Home Data-Driven Thinking The Real Impact Of Data Breaches

The Real Impact Of Data Breaches

SHARE:

Data-Driven Thinking” is written by members of the media community and contains fresh ideas on the digital revolution in media.

Today’s column is written by Maja Milicevic, co-founder and principal at Sparrow Advisers.

Seemingly every few weeks news breaks of a new hacking scandal or high profile data breach. No industry is immune: Among the recently breached are a global hotel chain, a Q&A platform, fitness apps, global social platforms, big-box retailers and data companies that routinely handle vast amounts of sensitive, personal informationdata. There are likely many more that have yet to be uncovered.

Lukewarm responses to the breaches have also become quite common. It’s often difficult to quantify real-life impact and damage, especially since the types of data types compromised can vary. The legal and regulatory frameworks to ensure some accountability and punishment severely lag behind the complexity and prevalence of routine data collection and retention practices – and not just in marketing. With no enforcement, companies have little incentive to devote real resources to preemptive and ongoing data protection.

It’s not just limited to nefarious actors. Today’s data economy is generally opaque and doesn’t allow for visibility nor structured input and control from consumers. Data innocuously collected by a publisher today – while a reader researches a health condition, for example – can be repackaged, resold and surface years later as input into an important decision, such as whether to grant someone life insurance. This may sound like a nightmare scenario but it is unfortunately similar to what is already happening today.

There are several steps that marketing and advertising industry professionals can take to ensure we’re better custodians of our customers’ data.

The first step is understanding that security is everyone’s job. If marketers are tasked with collecting user-level data, they must understand what is being collected and how will it be stored. They must beef up on best practices, such as encryption, and know who legally and contractually has access to data coming from systems under their company’s control.

Marketers must perform a data audit to catalog and track all the different data points that they currently collect and ensure there’s a strategy that’s being followed whenever there’s desire to expand their available data universe. The temptation is to collect and store everything for as long as possible and figure out thewhat value of thethis data has along the way.

But is this really the best approach, especially if marketers are being asked to collect anonymized and PII-data sets together?

Next, we must design systems that allow for the enforcement of data rights usage and build in protections for end users. Easy opt-outs and good communication with end users on how their data will be used are critical to establishing and building user trust. Using data so it enhances the overall user experience, rather than over-personalizinge so it appears as if the user is being tracked or followed, is a fine line to draw, especially as the current state of data monetization may incentivize more intrusive methods.

Finally, a strong regulatory and legislative environment for punishing bad actors will ensure the right level of enforcement necessary, but that is almost entirely missing from the marketplace today. EU’s GDPR framework is an interesting first step in that direction, as is the California Consumer Privacy Act. We’re likely to see many more iterations and significant input from the industry in the regulatory process to ensure that we’re building a data ecosystem for everyone.

Subscribe

AdExchanger Daily

Get our editors’ roundup delivered to your inbox every weekday.

The ideal long-term solution lies with educating users on the value of exchanging data for services and putting them in charge of what data they share with whom and what they receive in return. To date, that value proposition hasn’t been clearly articulated, and consumers are seeing the negative side effects of lax data practices but very few, if any, positive ones. This needs to change rapidly if marketing as an industry is to continue earning consumer trust.

Follow AdExchanger (@adexchanger) on Twitter.

Must Read

The IAB Tech Lab Isn’t Pulling Any Punches In The Fight Against AI Scraping

IAB Tech Lab CEO Anthony Katsur didn’t mince his words when declaring unauthorized generative AI scraping of publisher content “theft, full stop.”

Comic: Gamechanger (Google lost the DOJ's search antitrust case)

Here’s Who’s Testifying During The Remedy Phase Of Google’s Ad Tech Antitrust Trial

Last week, the DOJ and Google filed their respective witness lists and the exhibit lists for the remedy phase of the ad tech antitrust trial. Lots of familiar faces!

MX8 Labs Launches With A Plan To Speed Up The Survey-Based Research Biz

What’s the point of a market research survey that could take weeks, when consumer sentiment is rollercoasting up and down every day? That’s the problem MX8 Labs aims to tackle.

Privacy! Commerce! Connected TV! Read all about it. Subscribe to AdExchanger Newsletters
Closeup image bag of money and judge gavel. Lawsuit, auction, bribe and penalty concept.

The LG Ads Legal Saga Continues With A Fresh Suit, This Time Against Kroll

Alphonso co-founder Lampros Kalampoukas is suing Kroll for allegedly undervaluing the company by nearly $100 million to aid LG Electronics in a shareholder dispute.

Comic: Metric Meditations

The Startup Trying To Automate The Ad Platform Reconciliation And Refund Mess

The ad tech startup Vaudit, founded last year by Mike Hahn, aims to automate the process of campaign reconciliation atop major ad platforms.