# How to navigate multiple data privacy regulatory frameworks
Author:  Pal Sinha, Barnali 
Author URL: https://financedigest.com/author/pal-sinha-barnali
Published: 2021-10-05
Category: TECHNOLOGY
Category URL: https://financedigest.com/category/technology
Meta Title: The Future of Privacy Regulations: Navigating the Evolving Landscape
Meta Description: Stay ahead of the game by embracing a privacy-centric mindset in the face of rapidly changing data regulations worldwide. Transform challenges into
URL: https://financedigest.com/how-to-navigate-multiple-data-privacy-regulatory-frameworkshtml

![undefined](https://prod.superblogcdn.com/site_cuid_cm5qst7v3003gwirgwqtxn8i8/images/privacy-sbi-300194586-1736837712674-compressed.jpg)

_By_ **_Aoife Sexton,_** _Chief Privacy Officer and Chief of Product Innovation at_ [_Trūata_](https://74n5c4m7.r.eu-west-1.awstrack.me/L0/https:%2F%2Fwww.truata.com%2F/2/0102017c4fb80e81-9760713e-ad0c-4424-8521-3c44ccab7949-000000/N02W3Z1xZ0rN2dVmX6Dh5f7kw8w=238)

![Aoife Sexton, Chief Privacy Officer and Chief of Product Innovation at Trūata](https://prod.superblogcdn.com/site_cuid_cm5qst7v3003gwirgwqtxn8i8/images/aoife-sexton-1736837712560-compressed.jpg)

Aoife Sexton, Chief Privacy Officer and Chief of Product Innovation, Trūata

As consumers become more aware of how modern digital technology can erode their privacy, governments are responding by introducing new laws at speed. It is a trend that shows no sign of abating. [Gartner predicts](https://74n5c4m7.r.eu-west-1.awstrack.me/L0/https:%2F%2Fwww.gartner.com%2Fen%2Fdocuments%2F4003504-hype-cycle-for-privacy-2021/1/0102017c4fb80e81-9760713e-ad0c-4424-8521-3c44ccab7949-000000/sktu5lX_eDzPlfoYBL5H4lGg_CU=238) that by 2023, 75% of people across the world will have their personal data protected by privacy regulations, compared to just 25% today.

The volume of [data privacy regulations for organisations](https://www.financedigest.com/avoiding-a-big-data-car-crash-how-to-organise-your-data-to-detect-fraudulent-claims.html "Avoiding a big data car crash: How to organise your data to detect fraudulent claims") to follow is challenging, especially for companies operating across multiple jurisdictions. However, businesses cannot risk becoming overwhelmed and paralysed into inaction if they wish to [gain the competitive edge and leverage the full value of the data](https://www.financedigest.com/shares-steady-dollar-gains-ahead-of-u-s-inflation-data.html "Shares steady, dollar gains ahead of U.S. inflation data") they have at their disposal. At the same time, compliance with privacy laws should not become a mere tick-box exercise. With digital trust at a tipping point, adopting a privacy-centric mindset is now a business imperative.

Our recent [Global Consumer State of Mind Report](https://74n5c4m7.r.eu-west-1.awstrack.me/L0/https:%2F%2Freport.truata.com%2Fglobal-consumer-state-of-mind-report-2021%2Fwelcome%2F/1/0102017c4fb80e81-9760713e-ad0c-4424-8521-3c44ccab7949-000000/jwpEPfpA6OkKgC3ngO4xJHbQz74=238) found that nearly half (48%) of consumers feel they have lost control over how much data is stored about them and 76% believe that the onus should be on companies to protect personal data. This presents an opportunity for [businesses to build bridges and retain trust by demonstrating the value](https://www.financedigest.com/keeping-data-connected-for-greater-business-value.html "Keeping Data Connected for Greater Business Value") they place on privacy. After all, 69% of [consumers said they are more likely to be loyal to a brand if they are seen to use their personal data](https://www.financedigest.com/navigating-consumer-data-in-the-finance-industry.html "NAVIGATING CONSUMER DATA IN THE FINANCE INDUSTRY") appropriately and responsibility. [Losing sight](https://www.financedigest.com/soccer-jittery-arsenal-losing-their-grip-with-summit-in-sight.html "Soccer-Jittery Arsenal losing their grip with summit in sight") of the human factor could become costly for companies in the long run.

