As the world becomes more digital, and the right to privacy becomes enshrined in a growing number of laws and regulations around the world, organizations increasingly have to pay attention to protecting the privacy of individuals in all their data handling and processing.
In the digital era, privacy guarantees need to be taken into account when designing any interactions with individuals that involve personal information, not only to avoid the risk of sanctions for failing to comply with privacy regulations, but also to gain consumer loyalty through winning their trust.
Since the introduction of the EU’s General Data Protection Regulation (GDPR), privacy has become very closely associated with data protection, and while there is no real privacy without effective data protection, privacy and data protection are often separate areas that modern businesses need to focus on to remain competitive.
In practice, this means that organizations constantly need to keep up to date on privacy and data protection regulations to ensure that their business operations remain in compliance, while at the same time they need to keep an eye on the cyber threat landscape to ensure they can protect personal and other business critical data from cyber attackers.
Cybersecurity, therefore, is an important part of privacy and data protection, but as remote working becomes more common, and organizations continue to adopt cloud-based services, the attack surface is changing and expanding.
This means that organizations need to adapt to this change and ensure that they adopt modern approaches that combine privacy, data protection and data governance. It is only through this convergence that today’s security and privacy requirements will be met.
The real question is why many organizations have not yet started actively building a trusted relationship with their users/customers/consumers/employees. The awareness is rising, so that security and privacy are moving increasingly into the focus of not only tech-savvy users but also that of everyday customers.
— Matthias Reinwarth, IAM Practice Director, KuppingerCole.
Because we understand the important relationship between privacy and data protection, and because we are committed to helping your business succeed, KuppingerCole has a great deal of content available in a variety of formats.
This includes live events such the 2022 KuppingerCole European Identity and Cloud (EIC) conference taking place in Berlin and online from May 10-13, where the topics of privacy and identity will be covered comprehensively.
Highlights include an exploration of the relationship between privacy and data protection in this keynote presentation entitled: Privacy and Data Protection. What is this Thing Called Privacy?, and an analysis of the effectiveness and future of the EU’s GDPR in this keynote presentation by privacy advocate Max Schrems entitled: I'm None of your Business.
The power of social platforms comes under the spotlight in this keynote entitled: It's the Relationship, Stupid, while the potential impact of the EU Digital ID Proposal will be explored in this keynote entitled: The New Digital Identity Wallet for all Europeans: Latest Amendments.
Canadian perspectives on data protection and privacy will be explored in this keynote entitled: Journey to the North: Canadian Perspectives and Progress on Digital Identity, while this session entitled: Privacy & the 7 Laws of Identity will be dedicated to paying tribute to the late Kim Cameron and looking at the relevance of his work both now and in the future.
Other EIC sessions covering privacy and data protection include:
- Digital Identity and Privacy: Stories from the Frontline
- The Omiverse SWOT
- Privacy: The Real Cost
- New Face, Who Dis? Privacy vs Authentication in a World of Surveillance
- Privacy Enhancing Mobile Credentials
- Why Killing Open Wi-Fi is the future of Privacy and Security
- Privacy = Data Protection + X
- Preserving Privacy in Identity-Aware Customer Applications
Advisories
In the digital era, business decisions are increasingly driven by data analysis, but there are concerns over the trustworthiness of data about interaction online as well as the ethics of its use. Find out how good Information Stewardship helps to ensure that data is used in ways that are ethical, compliant and secure in this Advisory Note entitled: Big Data Security, Governance, Stewardship.
The EU’s GDPR is one of the main data protection regulations that many companies have to comply with. To find out how to assess the current status and identify specific measures in your GDPR compliance projects and programs, have a look at this Advisory Note on KuppingerCole’s Maturity Level Matrix for GDPR Readiness.
Another important piece of legislation that organizations are having to comply with is the California Consumer Privacy Act (CCPA). For some insights and ensuring compliance, have a look at this Leadership Brief entitled: Six Key Actions to Prepare for CCPA.
Blogs
Privacy and data protection are key topics about which our analysts have written several blog posts. Have a look at the following list of short, incisive perspectives:
- CCPA: GDPR as a Catalyst for Improving Data Protection Outside the EU
- Does Microsoft Double Key Encryption Help with Schrems II?
- Cross-Border Data Management and Cybersecurity: Walking the Tightrope of Compliance and Business Efficiency
- A Sovereign Cloud Is About More Than Just Privacy
- Data Privacy & CX
- PEPP-PT: Bridging the Gap Between COVID-19 Pandemic Control and Privacy by Design
- Sustainable Data Management
Audio/video
If you would like to hear what our analysts have got to say on data protection and privacy, listen to some of all of these Analyst Chats:
- Privacy and Consent Management
- DNS and Privacy
- An Overview of Enterprise Information Protection
- How to Protect Data in a Hostile World
For more views from our analysts and partners from past KuppingerCole events, have a look at the following list of presentations, and choose the topics most relevant to your organization:
- Implications of the Court Ruling on EU-US Data Protection Umbrella Agreement
- Beyond Blockchain: New Frameworks for Data Privacy and Security
- Identity, Privacy, Security - The European Perspective
- Identity-Driven Security: The Key to Digital Privacy
Webinars
Data is the lifeblood of business and government. Therefore, data breaches can be devastating in terms of disruption, damage to reputation, remediation costs, and data protection fines. But the ongoing high number of breaches shows that what many organizations are doing to protect their data is not working. To find out more about this issue and how to address it, have a look at this webinar on: A Unified Approach to Modern Data Protection.
With the increasing adoption of cloud-based services, data protection and privacy in the cloud is an important issue for organizations to address. For more information on how to do so, have a look at these webinars:
Protecting the privacy of consumers is an important area to focus on for businesses interacting with customers online. For perspectives on the topic of balancing compliance and business needs when it comes to customer data, have a look at this webinar entitled: Privacy Compliance That Empowers Instead of Hinders.
As mentioned above, data security and the prevention of data leakage is imperative for business as well as regulatory compliance reasons. For more on this topic, have a look at this webinar entitled: Urgent Need to Protect the Most Critical Business Assets: Data & People.
Whitepapers
Data-centric security is an alternative approach towards information protection that has emerged as a direct response to the increasingly obvious failure of traditional measures focusing on protecting IT infrastructures. Find out more in this Whitepaper entitled: Why Your Organization Needs Data-centric Security.
Data-centric security is essential for a successful CCPA strategy. Find out more in this Whitepaper entitled: California Consumer Privacy Act: The Need for Data-Centric Security.
Identity Platforms provide the foundation for moving to a consistent management of consumer identities and customer relations. For more on this topic, have a look at this Whitepaper entitled: The Effect of GDPR on Customer Relations.
Tech Investment
Learn more about the technology market segments that support organizations’ need to improve data protection and privacy by looking at these Leadership Compass reports on:
- Privacy and Consent Management 2022 and associated Buyer’s Compass.
- Data Catalogs and Metadata Management
- Database and Big Data Security and associated Buyer’s Compass.
And these Market Compass reports on:
Organizations investing in technologies to support privacy and data protection can have a look at some of the related technology solutions that we have evaluated: