Downloaded 33 times
Uploaded byiCrossing
Your Big Data Opportunity
The document discusses the European Commission's proposed draft data protection regulation, highlighting significant changes, such as stricter consent requirements for direct marketing and enhanced rights for individuals, including the right to be forgotten. It emphasizes the challenges these regulations pose for businesses, particularly in digital marketing, as well as the obligations for data breach notifications and compliance. The document also touches on the implications of the Privacy and Electronic Communications Regulations (PECR) regarding cookie usage and outlines the potential negative impact on SMEs and innovation.
More Related Content
Similar to Your Big Data Opportunity
Your Big Data Opportunity
- 1. : #iCCS12
- 2.
- 3. Source: Big DataInsight Group – Industry Trends Report March 2012 State of Play
- 4. Source: Big DataInsight Group – Industry Trends Report March 2012 State of Play
- 10.
- 11.
- 12.
- 17.
- 18.
- 20. iCrossing UK Client Summit Thursday, 17th May 2012 Caroline Roberts Director of Public Affairs
- 21. The Direct MarketingAssociation • Europe’s largest national trade association in the marketing and communications sector • 920 corporate members –suppliers, agencies and clients who use dm • Client members include major blue chip UK (or operating in UK) companies, e.g. Readers Digest, News International, Barclays Bank, American Airlines, Virgin Media, Save the Children, British Gas, the main political parties, Microsoft, Marks & Spencer PLC • Supplier members include list brokers, email marketers, mobile marketers, social media, mailing and fulfilment houses, creative agencies, etc. • Services include: lobbying; legal advice; events; research; self- regulatory mechanisms; business development opportunities
- 22. Two major piecesof legislation on data use • EU Draft Data Protection Regulation – A proposal from the European Commission to update EU Directive 95/46/EC now beginning its passage through EU institutions • Privacy and Electronic Communications Regulations 2011 – EU Directive 2009/136/EC – Enacted 26th May 2011 – Will be enforced from 26th May 2012
- 23. Draft EU DataProtection Regulation • Where are we now • Background to the proposal • Key points in the proposed Regulation • Influencing the legislation
- 24. Where are wenow? • European Commission published draft Data Protection Regulation 25th January 2012 • Consultation process since May 2009 • Ministry of Justice Call for Evidence Jan-Feb 2012 • Jan 2012 – 2014?? – European legislative process • ?? 2016 – New Regulation in force
- 25. Why revise thelaw now? 1995 European Directive ( implemented into UK by 1998 Data Protection Act ) showing its age due to: 1) Law doesn’t take account of new technologies – and more complex information networks: interconnected data rather than held in databases 2) Lack of common European law and differences in national implementation 3) Consumer concern over privacy – high profile data security breaches, etc.
- 26. Key points inthe draft Regulation Opt-in and opt–out - obtaining consent • General rule for direct marketing – “explicit consent by clear statement or affirmative action” . Much more prescriptive. • Possible legitimate interests exemption ? • Legacy databases – what about data collected under current law? • At worst, if consent cannot be proved, whole databases could be scrapped. • At odds with existing rules on voice calls, email and SMS marketing • Would almost certainly lead to requirements for increased opt-in mechanisms Increased burdens on business Decrease in functionality of many consumer- friendly services
- 27. Key points inthe draft Regulation IP addresses and cookies • Definition of personal data extended so could cover some IP addresses and cookies • But IP addresses identify a device not an individual + some IPs are general, e.g. in a library or internet cafe • Huge implications for digital marketers • Web analytics & profiling made much more difficult, if not impossible • Interaction with new cookie rules
- 28. Key points inthe draft Regulation The right to be forgotten • Right for individuals to request organisations to delete any information held on them • Drafted with social media in mind – but goes beyond this • For dm, there is an obligation to suppress, rather than delete, i.e. “need to keep to remember to forget”. • Also problem of information which has already been passed on to third parties • Possibility of misleading consumers by raising unrealistic expectations • Need to strike more reasonable balance between consumer expectations and limiting use of data for legitimate business purposes. • A possibility that dm might be OK - but this needs to be clarified
- 29. Key points inthe draft Regulation Data Breach notification • Every organisation that suffers a data security breach would have to notify Information Commissioner’s Office and the individuals concerned within 24 hours • Not always obvious if there has been a breach or how extensive it is • Problem of notification fatigue, so individuals could fail to take action when it is necessary to do so. • No threshold level specified.
