Data privacy issues are a concern for many consumers, with 72% of Americans agreeing that companies should be regulated to control what data they use. These concerns are heightened among older generations, with Baby Boomers and Gen X feeling the strongest about big tech and their privacy.
In order to address these concerns, businesses should take proactive measures by ensuring that the data they are working with is legal and secure. This can be accomplished by performing a data mapping exercise, and also by providing consumers with easy ways to follow through on their rights to be informed about, and act upon, how their personal information is being used by establishments.
Additionally, the majority of laws overseeing data privacy provide for individuals to reserve the right to not be subjected to decisions made solely by automated systems or profiling. Establishments should be aware of this, as well as other rights, to avoid statutory repercussions and potential fines.
Taking steps to prevent these types of issues requires creating comprehensive privacy policies, as well as involving the entire organization in their development and enforcement. For example, HR and management must be a part of the process to make sure that the policy is accessible to employees, as they are a key stakeholder in the security of their own personal data.
Data privacy should not be confused with cybersecurity, though they are kissing cousins in the data landscape. Data privacy focuses on the governance of personal data, namely how it is collected and used, while cybersecurity deals with protecting that data from external threats and exploitation. Both aspects of an organization’s data processing obligations are essential, and both are required to meet the high expectations of today’s consumers.