Why we should embrace GDPR

The General Data Protection Regulation due to come into force next May should be regarded as the biggest hint yet for companies to reshape themselves for the digital world - aligning with The 10 Principles of Open Business.

Rather than fear at the number of sticking-plasters that need to be applied to support business as usual, forward-thinking companies will be taking the hint; data ownership is no substitute for genuine relationships.

That's the real message of GDPR - stop hoarding data to exploit customers.
In fact it's very difficult to see in a post GDPR-world why any customer would choose to allow a company to retain their data unless (and they have to be transparent about this) their is a genuine and positive partnership defined in their data notices.

Of course companies can (and many should) spend time, trouble and money ensuring compliance by (for example);

• Appointing a Data Protection Officer
• Reviewing each and every business process to ensure data protection is designed in
• Ensuring default privacy settings are set to high at each and every touch point
• Making it crystal clear exactly what data is being stored about whom, for how long and for what purpose - at every relevant interface
• Providing complete data portability - enabling users to withdraw access to all of their data and take it with them, at any point they choose,
• Devising Data Protection Impact Assessments
• Developing new processes to respond to requests for data and complaints about use
• Preparing to defend your use of logarithms for the decisions they deliver and offers they make or do not make

With up to 4% of last year's global revenue at stake as a sanction, there's much sense in taking this very seriously indeed. However, much of the data storage, privacy and permissions issues become much less onerous if you shift  the nature of your relationship with customers - and in doing so your relationship with their data.

Start to think of data as less a substitute for a relationship - and more an enabler for building one through genuine engagement. 

The start point requires three simple steps:

1. Understand the role of the customer in your business: (Hint - the passive consumer no longer exists, if they ever did).

• Where are the benefits in partnering; how far into the centre of the organisation can customers be brought
• How do you score for trust?
• Set a new goal state, roadmap for organisational change and supporting technology architecture

2. Why do you want to know more about your customers - what is driving you to build engagement?

• Is it to build trust?
• Get direct insight?
• Get help in decision making?
• Find savvy co-creators?
• Deliver a better experience, better serving need?

3. Now you should devise a customer data strategy;

• What data could be available to you – what can you learn from customer interactions? 
• What value for third parties and customers could that generate 
• Consider role of Decisioning (NBA)

By now you have a handle on what you want to achieve with customer data and how you are going to 'sell' that to customers in a way they will see as a fair exchange.

And that's a far better place to start from when working towards compliance with GDPR.y 2017

*This is always the case with my writing - but given the legal complexities of the GDPR I want to make it even more clear than usual - these views are mine and mine only and should not be assumed to represent those of my employer.

Don't let Prism wreck the network - it belongs to you

The row over the ultimate data hoover that is Prism (catch up here with a quick guide of what it is and how legal or otherwise it may be) is, as usual, being characterised as a two-sided affair with battle lines drawn.
On one side we have our Governments - those who would protect us from whatever it is we are expected to live in terror of right now.
On the other are those who feel invaded and violated - that their data is the representation of their sovereign self - the protectors of our privacy.
Now, I'm not too concerned about the privacy thing.
I wrote in 2010:

"Privacy seeks to obscure truth. Often to an individual's personal benefit. Perhaps we are just going to have to get used to living in a state of truth - with the wider - by necessity less personal - benefits that may offer." (... the impact of an information revolution on privacy)

I've long argued that privacy is a relatively new and less-than-normal state for humankind. It's something that emerged when we started sleeping in separate rooms away from the cattle - around about the invention of the fireplace and chimney (read Bill Bryson At Home - A short History of Private Life - for more on that. It's a concept that is only some 500-600 years old. Culturally significant but in no way some kind of human need or even desire.
And I'm not big on kow-towing to terror either. Neither argument does it for me.
What I'm really concerned about in the Prism affair is that the fear of sharing it could generate could deliver a blow to the self-organising, open future we are on course for.
To self organise (the single biggest disruption to the centrally-organised status quo) we must express our meta data. That is, we must share what we think, as widely with each other, as often as possible. This is ultimately how we find each other at time of greatest need - how we find people who are seeking to solve the same problem as we are - right now.
One extra node on your network doubles its value - as I'm keen on repeating. We add each other through discovery.
So, if there's any conspiracy theory at play here that could cause us a collective problem, it's the one that's making you think twice about sharing, the one making you consider disconnecting and stopping sharing.
The centre would love that.
Stand firm. The network needs you.