The Privacy Perils of Data Overload: Understanding and Mitigating the Privacy Risks of Hyper Data Collection
Debbie Reynolds
The Data Diva | Data Privacy & Emerging Technologies Advisor | Technologist | Keynote Speaker | Helping Companies Make Data Privacy and Business Advantage | Advisor | Futurist | #1 Data Privacy Podcast Host | Polymath
In an era marked by rapid technological advancements, organizations are collecting data at an unprecedented speed and scale. This “Hyper Data Collection” of personal data, driven by motives such as identity verification, age verification, and customer personalization, has created extensive data dossiers on individuals. While such practices can enhance service delivery and user experience, they can also inadvertently introduce additional privacy risks to organizations that may not be prepared to make the necessary changes to mitigate these new risks. The accumulation of newly collected personally identifiable information (PII) may require an update to existing data risk strategies and resources for its protection, juxtaposed with the increasing regulatory demands for transparency and minimizing data collection. This article delves into the privacy perils associated with? Hyper Data Collection and outlines strategies for organizations to mitigate these risks.
Risk #1 - Bypassing the Importance of Actual Knowledge
Hyper Data Collection often accumulates vast amounts of data, sometimes without a direct or actionable purpose. This overshadows the fact that companies may have collected so much information that they may already have “actual knowledge” of the information they need to take action on Data Privacy issues needed for decision-making processes. For example, in 2022 US Federal Trade Commission (FTC) fined WW International, Inc., formerly known as Weight Watchers, and a subsidiary called Kurbo, a family weight loss app, 1.5 million dollars for improper data collection and handling of data for children under the age of 13. For example, a child may have created an account where they confirmed to be age 13 or over, but the evidence was found where users, through their use of the app over time with additional data being provided to have given the company enough “actual knowledge “ for the organization to have been able to ascertain that some children on the site were not 13 and over as initially claimed. For example, a child may have entered the app as if they were 13 or older but talk about their 8th birthday party on the app. Regulators are increasingly using companies Hyper Data Collection practices against them and making them more accountable for all the data they collect including the “actual knowledge “ they may have due to? Hyper Data Collection, to ensure they follow Data Privacy regulations.
Here are some Strategies for the Mitigation of “Actual Knowledge” Data Privacy Risks:
Risk #2 - Collecting Data Without a Clear Purpose
The Hyper Data Collection practice of collecting data indiscriminately, without a defined objective, not only dilutes the usefulness of the data (for example, it is harder to find a needle in a haystack when you are creating a bigger haystack) but also exposes organizations to unnecessary privacy and security risks. Hyper Data Collection creates an increased data management burden without the benefit of actionable insights or purposeful utility. For example, as of January 2024, up to eight States in the US have “age verification” laws and some of these States require that adults, not children, submit their identity documents like a driver's license to prove they are of legal age to consume content on websites that have at least 30 percent of its content made for adults. The result of this Hyper Data Collection of identity documents from adults will be that organizations that may never have needed to collect PII in the past now will need to do so to comply with these new laws while these organizations may not be well equipped to protect the identity data they collect and maintain. Also, how long is that data retained once the identity process has been completed? Will this data be used for other purposes? How will the data I provide be protected? These are all valid and vital questions that organizations should answer as they collect more personal data.
Here are some Strategies for the Mitigation Risk of Collecting Data Without a Clear Purpose:
Risk #3 - Creating Unnecessary Privacy Risks
The more personally identifiable the information collected, the higher the privacy risks for individuals. For example, when organizations create a login customer journey when a user wants to make a purchase or sign up for a service, they should ask themselves what information is required to complete the transaction and why the data is required. If collecting someone’s email address and phone number is unnecessary to provide goods or services, then make this information optional or eliminate this data request to greatly reduce your organization’s risk of collecting and retaining this information. The tendency to do Hyper Data Collection necessitates increased efforts in determining what should be collected and why to help organizations greatly minimize Data Privacy and Data Protection Risks.
Here are some Strategies for Mitigation of creating Unnecessary Privacy Risks:
The phenomenon of Hyper Data Collection presents a dual-edged sword for organizations. On one hand, it offers the potential for improved identity verification, enhanced customer experiences, and operational efficiencies. On the other, it introduces significant privacy risks that can undermine trust and lead to legal repercussions. Organizations can mitigate these risks earlier by adopting a more measured, purpose-driven approach to data collection while still leveraging data for meaningful insights and rapid advancements. The key lies in striking a balance between data utility and Data Privacy, ensuring that the pursuit of data does not come at the expense of individual rights and protections, and helping organizations make Data Privacy a Business Advantage.
