A presentation to the Ctrl-Shift conference for MesInfos, the French equivalent of the Midata initiative to encourage businesses to make available to customers their own personal transaction data. Explained further here: http://sdj-thefineprint.blogspot.co.uk/2012/04/business-implications-of-privacy-law.html

1. Business Implications
of Evolutions in Privacy Law
Simon Deane-Johns
24 April 2012

2. Businesses must…
• Develop privacy as a core competency
• Enable consumers to share transaction data
• Solve two identity problems cost effectively

3. Develop Privacy as a Core Competency
• No longer a direct marketing issue - a very technical, broad
business issue that impacts competitive advantage
– Requires "a socio-legal construct, not a technical fix " (O’Hara)
• EC’s proposed General *Data Protection?+ Regulation
– the "right to be forgotten"
– "data portability"
– "data protection by design and by default"
– the logging/reporting of personal data security breaches
– personal data processing impact assessments
– prior consultation/regulatory consent for risky processing
– requirements for enhanced internal controls
– numerous enforcement and compliance burdens
– the obligation to appoint a data protection officer

4. Enable Consumer Data Sharing
• Data sharing is critical to consumer control
• We object to the aggregation of our personal data by a
single organisation, not necessarily the disclosure of
discrete items
• Information is power – key to removing asymmetry in
retail transactions
• Boosts usability, convenience, efficiency… and loyalty

5. Solve Two Identity Problems
• Enable consumers to simply, conveniently and
efficiently prove our identities in the course of our day-
to-day activities.
– Identity is dynamic, not static
– We are distinguishable by our behaviours and the data
they generate
• Ensure the means of proof is not vulnerable to being
hacked or guessed.
– Proof based on some static data, but also behavioural data
– Identity should be verified by reference to one-off
behavioural datasets that can be discarded

6. Thank You
Twitter: @sdjohns
Blog: Pragmatist
http://sdj-pragmatist.blogspot.com/
Blawg: The Fine Print
http:// sdj-thefineprint.blogspot.com
LinkedIn:
http://uk.linkedin.com/in/simondeanejohns