**A shifting landscape**

Navigating the various international privacy regulations that have been introduced to [protect the data that businesses](https://www.financedigest.com/finalised-pan-european-data-protection-laws-set-the-new-standard-for-a-privacy-friendly-business-environment.html "Finalised Pan-European data protection laws set the new standard for a ‘privacy-friendly’ business environment") collect, process, store and share has never been more challenging. The key principles of transparency, [data retention and security](https://www.financedigest.com/2023-fintech-prediction-secure-and-private-data-usage-is-key.html "2023 FinTech Prediction: Secure and Private Data Usage is Key") are a constant presence, but the landscape continues to shift on almost a weekly basis.

From East to West, the privacy landscape is evolving at pace. More recently, the Chinese parliament has passed a new privacy law, which is due to come into effect on 1st November 2021. This law, the Personal Information Protection Law (PIPL) follows months of state input in tightening regulations on the collection of user data, which has already led to several popular apps being banned in the country. Along with the Cybersecurity Law and the [Data Security Law, PIPL will form an overarching framework to govern data protection](https://www.financedigest.com/4-steps-you-should-be-taking-to-protect-data.html "4 Steps You Should Be Taking To Protect Data"), cybersecurity and data security in China for years to come.

In the US, the [California Privacy Rights Act](https://74n5c4m7.r.eu-west-1.awstrack.me/L0/https:%2F%2Fwww.dataguidance.com%2Fsites%2Fdefault%2Ffiles%2Fonetrust_dataguidance_cpra_what_you_need_to_know_white_paper_2.pdf/1/0102017c4fb80e81-9760713e-ad0c-4424-8521-3c44ccab7949-000000/tMhqQTjlNcgv7xyWeU4YWtJh_lM=238) (CPRA) will become fully operative from 1st January 2023 and will apply to all personal information collected by businesses. This act will amend and supersede the current California Consumer [Privacy](https://www.financedigest.com/privacy-vs-security-is-the-cybersecurity-information-sharing-act-beneficial.html "PRIVACY VS SECURITY: IS THE CYBERSECURITY INFORMATION SHARING ACT BENEFICIAL?") Act (CCPA) and make various changes to the rules on the processing of sensitive personal information, in addition to amended consumer data rights.

This is not the end, though. Several other countries are expected to adopt new or amended regulations in the foreseeable future. In India, the [Personal Data Protection Bill (PDP),](https://74n5c4m7.r.eu-west-1.awstrack.me/L0/https:%2F%2Fen.wikipedia.org%2Fwiki%2FPersonal_Data_Protection_Bill,_2019/1/0102017c4fb80e81-9760713e-ad0c-4424-8521-3c44ccab7949-000000/dnqaOyvzVhON0tYrkl_D43-4_2E=238) is currently in front of parliament to approve. The bill includes [specific requirements on the use of individual data](https://www.financedigest.com/who-urges-china-to-share-specific-data-regularly-on-covid-situation.html "WHO urges China to share specific data regularly on COVID situation"), limitations on the purposes for which data can be processed by companies, and restrictions to ensure that only data necessary for providing a service to the individual in question is collected.

Then there is the EU’s [ePrivacy Regulation](https://74n5c4m7.r.eu-west-1.awstrack.me/L0/https:%2F%2Fcms.law%2Fen%2Fdeu%2Finsight%2Fe-privacy/1/0102017c4fb80e81-9760713e-ad0c-4424-8521-3c44ccab7949-000000/ZNBRkWSkTMArE8EkPd5srzpLf9Q=238) designed to regulate the use of electronic communications services. It was originally intended to [come into force](https://www.financedigest.com/the-glorious-twelfth-what-underwriters-should-be-doing-as-the-insurance-act-comes-into-force.html "The Glorious Twelfth: What Underwriters Should Be Doing As the Insurance Act Comes Into Force") in 2018 alongside the General Data Protection Regulation (GDPR) but has been delayed. A finalised text was agreed earlier this year by the EU Council that moves the ePrivacy Regulation into a new phase of negotiations amongst the various EU institutions. Nevertheless, the exact date it will come into force is still anyone’s guess.

**A proactive solution**

For organisations, the dramatic expansion of privacy regulations has meant [data protection has evolved from being a sole component of the Legal or Compliance functions in an organisation](https://www.financedigest.com/auditing-in-cyber-how-organisations-can-keep-track-of-their-data.html "AUDITING IN CYBER: HOW ORGANISATIONS CAN KEEP TRACK OF THEIR DATA") to now impacting a wide range of other functions which include IT, Marketing, Product, Security and Data Science.

