Symantec - State of European Data Privacy
•Télécharger en tant que PPTX, PDF•
3 j'aime•10,336 vues
Symantec commissioned independent research firm, Vanson Bourne, to interview 900 business decision-makers and IT decision-makers in the UK, Germany and France during September 2016. To qualify for the research the businesses decision makers and IT decision-makers organisations had to have at least 50 employees. Respondents were asked about the General Data Protection Regulation (GDPR) during interviews conducted during September 2016. Respondents were equally balanced between countries and were interviewed across all private and public sectors
Recommandé
Recommandé
Contenu connexe
En vedette
En vedette (18)
Similaire à Symantec - State of European Data Privacy
Similaire à Symantec - State of European Data Privacy (20)
Plus de Symantec
Plus de Symantec (20)
Dernier
Dernier (20)
Symantec - State of European Data Privacy
- 1. Symantec State of European Data Privacy Symantec EMEA PR October 2016
- 2. SYMANTEC STATE OF EUROPEAN DATA PRIVACY 2 Copyright © 2016 Symantec Corporation CONTENTS --------------------------------------------------------------------------------------------------------------------------------------------------------- 3 Methodology --------------------------------------------------------------------------------------------------------------------------------------------------------- 4 Regulatory Awareness --------------------------------------------------------------------------------------------------------------------------------------------------------- 7 A Consumer Disconnect --------------------------------------------------------------------------------------------------------------------------------------------------------- 10 Cultural preparedness --------------------------------------------------------------------------------------------------------------------------------------------------------- 13 Technical readiness & The Right to Be Forgotten ---------------------------------------------------------------------------------------------------------------------------------------------------------
- 3. METHODOLOGY • Symantec commissioned independent research firm, Vanson Bourne, to interview 900 business decision-makers and IT decision-makers in the UK, Germany and France during September 2016 • To qualify for the research the businesses decision makers and IT decision-makers organisations had to have at least 50 employees • Respondents were asked about the General Data Protection Regulation (GDPR) during interviews conducted during September 2016 • Respondents were equally balanced between countries and were interviewed across all private and public sectors 3 Copyright © 2014 Symantec Corporation UK GERMANY FRANCE 300 Margin of Error =+/- 5% margin 300 Margin of Error =+/- 5% margin 300 Margin of Error =+/- 5% margin Copyright © 2016 Symantec Corporation
- 5. BUSINESSES ARE NOT ONLY UNDERPREPARED FOR THE GDPR – THEY ARE UNDERPREPARING. Copyright © 2014 Symantec Corporation 57% 53% 48% 43% 42% 42% 33% 28% 24% 2% 0% Regulations applying to all EU member states Gaining consent for data collection Reporting data breaches The requirement of a Data Protection Officer (DPO) Protecting data in an ethical way Providing information on retention time for personal data Using data in an ethical way The right to be forgotten for citizens The ability for individuals to easily transfer their data files from one service provider to another None of the above *Other (please specify) Elements respondents believe to be part of the GDPR Have concerns about ability to become compliant 9 in 10 Do not fully understand GDPR 96% Believe their organization is fully prepared for GDPR 26% Consider compliance at top priority in the next two years 22% Copyright © 2016 Symantec Corporation
- 6. STARK LACK OF CONFIDENCE IN MEETING MAY 2018 DEADLINE REVEALED Copyright © 2014 Symantec Corporation 6 21% 48% 20% 3% 7% Confidence of compliance by May 2018 Yes, we are already compliant Yes, we will be fully compliant by May 2018 Yes, we will be partly compliant by May 2018 No, not at all compliant Don’t know Believe it is even possible to become fully compliant with the GDPR 1 in 5 Said their organisation will not be compliant at all, or only partly compliant, by 2018 23% Believe that while some company departments will be able to comply - others will not 49% Copyright © 2016 Symantec Corporation
- 8. ACCORDING TO BUSINESSES, CONSUMERS DON’T CONSIDER DATA SECURITY & PRIVACY A TOP PRIORITY… Copyright © 2014 Symantec Corporation 8 73% 60% 56% 29% 26% 23% 16% 13% 27% 40% 44% 71% 74% 77% 84% 87% Quality of products Good customer service Cost of products Track record of data security Track record of data privacy Organisation's ethical stance The innovativeness of the organisation Whether they have an existing relationship Business perception of consumer priorities Top three priority Not a top three priority Admit customers ask about data security during transactions 36% Do not think an organisation’s privacy track record is a top three consideration for customers 74% Do not believe their organisation takes an ethical approach to securing and protecting data 35% Copyright © 2016 Symantec Corporation
- 9. Copyright © 2014 Symantec Corporation 9 Of respondents are not confident they completely meet customers’ data security expectations 55% 88% 86% 82% 69% 56% 47% Symantec State of Privacy: Importance of factors when choosing a company to shop with or use …YET CONSUMERS RANK IT #1, SHOWING BUSINESSES ARE OUT OF TOUCH Do not believe their organisation takes an ethical approach to securing and protecting data. 45% Copyright © 2016 Symantec Corporation
- 11. BUSINESSES ARE UNDERESTIMATING THE CULTURAL CHANGES THEY NEED TO MAKE AHEAD OF MAY 2018 Copyright © 2014 Symantec Corporation 11 4% 9% 6% 7% 11% 13% Employee personal information Customer information (personal) Customer information (including payment details) Company records Information on competitors Market data Companies where all employees can access the following information Say all staff can access customers’ payment details 6% Say all employees can access customers’ personal information 1 in 10 Believe everyone in the organisation has a responsibility to ensure data is protected 14% Copyright © 2016 Symantec Corporation
