The General Data Protection Regulation, or GDPR for short, is a major new European privacy law that went into effect on May 25. GDPR will radically reframe our relationship with the organizations that store and process our data. From Amazon to the UK National Health Service (NHS), organizations around the world are desperately racing to ensure compliance, even after the deadline.
Yet despite these efforts, just one in ten consumers have heard of the data protection regulation.
That’s a shame because this is a huge piece of legislation that will impact virtually every industry in its bid to make the region’s privacy laws fit for the digital age. As it does so, GDPR will finally put consumers in the driving seat, making it easier to protect your privacy and demand greater transparency and accountability from those who use your data.
Prioritizing Trust
We live in an increasingly data-driven world. Digital platforms have revolutionized the way we work and playmaking us happier, healthier, and more productive. But the flipside for consumers is that it has left us all increasingly helpless as our data is misused, shared, and resold around the world. If anyone is still in any doubt, just look at the recent Facebook data scandal.
Although the number of UK consumers concerned about online privacy has fallen over the past five years, it still stands at 75%, according to DMA research. Most of us are “data pragmatists;” consumers who are willing to part with personal info, but only if there’s a clear reward for doing so. We want organizations to take more responsibility for our data, to ensure it isn’t misused and shared with countless third parties. The majority (54%) of us consider trust as the most important factor when deciding whether to share personal information, and 88% of us rate transparency in data exchange as a priority.
The good news is that the GDPR has been painstakingly drawn up over several years to help drive exactly this trust and transparency — giving ordinary consumers control over their data. Even better, the regulations will still apply in the UK after Brexit.
But the law won’t have the desired impact if consumers don’t know it exists, or what their newly expanded rights are. That’s why the UK regulator, the Information Commissioner’s Office (ICO), launched a new awareness-raising campaign last month. Of those that are aware, 90% want direct control over the way businesses to use their personal data and 89% want to see what data organizations hold on them, according to separate research.
It’s going to be a fascinating year ahead.
5 New Privacy Enhancements from the GDPR
With that in mind, here are the top 5 new enhancements to our privacy rights, courtesy of the GDPR:
Perhaps most notable: a lack of a response from the consumer does not indicate consent.
There’s much more in the GDPR, besides these benefits listed above, that will be welcomed by consumers. It also forces providers to better protect personal information from cyber criminals and come clean within 72 hours if they discover a data breach, for example.
Taken together, these important new steps will hopefully usher in a new era of accountability and trust. With fines of up to 4% of global turnover, or £17 million (whichever is higher), those organizations that try to ignore it may soon find they’ve made an expensive mistake.