Debbie Reynolds "The Data Diva" Keynote Addresses
I'm thrilled to extend my heartfelt thanks to Volkswagen Credit, USDA, Ally Financial, National Grid, Lawrence Livermore National Laboratory, Northwestern Mutual, PayPal, Coca-Cola, FRTIB, Hewlett Packard Enterprises, WestRock, Capital Group, Johnson & Johnson, Uber, S&P Global, FDIC, DHL Supply Chain, and Rubrik for the privilege of being your Keynote Speaker. Your commitment to innovation and excellence is inspiring, and I'm honored to have contributed to your events.
The Pact Data Privacy Trust Framework
Debbie Reynolds, "The Data Diva," launched the PACT "Data Privacy" Trust Framework & Scorecard. This Framework can evaluate regulatory and business risk and the Trust of individuals around "Data Privacy". This is a gut check for organizations of all sizes to rate and triage their "Data Privacy" challenges. This Framework addresses Purpose, Alignment, Context, and Transparency. Watch this video to learn the basics as Debbie Reynolds explains the PACT Data Privacy Trust Framework & Scorecard in 6 minutes.
Visit our website to learn more about the PACT Data Privacy Trust Framework & Scorecard.
Do you need a Data+Privacy+Technology Workshop? Here are the top ten most requested Data Privacy Workshops for 2024:
Each 120-minute workshop structure includes:
Materials Provided:
Did you know that the Data Diva Talks Privacy Podcast has listeners in? 110 countries and 2,268 cities and is ranked globally in the top 2.% of podcasts? Here are more of our accolades:
Watch a video short of our podcast on Tuesday, February 27, 2024, The Data Diva E173 - Nitin Singhal, VP of Engineering, SnapLogic, Here is a sneak preview of our Data Diva Podcast guests:
Don't miss the new weekly episodes of "The Data Diva" Talks Privacy Podcast, so listen and subscribe.
The Data Diva talks Privacy Podcast offers podcast sponsorships. Each level reflects a different degree of involvement and support for the podcast, catering to a wide range of sponsors from different sectors of the privacy community. If your organization is interested in exploring podcast sponsorship, please contact us!
Thank you to "The Data Diva" Talks Privacy Podcast Privacy Champion Podcast Sponsor, Mine Privacy Ops. With constantly evolving regulatory frameworks and AI systems set to introduce monumental complications, data governance has become an even more difficult challenge. That’s why you need MineOS. The platform helps you control and manage your enterprise data by providing a continuous Single Source of Data Truth. Get yours today with a free personalized demo of MineOS, the industry’s top no-code privacy and data ops solution. Stay tuned for an exciting Data Diva collaboration with the Mine Privacy Ops team! To find out more about MineOS visit their website at https://www.mineos.ai/
领英推荐
Do you need a Data Diva Exclusive? Courtesy of Data Diva Media and "The Data Diva," in cooperation with our podcast's generous supporters, I am happy to share some valuable exclusives with our newsletter subscribers.
Many thanks to our Award-winning podcast sponsor, Safeguard Privacy, for offering a "Data Diva" exclusive offer! Get 15% off the first year of Safeguard Privacy compliance software using the code: DATADIVA15%
Congratulations to our Podcast Guest, The Data Diva E97 - Prashant Mahajan, Co-Founder & CTO, Privado, for Privado's recently announced raising of $17.5M?funding led by Insight Partners, Sequoia India, Emergent Ventures, and Together Fund.?The Data Diva is a proud supporter of Privado, and I am thrilled to see its continued success. Privado bridges the gap between Privacy and Engineering by giving Privacy teams real-time visibility into engineering systems. Privado helps protect privacy by detecting privacy issues before the software changes or new products are shipped.
Courtesy of August 2022 Data Diva Podcast Guest Gal Ringel and Mine PrivacyOps, we are pleased to offer an exclusive discount to organizations. Thank you to our sponsor Mine Privacy Ops, The first platform dedicated to handling Data Privacy operations while placing consumers and user experience at the center. #1 highest-rated Data Privacy Management Software, the #1 highest-rated DSR/DSAR Software, as well as the #1 highest-rated Sensitive Data Discovery Software in the industry on G2, the leading business software and services reviews platform. Use Mine PrivacyOps as your organization's Data Privacy management solution and receive a 20% discount on DSR, Data Mapping, and ROPA modules.
