GDPR

Data Protection Day 2019: Privacy firmly in the limelight

We asked some of the leading figureheads and thought-leaders in the field of cybersecurity and privacy to give us their thoughts about what 2019 has in store for us when it comes to privacy and data protection, just days before the Data Protection Day (or Data Privacy Day as it is called in the US).…


We asked some of the leading figureheads and thought-leaders in the field of cybersecurity and privacy to give us their thoughts about what 2019 has in store for us when it comes to privacy and data protection, just days before the Data Protection Day (orData Privacy Dayas it is called in the US). We received more than 100 replies that cover the widest possible spectrum and show how important and critical that field has become for the wider tech community. 

  • 2019 is the year we discover the true cost of poor data protection
  • These are the seven deadly sins of data tampering
  • Four easy ways to protect your digital Identity

So why the Data Protection day is so important?

Mike Turner, Head of Compliance at Mojo Mortgages, gives his thoughts

GDPRimplementation last year – It is great to see the transition hasn’t been the nightmare some predicted it would. I think Data Protection Day is of particular importance this year for awareness reasons. 

DP day provides the opportunity to bring governments, parliaments, and regulators and specific DP bodies together to raise awareness of what rights individuals have, specifically relating to personal data and privacy. The day opens up the floor for active discussions about how we can better protect and guard the data across a variety of industries, as well as the tools and strategies to put them in place. 

With that being said, the awareness behind data protection should be permeated to society every day. Yes, Data Protection Day serves a timely reminder of individual privacy, however distributing awareness surrounding data protection should be instilled in every companies strategy. 

Nonetheless, Data Protection Day gives a chance for a diverse number of organisations to come together to acknowledge the trust customers put in organisations to protect their data and stresses how important safeguarding customer data will be if business are to be successful.

Is it actually necessary to have such an event in 2019?

Colin Truran, principal technology strategist, Quest answers

We should ask ourselves, is an arbitrary day to simply raise awareness of data privacy really necessary in 2019? In the era of GDPR, multi-million dollar lawsuits, and career-ending data breaches, awareness of data privacy is higher than ever. It may sound cliché, but every single day of the year should be a day for businesses and individuals to do more to protect personal data. 

Data Privacy Day has been a fixture of the calendar since 2007, and I believe it needs to evolve to stay relevant with the rapidly changing data landscape. Beyond raising awareness, the 28th January needs to become a day where businesses are genuinely held accountable for their data protection practices. 

To celebrate a day like this, we should be calling on all organisations to be transparent and publish exactly what they’re doing to safeguard their customers’ data, making Data Privacy Day an annual check-in on the health of data protection and to ensure there are no hiding places for data misuse. The day is an opportunity for organisations to demonstrate how competitive they are in upholding the rights of the individual and protecting their data.

How does trust factor in to data protection?

Mark Barrenechea, CEO at OpenText, elaborated

Over 2.5 quintillion bytes of data are created each day. This pace will only continue to accelerate as automated cars, sensors, drones, and the Internet of Things (IoT) introduce new formats at a rapid-fire pace. Clearly, we are in store for an information-infused future. This data is to a business or to an individual, as blood is to the body. Its foundation: trust.

Banish data, or the trust to protect it, and the world falls apart: all commerce would cease; bank accounts would have zero balances; planes would fall out of the sky; cars would halt in their tracks; power and water would stop flowing. Data, business and life are inseparable, and as indispensable as water, air and electricity. More profoundly, data and systems are so advanced that we can begin to see our human and cognitive form in our own digital data trails. Every day we are building, brick by brick and bit by bit, a digital copy of ourselves, whether we are aware of it or not.

The nature of the data has changed, as today’s data goes well beyond what you can find in the phone book of a decade ago. In this digital era, your modern data now includes your behaviours (friends list, what you read, pictures, a recording of all your phone calls, etc). But what is the real difference when a bad actor steals 135 million people’s data from a credit aggregator or when a social media company sells 85 million people’s data to a political consulting firm? The actors are different, but the consumer impact is the same. Trust is broken. Whether it be governments, individuals or businesses, when trusted with data, it is job Number 1 to defend and protect that which is entrusted. This trust transcends products or services.”