- 30. Key points inthe draft Regulation Subject Access Requests • Data subjects to be able to request full information on data held on them free of any charge • Currently can levy a £10 fee – doesn’t cover cost but deters time-wasters, frivolous or vexatious requests. • Costs organisations £50 million p.a. now to meet SARs • Proposal that can provide data in electronic form if data subject agrees to this
- 31. Key points inthe draft Regulation - Marketing to Children • General rule – parental consent required for under 18’s • Exception for online marketing to children under age of 13 • No flexibility – a risk-based approach would be better.
- 32. Key points inthe draft Regulation Compliance obligations • Data protection obligations now shared between agencies and clients, for example if holding client’s database • Appointment of designated Data Protection Officer for organisations with 250+ staff • Accountability/Privacy by Design/Privacy by Default • Increase in fines/sanctions – in stages, of up to 2% of global turnover or 1 million euros • International transfers of data outside EEA – law would apply to any processing of data or EU citizens. Not always possible to tell.
- 33. Key points inthe draft Regulation Further delegated legislation • Much of the detail of the Regulation will be implemented through additional delegated legislation – some 45 Delegated Acts are mentioned. • Details of this secondary legislation will not be clear until Regulation passed • These areas of secondary legislation will include: • powers to specify further procedures • technical standards for Privacy by Design/Default • specification of lawful processing condition • additional responsibilities for national data protection authorities; etc. • European Commission will be taking significant powers to itself away from the national authorities - raises serious issues of subsidiarity and accountability
- 34. EU Draft DataProtection Regulation - DMA View • DMA welcomes the Commission’s aim to reduce red tape and simplify bureaucracy – but proposals do not achieve that: overly strict, bureaucratic and unworkable • Hard to say how Commission’s estimate of 2.3 billion euros saving to businesses was calculated • Needs to be a fair balance between privacy and legitimate business interests • Current proposals will stifle innovation, add considerably to business costs and place unnecessary obstacle to e- commerce jobs growth • Will be particularly harmful to SMEs
- 35. Influencing the legislation • DMA is: – Lobbying UK Ministers in MoJ, DCMS, BIS who represent UK in EU Council of Ministers – now meeting in Working Group – Leading UK Data Industry Group response to the proposed legislation & participating in CBI Group on Data – Working with Federation of European Direct and Interactive Marketing Associations (FEDMA) in Brussels leading collective EU dm effort – Lobbying MEPs – particularly on Civil Liberties Committee, and Internal Market and Trade Committees – Working with US DMA to influence US administration, FTC,etc. – Key research on consumer attitudes to privacy and on the economic value of the dm industry
- 36. PECR – thenew cookies law The law has been in place since 2003 • required anyone using cookies to provide clear information about them and provide opt-out if desired. • The 2011 Regulations dramatically tighten the rules • now, anyone depositing cookies is required not just to provide clear information about them but also to obtain consent from users to store a cookie on their device. • New ICO powers to issue monetary penalty notices of up to a maximum of £500,000 for serious breaches • The EU's revised PEC Directive came into force on 26 May 2011 but ICO said would not fully enforce for one year to give business time to prepare.
- 37. The law doesn’tjust cover cookies • The law covers all technologies which store information in the “terminal equipment" of a user, and that includes so-called Flash cookies (Locally Stored Objects), HTML5 Local Storage, web beacons or bugs…and more Two exemptions from consent requirement • “use of cookie is for the sole purpose of carrying out the transmission of a communication over an electronic communications network” • “cookies that are strictly necessary for the provision of a service” e.g. internet banking, online shopping carts, website log-ins
- 38. The ICO’s advice 2 sets of Guidance on www.ico.gov.uk • “It is not enough simply to continue to comply with the2003 requirement to tell users about cookies and allow them to opt out. The law has changed and whatever solution an organisation implements has to do more than comply with the previous requirements in this area.” • “But, come 26 May…. when our 12 month grace period ends, there will not be a wave of knee-jerk formal enforcement actions taken against those who are not yet compliant but are trying to get there.”
- 39. How to complywith the new rules Follow the ICO’s guidelines: 1. Check what type of cookies and similar technologies you use and how you use them. 2. Assess how intrusive your use of cookies is. 3. Decide what solution to obtain consent will be best in your circumstances.
