Regulation and Consumer Sentiment Causing Industry to Rethink Relationship with Data; 80% Cutting Down on Amount of Personal Data They Keep
A new study from IBM (NYSE: IBM) reveals that nearly 60 percent of organizations surveyed are embracing the General Data Protection Regulation (GDPR) as an opportunity to improve privacy, security, data management or as catalyst for new business models, rather than simply a compliance issue or impediment.
To reduce their exposure, the study indicated that the majority of companies are being more selective in the data they collect and manage, with 70 percent disposing of data ahead of the deadline for compliance.
Companies' preparation for GDPR comes in the wake of increased scrutiny from consumers on businesses' management of personal data. A separate poll of 10,000 consumers, conducted by the Harris Poll on behalf of IBM, found that only 20 percent of U.S. consumers completely trust organizations they interact with to maintain the privacy of their data.
In the weeks leading up to the May 25th enforcement date, IBM's Institute for Business Value (IBV) surveyed over 1,500 business leaders responsible for GDPR compliance for organizations around the world. The results reveal how companies are approaching GDPR as an opportunity to build further trust with customers and help drive innovation:
- 84 percent believe that proof of GDPR compliance will be seen as a positive differentiator to the public
- 76 percent said that GDPR will enable more trusted relationships with data subjects that will create new business opportunities
- Despite this opportunity, only 36 percent believe they will be fully compliant with GDPR by the May 25 deadline
"GDPR will be one of the biggest disruptive forces impacting business models across industries – and its reach extends far beyond the EU borders," said Cindy Compert, CTO, Data Security & Privacy, IBM Security. "The onset of GDPR also comes during a time of huge distrust among consumers toward businesses ability to protect their personal data. These factors together have created a perfect storm for companies to rethink their approach to data responsibility and begin to restore the trust needed in today's data-driven economy."
Cutbacks: GDPR Leading to Reduction of Data Collection and Storage
Another key finding of the study is that organizations are using GDPR as an opportunity to streamline their approach to data and reduce the overall amount of data they are managing. For many organizations, this means vastly cutting down on the amount of data they collect, store and share. According to the new study, organizations reported taking the following actions in response to GDPR:
- 80 percent say they are cutting down on the amount of personal data they keep
- 78 percent are reducing the number of people who have access to personal data
- 70 percent are disposing of data that is no longer needed
GDPR Challenges, Blind Spots, and Transformational Business Opportunities
The study found that the top challenges organizations are currently facing when it comes to GDPR compliance are finding personal data within their organizations (data discovery), ensuring the accuracy of the data they collect and store, as well as complying with rules for how data is analyzed and shared (data processing principals).
Other areas for concern included the handling of cross-border data transfers and getting consent from data subjects, as less than half of respondents said they were prepared for these aspects of GDPR.
One key element of GDPR includes the requirement for companies to report data breaches to regulators within 72 hours. However, the IBV study found that only 31 percent of companies have reexamined or modified their incident response plans to prepare for this requirement, representing a blindspot in companies' overall approach to GDPR.
While challenges remain, a significant sub-set of companies surveyed (22 percent) are using GDPR as a fully transformational business opportunity for how they approach data responsibility and management. Of this "leaders" subset:
- 93 percent have modified their incident response processes
- 79 percent said they were prepared for performing data discovery and ensuring data accuracy
- 74 percent said they were fully implementing security and privacy by design for new products and services
To download the Institute for Business Value report, "The end of the beginning: Unleashing the Transformational Power of GDPR" visit: http://ibm.biz/powerofGDPR.
Methodology
To better understand how organizations were preparing for GDPR and potentially using it as a transformational opportunity, the IBM Institute for Business Value (IBV) and Oxford Economics surveyed 1,500 GDPR leaders in 34 countries, representing 15 industries, between February and April of 2018. Chief Privacy Officers, Chief Data Officers, General Counsels, Chief Information Security Officers and Data Protection Officers were surveyed. To determine the GDPR leader group, respondents were classified using specific criteria (how they answered a select set of questions) and the GDPR leaders who met the criteria comprised 22 percent of the total sample.
About IBM Institute for Business Value
The IBM Institute for Business Value (IBV), part of IBM Services, develops fact-based, strategic insights for senior business executives on critical public and private sector issues. To learn more about this IBM Institute for Business Value study, contact
Clients are responsible for ensuring their own compliance with various laws and regulations, including the European Union General Data Protection Regulation. Clients are solely responsible for obtaining advice of competent legal counsel as to the identification and interpretation of any relevant laws and regulations that may affect the clients' business and any actions the clients may need to take to comply with such laws and regulations. The products, services, and other capabilities described herein are not suitable for all client situations and may have restricted availability. IBM does not provide legal, accounting or auditing advice or represent or warrant that its services or products will ensure that clients are in compliance with any law or regulation.
Learn more about IBM's own GDPR readiness journey and our GDPR capabilities and offerings to support your compliance journey here.
More than ever, there is a demand for IT to deliver innovation. Your IBM i has been an essential part of your business operations for years. However, your organization may struggle to maintain the current system and implement new projects. The thousands of customers we've worked with and surveyed state that expectations regarding the digital footprint and vision of the company are not aligned with the current IT environment.
TRY the one package that solves all your document design and printing challenges on all your platforms. Produce bar code labels, electronic forms, ad hoc reports, and RFID tags – without programming! MarkMagic is the only document design and print solution that combines report writing, WYSIWYG label and forms design, and conditional printing in one integrated product. Make sure your data survives when catastrophe hits. Request your trial now! Request Now.
Forms of ransomware has been around for over 30 years, and with more and more organizations suffering attacks each year, it continues to endure. What has made ransomware such a durable threat and what is the best way to combat it? In order to prevent ransomware, organizations must first understand how it works.
Disaster protection is vital to every business. Yet, it often consists of patched together procedures that are prone to error. From automatic backups to data encryption to media management, Robot automates the routine (yet often complex) tasks of iSeries backup and recovery, saving you time and money and making the process safer and more reliable. Automate your backups with the Robot Backup and Recovery Solution. Key features include:
Business users want new applications now. Market and regulatory pressures require faster application updates and delivery into production. Your IBM i developers may be approaching retirement, and you see no sure way to fill their positions with experienced developers. In addition, you may be caught between maintaining your existing applications and the uncertainty of moving to something new.
IT managers hoping to find new IBM i talent are discovering that the pool of experienced RPG programmers and operators or administrators with intimate knowledge of the operating system and the applications that run on it is small. This begs the question: How will you manage the platform that supports such a big part of your business? This guide offers strategies and software suggestions to help you plan IT staffing and resources and smooth the transition after your AS/400 talent retires. Read on to learn:
LATEST COMMENTS
MC Press Online