Why data protection has becoming increasingly complex and the regulatory framework is more significant now more than ever before?

Darren Barker, VP & General Manager UK&I of Hitachi Vantara

Data is fast becoming a new global currency, perhaps the most powerful in history, and businesses mine, collect and safeguard it. Yet unlike gold or oil which is made valuable by its scarcity, data is in abundance – and it is the sheer volume of it that makes it so challenging to govern. Businesses are often overwhelmed by their data, which is typically disparate and scattered across departments and even geographies. It’s not just small companies that are struggling in a new data-saturated world. If anyone needs a reminder of the pertinence of data protection, just last week, Google was handed a £44 million fine in France for alleged GDPR breaches. 

Unlike a traditional currency, you can’t hand data over to a bank or lock it in a vault. Rather than a bank manager, businesses increasingly entrust their data to the Chief Data Officer. Still, companies live under the constant shadow of stringent regulation. This isn’t a bad thing – imagine toda

Read More

Be the first to write a comment.

Leave a Reply

GDPR

Next Wave: African data protection laws need more oomph to match GDPR

Cet article est aussi disponible en français First published 07 April, 2024 African nations’ data protection laws are, to some extent, weaker compared to Europe’s. This is because the European Union’s (EU’s) General Data Protection Regulation (GDPR) sets a high standard for digital data protection. We can think of the GDPR as a benchmark for

Cet article est aussi disponible en français

First published 07 April, 2024

African nations’ data protection laws are, to some extent, weaker compared to Europe’s. This is because the European Union’s (EU’s) General Data Protection Regulation (GDPR) sets a high standard for digital data protection. We can think of the GDPR as a benchmark for strong data protection laws. Moreover, African countries have varying levels of success in putting their data protection policies into practice. Digital governance policies in Africa can shape the continent’s progress as digital advancements grow alongside economic development.

This is why current data governance across African states must be assessed, particularly paying attention to their trends and differences. While South Africa, Kenya, and Botswana have seen rapid growth in data protection policies, they still need to catch up to the GDPR standards of the EU.


But why is this important?

Between 2020 and 2023, over 30 African countries implemented data protection laws. As expected, each new regulation brings fresh compliance obligations and penalties for non-compliance.

Next Wave continues after this ad.

The State of Tech in Africa

The first quarter of 2024 is just over and there was a lot of activity within Africa’s Tech Ecosystem in that period.
Due to varying reasons, some startups had to trim their workforce while there were others who even expanded into new territories. A couple of interesting M&A deals have also occurred.

Come and get an exclusive scoop into the details of these and more, like funding deals, at a specially curated edition of TechCabal Live on April 12 by 11am (WAT). You will also witness the State of Tech in Africa Q1 2024 report launching.

The report spotlights important trends in Q1 2024 while also delving deeper into the nitty gritty of various happenings in Africa’s Tech Space.

As a stakeholder in Africa’s Tech Ecosystem, these insights will help you position strategically and uniquely to harness the innovative progress within this sector. You don’t want to miss this.


Register here now to make sure!

This, therefore, means that organisations with operations or customers in Africa must understand the applicable laws fully. Many internet-based businesses operate or use cloud services in multiple African nations; this sometimes calls for transferring personal data across borders. This movement often occurs between African countries and regions such as the EU, UK, US, and Australia, which can pose various data protection challenges.

Understanding the importance of data privacy rules in each African country, especially limitations on data transfer, cannot be stressed enough. Organisations must also check if local laws limit using service providers within African nations and their related requirements. A grasp of the legal framework for transferring personal data from African countries is essential for compliance.


Circling back to GDPR and the EU…

Considering Europe’s stringent directive that international players adhere to its data protection standards, we must ask whether European companies maintain the same standards when handling personal data from Africans as they do with Europeans.

Next Wave continues after this ad.