- 40. In conclusion • Issues surrounding implementation of regulation for email and mobile marketing still a grey area. • DMA Countdown to Cookie Compliance – 10 Steps – Guide for Email marketers – Guide for Mobile marketers • ICO guidance + will be issuing more in next 2 weeks • ICC Guide on cookies issued this month • Getting it wrong could result in adverse commercial impact – and regulatory intervention? • The rules of engagement online WILL change – how is up to you.
- 42. Aren’t we therealready? op·por·tu·ni·ty noun, plural op·por·tu·ni·ties. 1. an appropriate or favorable time or occasion: Their meeting afforded an opportunity to exchange views. 2. a situation or condition favorable for attainment of a goal. 3. a good position, chance, or prospect, as for advancement or success.
- 43. Media buying haschanged. Inventory booked far in advanced. Post campaign optimisation. Audience defined by placement. Huge wastage… …and search took all the budgets.
- 44. The clearest displayof intent? Users displaying intent, in real- time. Highly targeted, precise distribution system. Only reach users who want to find you brand. Massive efficiency. …and data became personal and real-time.
- 45. Data is alreadyat the heart of media buying. Technology has changed the way we buy media. Data has changed the way we buy media.
- 46. Scale audience fromyour own customers. 3rd Party Data 3rd party pixels
- 47. It’s the resultsthat matter… The Value of data lies in the improvements in ROI it can provide but… A lack of transparency & standards. Removing the “noise” is difficult. Data is expensive and available to everybody Insight sits with media buyers. …raises the question of “how much value does 3rd party data bring to my business?”
- 48. IT’S GOOD, BUT ITCOULD BE BETTER.
- 49. Insight should beat the heart of your media buying. Exclusivity of data is key. Blend 1st party and 3rd party sources to see your brands audience. Look for people not cookies. It is your audience.
- 50. DMP is theemerging hub for digital marketing
- 51. But the opportunityfor brands is significant The Audience Management Platform For the digital age Social campaigns Facebook SEO Social Twitter campaigns data Youtube Spot cable 3rd TV buying Intent data Device data party Direct Look-a-likes data marketing Call center systems Attribution modeling Brand Standards/ Data Security Governance Source: Forrester Research, Inc.
- 52. The Red Arilplatform provides a full solution… Integrated Data Portfolio Marketing Platforms Website Data • Ad Servers • Inventory/Yield Optimizers Mobile Data • Content Management • Site Personalization Digital Data • Creative Optimization e.g. Email, Search • Ad Networks/DSPs Offline Data • Mobile Networks e.g. CRM, POS Analytic & Insight • Ad Exchanges/SSPs Social & Life Data • Data warehouses e.g. Registration, etc. Data Monetization 3rd Party Data • Data Exchange • Private Exchanges Sales Marketing Ops
- 53. Inside the sausagefactory Client Application Interface Red Aril Self-Service Full-Service Audience Management Data Analysis Real–Time Processing Management Audience Development Data Data Rights Audience Verification Data Inventory Closed-Loop Optimization Audience Optimization Data Protection Event Classification System Audience Extension Browser API Batch Custom Data Integration 1st, 2nd, Data Online, Offline (CRM) 3rd – Integration
- 54. The Red Arilarchitecture User Interfaces, Systems, Platforms Media Execution DATA DELIVERY LAYER API Server-to-Server Browser Based REPORTING & ANALYTICS AUDIENCE DISTRIBUTION & Attribution Data Usage DECISIONING ENGINE DATA PROCESSING & AGGREGATION AUDIENCE & MEDIA MODELING Data Cleansing Data Normalization Segmentation Qualification INTELLIGENT DATA DISTRIBUTION LAYER DATA RIGHTS MANAGEMENT DATA INTEGRATION LAYER Relational DB API / Native Browser Based Server-to-Server Log Connector Connectors Connectors 1st Party Data 3rd Party Data Website Offline CRM Models Online Data Publisher Offline Data Providers Data Providers Search Email Ad Server
- 55. Functionality – Depth,Breadth, Analytics End-to-end solution: Data – Audience – Extension Complete data portfolio control – 1st, 2nd, 3rd party data – all together Real-time, user-level, audience modeling – predictive extensions
- 56. Get the rightmessage to the right person • Demographic Markers • Psychographic Markers • Media Exposures • Search History • Site Behavior Audiences • Social Graph Context • Competitors • Brands • Devices Content • Channels • Socio-economics • Media • Categories • Semantics • Lifespan • User Generated
- 57.
- 61. Old World New World
- 62. Over to youfor any more questions…