THE CULTURE CLUB: DEVELOPING A PRIVACY CULTURE THROUGH EFFECTIVE TRAINING AND AWARENESS

CD: Could you outline some of the key challenges that commonly arise when implementing a global privacy programme?

Lantree: Finding common ground on a global stage can be very difficult. With standards for key issues such as data access and retention periods, among others, varying from region-to-region, it is often unclear where to set the bar. Communication across multiple languages and cultural nuances is another common challenge. Interpretation of values, words and systems will differ widely in each country. Even the best translation tools can still lead to nuances in meaning being ‘lost in translation’. Teams need to be prepared for this, and work with key stakeholders and experts with knowledge about the unique aspects of each jurisdiction in order to determine a common threshold and communications strategy that makes sense companywide.

Westlake: With most people now owning a smartphone, as well as multiple other devices such as tablets, laptops and smartwatches, the average person is now much more aware of the risk of privacy breaches than ever before. A global privacy programme must not only cover local and international regulations, but also public opinion to provide investors, customers and employees with the confidence that their data, privacy and online security is secure. With increasing scrutiny into data protection, information security teams need to engage their employees to ensure they understand the risks of data leaks, as well as how to prevent them. Employee negligence is one of the top data risk factors for most organisations and they are a common entry point in data breaches. Investment and prevention measures are only effective if employees are informed, vigilant and understand their responsibility in protecting data in their organisations.

Apr-Jun 2020 issue

BT

FTI