*To get the discount, contact [email protected] and add?Datadiva20 to the subject line.
Technics Publications?has graciously offered a Data Diva Promotion. Anyone who uses the coupon code?TheDataDiva?receives 20% off. The Promotional code is good for all books on the website, with the exception of DMBOK books. Visit the Technics Publications website now to take advantage of this off
Need a publication discount on Data Privacy books and digital products? Purchase any products (including Data Privacy books) from the Manning Publications website, and you can use?The Data Diva's permanent 35% discount code (good for all our products in all formats) using the following code at checkout: poddatadiva22
Need a VPN, Internet Controls, and Virus Protection? Data Diva Podcast alumni guest for episode 60, Brad Hawkins, CEO of SaferNet,?has a special offer!?SaferNet provides a very easy-to-use 3-in-1 device-level Cyber Safety protection solution, including an award-winning VPN, Internet Controls, and Virus Protection. SaferNet is ideal for individuals and small to medium-sized businesses who want reliable data protection. "The Data Diva" herself loves the product!?Go to https://www.safernet.com/ and buy an annual SafeNet plan for 25% off, which can be paid monthly or annually using the case-sensitive code:?datadiva
Need a Privacy-Friendly Internet Browser extension? Data Diva Podcast alumni guest for episode 28, Kelly Finnerty, Director of Brand and Content at Startpage, has a special offer! If you are looking for more control over your Data Privacy and less behavioral tracking while surfing the Internet, look no further.
Install Startpage Privacy Protection Extension for Chrome and Firefox: Install the link here
The Ultimate Easy Peasy Guide to Dependable DPIAs by Jamal Ahmed
Introducing: The Ultimate Easy Peasy Guide to Dependable DPIAs by Jamal Ahmed, a previous "Data Diva" Talks Privacy Podcast alumni.?Data Privacy isn’t just about protecting information; it’s about safeguarding trust, ensuring ethical responsibility, and preserving brand reputation.
Are you finding it challenging to navigate the complex world of Data Protection Impact Assessments (DPIAs)? Worry no more!
Jamal has developed the guide that takes the mystery out of DPIAs and puts YOU in control. Welcome to The Ultimate Easy Peasy Guide to Dependable DPIAs, your comprehensive guide to a confident data protection strategy.
Use the discount code “DataDiva” to get 70% off this digital product.
See our recently featured five-minute videos on Data Privacy from The Data Diva
Do you want to see more original video content on emerging Data Privacy topics? Subscribe to our YouTube channel to get notified about each week's new video.
Many thanks to the press organizations and reporters who seek my commentary on important events around Data Privacy. Also, here are links to some of my other media collaborations. Here is a collection of a few of my 2023-2024 media mentions and collaborations:
Please see our website media mention section for a full list of media mentions.
Need a Keynote Speaker on "Data Privacy", Data Protection, and Technology issues? View our keynote speaker page for popular talks and topics. Ready to speak to "The Data Diva" about your speaking event? Fill out our speaker request form and Schedule a call now.
Do you need more Data Diva Events?
Data Diva Media is a media production operation providing?world-class video and podcast editing services.
Our Media Services include:
Ready to start your media project with "Data Diva" Media? Visit our Data Diva Media Website Page for more details and to schedule a meeting with the "Data Diva" Talks Privacy Podcast
Our LinkTree
CEO @ Jatheon | Why not archive all your information forever? ??
9 个月Truth, Debbie. The more unnecessary data organizations collect, the bigger the risk for both people and these organizations.
Autodidacte ? Chargé d'intelligence économique ? AI hobbyist ethicist - ISO42001 ? Polymathe ? éditorialiste & Veille stratégique - Times of AI ? Techno-optimiste ?
9 个月AI Muse? Grenoble
Data Girl and Friends | Digital Defender Parent | Empower Young Minds with Online Safety and AI Awareness
9 个月Thanks Debbie Reynolds! I didn't realize that authorities are starting to use the masses of data companies collect against them but I love it, especially in the example you gave of children clearly being in a place they shouldn't be.
Team Builder, Startup Cofounder and App Store Inventor
9 个月another boat load of heavy hitting advice, practical action items and information to better understand! an act of generosity!