How do you measure the impact of GDPR on your LBS strategy and performance?

2 Data minimization and retention

The GDPR principle of collecting and processing personal data only to the extent necessary and proportionate for a specific purpose applies to LBS providers. This means they should limit the amount and type of data they collect, store, and use, and delete or anonymize it when no longer needed. Data minimization and retention are essential for LBS, as they reduce the risks of data misuse, loss, or theft, and increase user and partner trust and loyalty. To measure the impact of GDPR on data minimization and retention, metrics such as the number and percentage of data fields collected, stored, and used; the average size and growth rate of data sets and databases; the frequency and duration of data retention periods; as well as the number and percentage of data records deleted or anonymized can be used.

3 Data consent and transparency

A core requirement of GDPR is that personal data should only be processed with valid and informed consent of the data subjects, or another lawful basis. This means that LBS providers must obtain and document the consent of users and partners for the collection, processing, and sharing of their data, as well as informing them about their data rights and choices. Data consent and transparency are essential for LBS, as they ensure compliance, legitimacy, and accountability of their services. To measure the impact of GDPR on these aspects, you can use metrics such as the number and percentage of users and partners that give, withdraw, or modify their consent; the frequency and duration of consent requests and notifications; the number and percentage of data requests, complaints, or breaches related to data consent and transparency; and the feedback and satisfaction of users and partners regarding data consent and transparency.

4 Data security and protection

A fundamental obligation of GDPR is that personal data must be processed securely and confidentially, with appropriate technical and organizational measures in place to prevent unauthorized or unlawful access, disclosure, or damage. Therefore, LBS providers must implement and maintain robust data security and protection policies and practices such as encryption, authentication, backup, or breach response. Data security and protection are essential for LBS to safeguard the integrity, availability, and resilience of their services. To measure the impact of GDPR on data security and protection, metrics such as the number and percentage of data records that are encrypted or authenticated, the frequency and duration of data security and protection audits and tests, the number and percentage of data incidents, breaches, or attacks, as well as user and partner feedback regarding data security and protection can be used.

5 Data value and innovation

The ultimate aim of GDPR is to enable the fair and lawful use of personal data for the benefit of individuals, organizations, and society. Leveraging the opportunities and challenges of GDPR, LBS providers can create and deliver more valuable and innovative services that meet the needs and expectations of users and partners. Data value and innovation are essential for LBS, as they are responsible for the differentiation, competitiveness, and growth of the services offered. To measure the impact of GDPR on data value and innovation, metrics such as the number and percentage of users and partners that use, recommend, or renew the services; the frequency and duration of user and partner engagement and retention; the number and percentage of new or improved features, functions, or benefits of the services; as well as user and partner feedback regarding data value and innovation can be used.