DATA PROTECTION IN A
BIG DATA WORLD
Understanding privacy as a quality
characteristic of information, and how to
deliver it as a value proposition
Some Numbers
80%
Users can be identified by when
and how movies are rated.
(Narayaan & Shmatikov, 2008)
Some Numbers
Analysis of anonymous Facebook Likes…
Discriminated between homosexual and heterosexual men
88%
Distinguished between African Americans and Caucasian
Americans
95%
85%
Identified Republican vs Democrat
All categories of “Sensitive Personal Data” under EU law and Privacy
laws of other regions…
(Research by Cambridge University & Microsoft)
http://dx.doi.org/10.1073/pnas.1218772110
Some Numbers
72
http://dlapiperdataprotection.com/#handbook/world-map-section
Number of countries currently with a general Data Privacy/Data Protection
law mapped to EU or OECD standards
Note: EU Data Protection Regulation will require non EU organisations processing
data about EU Citizens to comply with EU rules.
Some Numbers
$100 million
The amount of seed funding given by Bill & Melinda
Gates Foundation to inBloom, which is shutting down
over privacy concerns
http://bits.blogs.nytimes.com/2014/04/21/inbloom-
student-data-repository-to-close
Some Numbers
$0.85 Billion
Potential cost to Google of a single breach of forthcoming
EU Data Protection Regulation (5% of Global turnover)
Three ways organisations innovate
Internally Driven
This is what we do and
we’re great!
We can do this and it will be
AWESOME!
Focus on finding/countering
objections to product
Customer Compelled
Ask the customer what will
make them happy
Ask what features they want
and what price they’ll pay
Exploring Experiences
Develop deep understanding
of what they do (or can’t) and
why
Creatively infer what
experiences/outcomes would
be most valuable
“OK, we’ll tweak it a bit”
“If we build it they will come” Consistently meeting expectations
A Value Delivery System Strategy
..We have a crack team of Big
Data analysts looking at it right
now..
Privacy as a Key Resulting Experience
The “Surprised Customer” Test
A Value Delivery System Strategy
Choose a Value
Proposition
Provide it Communicate it
Analyse the
market
Pick Key
Resulting
Outcomes
(a complete Value
Proposition)
For each Resulting Outcome how will we,
with others, cause customers to:
Actually experience it
Understand it & why
to believe it
Capabilities that will therefore be needed
Total Revenue and Cost  Profit, Business Case
Indirect Impacts (Other businesses, departments, project
timeframes etc.)
Privacy versus what?
How will privacy be
ensured in the
processing?
Data Governance,
information quality, data
masking, training,
“human factors”, infosec
Communication,
transparency, user
education, demonstrating
value
Business case for
organisation: cost and risk
of getting it wrong (brand
damage/penalties)
Linking DP, IQ, and IG
Data
Protection
Information
Governance
Information
Quality
A Value Delivery System Strategy
Choose a Value
Proposition
Provide it Communicate it
Analyse the
market
Pick Key
Resulting
Outcomes
(a complete Value
Proposition)
For each Resulting Outcome how will we,
with others, cause customers to:
Actually experience it
Understand it & why
to believe it
Capabilities that will therefore be needed
Total Revenue and Cost  Profit, Business Case
Indirect Impacts (Other businesses, departments, project
timeframes etc.)

Data Protection in Big Data world (EDW lighting talk)

