Businesses See GDPR as an Opportunity to Improve Data Privacy and Security

Businesses See GDPR as an Opportunity to Improve Data Privacy and Security

Foto: Fotolia

A new study from IBM reveals that nearly 60 percent of organizations surveyed are embracing the General Data Protection Regulation (GDPR) as an opportunity to improve privacy, security, data management or as catalyst for new business models, rather than simply a compliance issue or impediment.

To reduce their exposure, the study indicated that the majority of companies are being more selective in the data they collect and manage, with 70 percent disposing of data ahead of the deadline for compliance. Companies' preparation for GDPR comes in the wake of increased scrutiny from consumers on businesses' management of personal data.

A separate poll of 10,000 consumers, conducted by the Harris Poll on behalf of IBM, found that only 20 percent of U.S. consumers completely trust organizations they interact with to maintain the privacy of their data. In the weeks leading up to the May 25th enforcement date, IBM's Institute for Business Value (IBV) surveyed over 1,500 business leaders responsible for GDPR compliance for organizations around the world. The results reveal how companies are approaching GDPR as an opportunity to build further trust with customers and help drive innovation.

84 percent believe that proof of GDPR compliance will be seen as a positive differentiator to the public, while 76 percent said that GDPR will enable more trusted relationships with data subjects that will create new business opportunities. Despite this opportunity, only 36 percent believe they will be fully compliant with GDPR by the May 25 deadline.

"GDPR will be one of the biggest disruptive forces impacting business models across industries and its reach extends far beyond the EU borders," said Cindy Compert, CTO, Data Security & Privacy, IBM Security. "The onset of GDPR also comes during a time of huge distrust among consumers toward businesses ability to protect their personal data. These factors together have created a perfect storm for companies to rethink their approach to data responsibility and begin to restore the trust needed in today's data-driven economy."

Another key finding of the study is that organizations are using GDPR as an opportunity to streamline their approach to data and reduce the overall amount of data they are managing. For many organizations, this means vastly cutting down on the amount of data they collect, store and share. According to the new study, 80 percent of surveyed organizations say they are cutting down on the amount of personal data they keep. 78 percent are reducing the number of people who have access to personal data and 70 percent are disposing of data that is no longer needed.

The study found that the top challenges organizations are currently facing when it comes to GDPR compliance are finding personal data within their organizations (data discovery), ensuring the accuracy of the data they collect and store, as well as complying with rules for how data is analyzed and shared (data processing principals). Other areas for concern included the handling of cross-border data transfers and getting consent from data subjects, as less than half of respondents said they were prepared for these aspects of GDPR.

One key element of GDPR includes the requirement for companies to report data breaches to regulators within 72 hours. However, the IBV study found that only 31 percent of companies have reexamined or modified their incident response plans to prepare for this requirement, representing a blindspot in companies' overall approach to GDPR.

While challenges remain, a significant sub-set of companies surveyed (22 percent) are using GDPR as a fully transformational business opportunity for how they approach data responsibility and management. Of this "leaders" subset 93 percent have modified their incident response processes. 79 percent said they were prepared for performing data discovery and ensuring data accuracy and 74 percent stated that they were fully implementing security and privacy by design for new products and services.

More from category

Use of Digital Strategies and Data Will Help Police Tackle Criminal Activity

Use of Digital Strategies and Data Will Help Police Tackle Criminal Activity

25 May 2018 comment

New models for policing harnessing data, digitisation, public and private sector organisations, and more diverse skills, offer law enforcement opportunities to improve how they tackle emerging challenges from global criminal activity, according to PWC.

eMarketer Cuts US Uber Forecast

eMarketer Cuts US Uber Forecast

25 May 2018 comment

Following a series of public relations scandals last year and the aggressive expansion of Lyft, eMarketer has lowered its projections for Uber usage in the US in its latest forecast on the sharing economy.

Smart Toy Revenues Will Grow by Almost 200% From 2018 by 2023

Smart Toy Revenues Will Grow by Almost 200% From 2018 by 2023

24 May 2018 comment

A new report from Juniper Research found that Smart Toys will represent an $18 billion hardware and software market by 2023, up from an estimated $6 billion in 2018.