, and massive corporate data breaches.
Consumer privacy took a body blow in 2017 when U.S. President Donald Trump signed a repeal of the broadband privacy rules. Increasingly, the complex nature of privacy in the age of the internet is putting the fraught relationship between government, big business and the man on the street to the test.
Chinese Internet users have become much more vocal about what they perceive to be potential breach of privacy by China Internet Giants - Alibaba, Baidu and Tencent.
China's Social Credit System is scores the reputation of citizens and businesses operating within its sovereign border, using data collected from social media, financial institutions and government records. The purpose is to increase trust, transparency and confidence in the domestic marketplace but at what cost?
The FCC’s historic overturning of the Obama-era Net Neutrality rules could have profound implications for the Open Internet. While there are potential censorship and service pricing implications of this move, what are the long-term impact on data privacy and cyber security?
Companies must show that they are constantly innovating but they must also show that they are taking into account customer privacy and security to protect personal information. Those that can manage this delicate balancing act between customer privacy and digital trust will be the winners in the modern digital economy.
The new “Tracking the Trackers” report showed that 79% of all websites globally are secretly tracking your online behavior. Moreover, many are, in turn, forwarding your personal information to other companies. For many, the message is clear: it’s time to take back the web and end this widespread invasion of privacy.
Thailand's new Computer Crime Act gets tough on electronic marketing and spammers will now face criminal charges and hefty penalties if found guilty.
U.S. doing an “adequate” job for Privacy Shield but could be doing more to protect the data transfer of EU users, including reform of the FISA regulations.