  • 1.
    DATA PROTECTION INA BIG DATA WORLD Understanding privacy as a quality characteristic of information, and how to deliver it as a value proposition
  • 2.
    Some Numbers 80% Users canbe identified by when and how movies are rated. (Narayaan & Shmatikov, 2008)
  • 3.
    Some Numbers Analysis ofanonymous Facebook Likes… Discriminated between homosexual and heterosexual men 88% Distinguished between African Americans and Caucasian Americans 95% 85% Identified Republican vs Democrat All categories of “Sensitive Personal Data” under EU law and Privacy laws of other regions… (Research by Cambridge University & Microsoft) http://dx.doi.org/10.1073/pnas.1218772110
  • 4.
    Some Numbers 72 http://dlapiperdataprotection.com/#handbook/world-map-section Number ofcountries currently with a general Data Privacy/Data Protection law mapped to EU or OECD standards Note: EU Data Protection Regulation will require non EU organisations processing data about EU Citizens to comply with EU rules.
  • 5.
    Some Numbers $100 million Theamount of seed funding given by Bill & Melinda Gates Foundation to inBloom, which is shutting down over privacy concerns http://bits.blogs.nytimes.com/2014/04/21/inbloom- student-data-repository-to-close
  • 6.
    Some Numbers $0.85 Billion Potentialcost to Google of a single breach of forthcoming EU Data Protection Regulation (5% of Global turnover)
  • 7.
    Three ways organisationsinnovate Internally Driven This is what we do and we’re great! We can do this and it will be AWESOME! Focus on finding/countering objections to product Customer Compelled Ask the customer what will make them happy Ask what features they want and what price they’ll pay Exploring Experiences Develop deep understanding of what they do (or can’t) and why Creatively infer what experiences/outcomes would be most valuable “OK, we’ll tweak it a bit” “If we build it they will come” Consistently meeting expectations
  • 8.
    A Value DeliverySystem Strategy ..We have a crack team of Big Data analysts looking at it right now..
  • 9.
    Privacy as aKey Resulting Experience The “Surprised Customer” Test
  • 10.
    A Value DeliverySystem Strategy Choose a Value Proposition Provide it Communicate it Analyse the market Pick Key Resulting Outcomes (a complete Value Proposition) For each Resulting Outcome how will we, with others, cause customers to: Actually experience it Understand it & why to believe it Capabilities that will therefore be needed Total Revenue and Cost  Profit, Business Case Indirect Impacts (Other businesses, departments, project timeframes etc.) Privacy versus what? How will privacy be ensured in the processing? Data Governance, information quality, data masking, training, “human factors”, infosec Communication, transparency, user education, demonstrating value Business case for organisation: cost and risk of getting it wrong (brand damage/penalties)
  • 11.
    Linking DP, IQ,and IG Data Protection Information Governance Information Quality
  • 12.
    A Value DeliverySystem Strategy Choose a Value Proposition Provide it Communicate it Analyse the market Pick Key Resulting Outcomes (a complete Value Proposition) For each Resulting Outcome how will we, with others, cause customers to: Actually experience it Understand it & why to believe it Capabilities that will therefore be needed Total Revenue and Cost  Profit, Business Case Indirect Impacts (Other businesses, departments, project timeframes etc.)

Editor's Notes

  • #5 Examples of jurisdictions: EU, Singapore, Australia, South Africa 8 Key Principles in EU – first three are Data Governance, last 5 are Information Quality.
  • #11 An event or sequence of mental and/or physical events which happen in the customer’s life as a result of doing what some business proposes… An end-result consequence of this event for the customer… Which is a consequence that is either superior, equal, or inferior to any of the other potential resulting experiences that the customer might have had to choose from… …and has specific and measurable characteristics that allow you to objectively determine if the customer has experienced the events, consequence, and value compared to their alternatives.
  • #12 EU Data protection Regulation EXPLICITLY requires documented Data Governance and evidence of its effectiveness. Not having that will be an offence with 5% of global turn over penalty.
  • #13 Everything is Outcomes Privacy is as much a quality characteristic of information as accuracy or completeness Privacy means we need to engage the individual in our strategy Privacy for Big Data means maturing our perspective from an Internally Driven mode of thought to one that seeks to explore Key Resulting Experiences and the value trade-offs. Getting it wrong will get increasingly expensive 5% of Global Turnover under forthcoming EU Regulation. Will apply to non-EU orgs processing data of EU citizens