- 12. PARTICUARLY GIVEN THE WIDE REACHING ACCESS EMPLOYEES HAVE TO PERSONAL INFORMATION Copyright © 2014 Symantec Corporation 12 47% 42% 12% 39% 48% 13% Yes, it is a top priority Yes, it is a priority No, it is not a priority Respondents that believe managing and using data in an ethical way is a priority for their organisation Managing data in an ethical way Using data in an ethical way Said they would be increasing security training 45% Said managing data ethically is a top priority for their organisation 47% Are planning to completely overhaul their approach to security in response to the GDPR 27% Copyright © 2016 Symantec Corporation
- 13. Technical readiness & The Right to Be Forgotten
- 14. BUSINESSES ARE CONCERNED ABOUT THE COMPLEXITY OF PROCESSING DATA CORRECTLY Copyright © 2014 Symantec Corporation 14 Believe customers would exercise their right for data to be deleted 81% Say deleting customer data will be a challenge 9 in 10 Have already received requests to be forgotten 1 in 10 Currently do not have a system in place to forget a customer 60% 45% 42% 34% 33% 32% 25% 0% 7% 3% Challenges organisations face if customers ask to have their data modified or deleted Copyright © 2016 Symantec Corporation
- 15. Thank you! Copyright © 2014 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice. Copyright © 2014 Symantec Corporation 15 Copyright © 2016 Symantec Corporation Copyright © 2016 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for the informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information is this document is subject to change without notice.
Notes de l'éditeur
- Demographics Overview 900 IT decision makers and business decision makers were interviewed in September 2016: - Surveyed in the UK (300), France (300) and Germany (300) - To qualify for the research, respondents' organisations had to have at least 50 employees - Respondents were interviewed across all private and public sectors
- 96 per cent of companies still do not fully understand the European General Data Protection Regulation - every option presented in the survey is part of the GDPR, so when businesses did not tick all answers they showed that they do not understand the GDPR fully. 96 per cent of businesses did not tick all the options Nine in Ten (91 per cent) of respondents have concerns about their ability to become compliant Only 22 per cent of businesses consider compliance a top priority in the next two years Only 26 per cent of respondents believing their organisation is fully prepared for the GDPR
- There is a stark lack of confidence in meeting the May 2018 deadline which leaves businesses at risk of incurring significant fines Nearly a quarter (23 per cent) said their organisation will not be compliant at all, or only partly compliant, by 2018 Of this group, only a fifth (20 per cent) believe it is even possible to become fully compliant with the GDPR Nearly half (49 per cent) believe that while some company departments will be able to comply - others will not
- There is a stark lack of confidence in meeting the May 2018 deadline which leaves businesses at risk of incurring significant fines Nearly three quarters (74 per cent) of businesses do not think an organisation’s privacy track record is a top three consideration for customers when choosing who to do business Respondents admit customers ask about data security in more than a third (36 per cent) of transactions 35 per cent of respondents do not believe their organisation takes an ethical approach to securing and protecting data
- While businesses grapple to become compliant, they remain out of touch with consumer expectations when it comes to data privacy and security. Nearly three quarters (74 per cent) of businesses do not think an organisation’s privacy track record is a top three consideration for customers when choosing who to do business, despite customers asking about data security in more than a third (36 per cent) of transactions. Equally concerning is the finding that 45 per cent of respondents do not believe their organisation takes an ethical approach to securing and protecting data. These results show there is a significant disconnect with consumer priorities. Symantec’s State of Privacy Report, found 88 per cent of European consumers see data security as the most important factor when choosing a company to do business with. In fact, 86 per cent see it as more important than product quality. Perhaps unsurprisingly then, the State of European Data Privacy found 55 per cent of businesses are not confident they completely meet customers’ data security expectations.
- Many businesses have not started working out the necessary organisation and cultural changes they need to make ahead of May 2018 Almost one in 10 (9 per cent) say all employees can access customers’ personal information Six per cent say all staff can access customers’ payment details Only 14 per cent believe everyone in the organisation has a responsibility to ensure data is protected
- With such wide reaching access to people’s personal information, businesses are underestimating the challenges they will face in managing this in line with the GDPR Less than half of those surveyed (47 per cent) said managing data ethically is a top priority for their organisation less than half again (45 per cent) said they would be increasing security training Only 27 per cent of businesses are planning to completely overhaul their approach to security in response to the GDPR
- The results show businesses will struggle when it comes to The Right To Be Forgotten Only 28 percent of IT and business decision makers realise the right to be forgotten is part of GDPR (see slide 4) 90 per cent of businesses say customers requesting their data be deleted will be a challenge for their organisation 81 per cent of respondents believe their customers would exercise their right for data to be deleted However, 60 per cent of businesses do not currently have a system in place that enables them to respond to these requests Only nine per cent of respondents have already received requests to be forgotten