The document discusses opportunities for the retail sector under the EU's General Data Protection Regulation (GDPR). It notes that GDPR aims to protect individuals' data and give them more control over how organizations collect and use their personal information. The document outlines some key rights for individuals under GDPR, such as the right to access their data and require data portability. It also discusses results from surveys finding many shoppers would use these new rights and feel comfortable sharing some data for benefits like personalized offers. The conclusion encourages retailers to view GDPR compliance as an opportunity to build trust with shoppers and develop innovative data-driven services.

1. @peterkwells @odihq
GDPR: opportunities for retail

2. @peterkwells @odihq
Our vision is for people, organisations
and communities to use data to make
better decisions and be protected
from the harmful impacts of its
inappropriate use and distribution.

3. @peterkwells @odihq
(personal) data is
widely used in the retail
sector

4. GDPR
@peterkwells @odihq image from: https://www.document.no/2017/03/08/problemet-er-en-1400-ar-gammel-software/

5. GDPR - the facts
‘thinking that GDPR is about crippling
financial punishment misses the point
[...] it’s about putting the consumer
and citizen first’
Elizabeth Denham, ICO
@peterkwells @odihq

6. Who would you trust with data about you?
Source: YouGov poll of UK adults for ODI on 28-29/11/2017. https://theodi.org/article/odi-survey-reveals-british-consumer-
attitudes-to-sharing-personal-data/@peterkwells @odihq

7. How comfortable are shoppers with orgs collecting
data?
@peterkwells @odihq
Shoppers’ level of comfort with different organisations collecting data about them
Source: ODI / Britain Thinks https://theodi.org/article/the-eu-general-data-protection-regulation-opportunities-for-grocery-retail/

8. GDPR - the facts
data access grants
individuals
access to data
that an
organisation
holds about
them
no a £10 charge has been
removed: information must be
provided free of charge for the
first copy, unless the request is
‘manifestly unfounded’ or
repetitive. The data must be
provided without undue
delay, generally within one
month after receiving the
request for data
right description new? key changes and
elements
@peterkwells @odihq

9. GDPR - the facts
data
portability
allows an
individual to
obtain a
copy of personal
data for reuse
across other
services
yes it will only apply in specific
situations where data was
processed automatically, and
the justification for processing
the data was that the individual
had consented to that use,
such as loyalty-card data
right description new? key changes and
elements
@peterkwells @odihq

10. GDPR - the facts
to be
informed
(aka
explanation)
organisations
must provide
individuals with
fair processing
information about
the use of
personal data
about them,
primarily
through privacy
notices
yes the information provided must
be concise, transparent and
written in clear and plain
language
right description new? key changes and
elements
@peterkwells @odihq

11. GDPR - will retail shoppers use these rights?
@peterkwells @odihq
Percentage of all respondents who shop at least once a fortnight on the likelihood that they will use their right to data access and portability
Source: ODI / Britain Thinks https://theodi.org/article/the-eu-general-data-protection-regulation-opportunities-for-grocery-retail/

12. Third parties can use GDPR
rights to deliver services to
shoppers
@peterkwells @odihq

13. When shoppers felt happy sharing data about them
@peterkwells @odihq
When respondents felt happy sharing data about them
Source: ODI / Britain Thinks https://theodi.org/article/the-eu-general-data-protection-regulation-opportunities-for-grocery-retail/

14. Competitive, complementary
and unrelated services
@peterkwells @odihq https://theodi.org/article/will-gdpr-and-data-portability-support-innovation/

15. Portable shopping list
@peterkwells @odihq https://newdigitalrights.projectsbyif.com/portable-shopping-list

16. @peterkwells @odihq image from: https://www.document.no/2017/03/08/problemet-er-en-1400-ar-gammel-software/

17. GDPR and data portability is
both a risk to your existing
services, and an opportunity
to create new ones that meet
your customer's needs
@peterkwells @odihq

18. @peterkwells @odihq
Turn GDPR compliance into opportunity

19. @peterkwells @odihq
Build trust by communicating
with shoppers

20. @peterkwells @odihq
Create a foundation for data-
enabled innovation

21. @peterkwells @odihq
Grow a strategic programme
across the UK grocery retail
sector

22. @peterkwells @odihq
Other sectors show examples
https://theodi.org/topic/banking-and-finance/
https://www.openactive.io/

23. @peterkwells @odihq
Thank you :)
peter.wells@theodi.org

24. @peterkwells @odihq