While data owners and processors are making significant investments towards technologies that help them get data, very little is being done by them today that mitigates risks while using it
Just a few weeks back, one of the leading social media platforms agreed to pay $150 million over misuse of consumer consented data. Since the GDPR took effect in May 2018, we’ve seen over 900 fines issued across the European Economic Area (EEA). If we carefully analyze the nature of the fines, and how they could have been avoided, it broadly falls across two areas:
Get Data: Ensure that when you can accept the consent in one click, you should enable refusal in one click as well—not once but session-based with real-time control.
Use Data: Commit to protecting it well, clarify the purpose of usage and be transparent about it. Above all, never process sensitive information on health, religious belief and so on.
While data owners and processors are making significant investments towards technologies that help them get data, very little is being done by them today that mitigates risks while using it. Not just social media platforms, many brands have failed to uphold their consumer’s privacy while using their data.
Getting data is just the start—a good start that is. It is the usage that needs to be safe, secure, and transparent. It is important to note that most of the fines awarded by GDPR and FTC in the recent past are towards misusing the data and not acquiring it.