DICE: The Tech Ecosystem Mixer

On April 26th, H.M Hannatu Musa Musawa, the Minister for Art, Culture & the Creative Economy, alongside distinguished experts, will speak at the DICE Ecosystem Mixer 2.0, with a focus on Africa’s creative economy.


Register here for a chance to attend.

This research revealed disparities in digital rights granted by subsidiaries of European telecom giants Orange and Vodafone in Senegal and Kenya compared to their European counterparts. The discrepancies included lack of transparency in publishing terms of use for prepaid services, minimal disclosure regarding data collection practices, third-party access, and security measures.

This highlights how, despite the principles underpinning the European data protection regime, companies may exploit regulatory gaps in countries to their advantage, compromising data privacy standards.

Many Western tech companies are notorious for disregarding user data privacy, offering convenience at the expense of the vast amounts of personal data they harvest. This trend is due to the absence of markets where individuals can understand the value of their data, leading them to exchange it for minimal gains. This issue is common in Africa and less so in Europe, where the GDPR exists.

Consider the case of Worldcoin, supported by OpenAI’s CEO, Sam Altman, which uses blockchain technology to store biometrically derived tokens. It retains personal data indefinitely without allowing users to delete their information.

When Worldcoin launched its services in Kenya, it incentivised people with around $50 to get them to scan their irises. Despite concerns about data protection, Kenya initially licensed Worldcoin’s operations. Before its suspension in August 2023, Worldcoin had become very popular, scanning the irises of up to 350,000 Kenyans, most attracted by the monetary incentive. While these funds may temporarily alleviate financial constraints for locals participating in the exercise, there is a compelling argument that Worldcoin’s model is exploitative.

The other day, Worldcoin was temporarily banned in Portugal, following similar restrictions in Spain, leaving Germany as its sole European market for biometric data collection. Portugal’s data protection office imposed the ban after complaints about scanning children’s irises.

This case underscores Europe’s stringent stance on digital data protection. EU data protection laws afford individuals rights over their data, including the ability to edit or delete it. This was an obvious legal conflict with Worldcoin’s approach, highlighting the split in digital privacy standards between Africa and Europe.



Bottom line

African nations must tailor data protection laws to their needs and enforce them consistently.

While directly copying the GDPR may not work, Africa can learn from the EU’s approach to demand global compliance. Despite initial uncertainties, harsh fines on non-comp

!–Subtitle>

!–Subtitle–>!–Text>

!–Text>!–Ad>!–Subtitle>!–Text>!–Text>!–Subtitle–>!–Ad>!–Subtitle>!–Subtitle–>!–Main>!–Date>!–Date–>!–TopBanner_END–>!–TopBanner
a>!–div>
Read More

Continue Reading
GDPR

Chrome’s latest feature blocks cookie-stealing hackers

Cookies aren’t just something sites have to annoy you about every single #$%&ing time you visit them because of the GDPR. They’re one of the most basic ways for sites to identify specific users, for better and worse. Stealing and spoofing those cookies is a popular vector for identity theft attacks…

Cookies aren’t just something sites have to annoy you about every single #$%&ing time you visit them because of the GDPR. They’re one of the most basic ways for sites to identify specific users, for better and worse. Stealing and spoofing those cookies is a popular vector for identity theft attacks…
Read More

Continue Reading
GDPR

Quinyx: Revolutionizing workforce management and productivity

Quinyx: Discover the power of intuitive rostering and flexible modules to take your company to the next level. Tested by experts, GDPR compliant, and loved by users…

Quinyx: Discover the power of intuitive rostering and flexible modules to take your company to the next level. Tested by experts, GDPR compliant, and loved by users…
Read More

Continue Reading
GDPR

Timworks: Seamless client support and team management

Timworks: the all-in-one client support and team management tool. Seamlessly integrate your favorite tools, ensure GDPR compliance, and delight your clients with real-time communication…

Timworks: the all-in-one client support and team management tool. Seamlessly integrate your favorite tools, ensure GDPR compliance, and delight your clients with real-time communication…
Read More

Continue Reading