BankThink

Regs and breach fears have data security at a tipping point

While designed to protect the data privacy of EU citizens, and harmonize data privacy laws across Europe, the GDPR (General Data Protection Regulation) is reshaping the way organizations approach data protection globally.

Whether or not your business is based in the U.S. or abroad, you should care, and understand that to protect your business, you must protect your customers.

Consumers are increasingly concerned about who has access to their data and are now empowered to take back control of their information. For many, the Facebook data scandal has opened their eyes to how little control we actually have over our information, and educated consumers are demanding data protection.

EU data regulation
European Union Data Protection bits and bytes in waving pattern with EU stars
mixmagic/mixmagic - stock.adobe.com

We need to rethink how we acquire and manage consumer data, and any business using enterprise software needs to be accountable for how information is being processed, transported or shared. Computers, mobile phones, or any device that touches personal identifying information (PII) needs to be protected at all costs.

With or without GDPR, consumers demand that their data is protected and under their control.

The essence of GDPR is really to address the data management and control for individual consumers, and the businesses who have been collecting their information are now being held accountable.

Each user needs to know what information is being used, they need to control the access to their data, and they need to have the option to delete and remove data — all in the context of privacy and control.

For reprint and licensing requests for this article, click here.
Data breaches Retailers Compliance GDPR ISO and agent
MORE FROM AMERICAN BANKER