Forward-thinking organisations are looking towards a range of privacy-enhancing technologies (PETs) so they can continue to leverage their data efficiently and effectively. When every transaction involving personal [data needs to be carefully reviewed against constantly evolving regulations, the need for robust, automated processes is essential to be able to move data strategies forward at pace while preserving the privacy](https://www.financedigest.com/tesla-to-warn-of-data-privacy-risk-from-car-security-cameras-in-germany.html "Tesla to warn of data privacy risk from car security cameras in Germany") rights of individuals.

Both pseudonymisation and anonymisation have come to the fore of commercial conversations surrounding PETs and effective approaches for retaining analytical utility while protecting personal privacy. However, while both have their place, there are important differences between the two.

With pseudonymisation, the [data is transformed such that no data can be attributed to a specific individual without the use of supplementary information](https://www.financedigest.com/what-is-a-virtual-data-room-unveil-the-essential-information-here.html "What is a Virtual Data Room? Unveil the Essential Information Here!"). This usually means that direct [identifiers within the data](https://www.financedigest.com/new-gleif-challenge-facility-extends-ability-to-trigger-updates-of-legal-entity-identifier-data-to-all-interested-parties.html "New GLEIF Challenge Facility Extends Ability to Trigger Updates of Legal Entity Identifier Data to All Interested Parties") are made illegible. However, with anonymisation, both direct and indirect identifiers are surfaced and usually transformed, since the end game is to ensure that the controller or another party, while using all means reasonably likely – such a singling out – cannot identify an individual person.

**A priority for boardrooms**

In today’s digital world, companies are collecting and [processing personal data](https://www.financedigest.com/reckon-introduces-link-to-bank-data-to-help-small-businesses-streamline-the-reconciliation-process.html "Reckon introduces link to bank data to help small businesses streamline the reconciliation process ") at an unprecedented level. In fact, as much as [44 times](https://74n5c4m7.r.eu-west-1.awstrack.me/L0/https:%2F%2Fanalyticsweek.com%2Fbig-data-facts%2F/1/0102017c4fb80e81-9760713e-ad0c-4424-8521-3c44ccab7949-000000/GOxsFmjTC9xqRYon_Ywpu-6G4as=238) the amount of data that was collected in 2009. Whilst keeping up with evolving privacy requirements is a challenge for businesses, especially when working across multiple jurisdictions, ensuring personal and sensitive [data is used appropriately and is held securely](https://www.financedigest.com/assurance-v-security-reassessing-responsibility-for-data-assurance.html "Assurance v Security: Reassessing Responsibility for Data Assurance") is becoming an enterprise-wide business priority. After all, the financial penalties for not doing so can be crippling. Already this summer, the Luxembourg data protection authority has handed out a [record €746 million (£640 million) penalty](https://74n5c4m7.r.eu-west-1.awstrack.me/L0/https:%2F%2Fwww.bloomberg.com%2Fnews%2Farticles%2F2021-07-30%2Famazon-given-record-888-million-eu-fine-for-data-privacy-breach/1/0102017c4fb80e81-9760713e-ad0c-4424-8521-3c44ccab7949-000000/bI1pYQN4tmsYvQpVP11gP_te034=238) and the Irish Data Protection Commission has handed out its [largest ever fine of €225 million (£193m)](https://74n5c4m7.r.eu-west-1.awstrack.me/L0/https:%2F%2Fwww.bbc.com%2Fnews%2Ftechnology-58422465/1/0102017c4fb80e81-9760713e-ad0c-4424-8521-3c44ccab7949-000000/UpkdyzFdd1B9v7Pj4P_e6UkO35Q=238). Fines, coupled with the erosion of consumer trust and reputational damage, are causing organisations to sit up and take notice.

In an effort to boost its privacy credentials, [Google has been outlining its vision](https://74n5c4m7.r.eu-west-1.awstrack.me/L0/https:%2F%2Fwww.cnbc.com%2F2021%2F03%2F03%2Fgoogle-says-it-wont-track-you-directly-in-the-future-as-it-phases-out-cookies.html/1/0102017c4fb80e81-9760713e-ad0c-4424-8521-3c44ccab7949-000000/3PP2bnLie-d8Z1xeFpfwGqWrJiY=238) for what a cookie-free web might look like. It now aims to [stop supporting all third-party cookies in Chrome by 2022 and says that in the future it will only use “privacy-preserving technologies” that rely on methods like anonymisation or the aggregation of data](https://www.financedigest.com/10-steps-to-stop-lateral-movement-in-data-breaches.html "10 Steps to Stop Lateral Movement in Data Breaches"). Similarly, [Apple has placed](https://74n5c4m7.r.eu-west-1.awstrack.me/L0/https:%2F%2Fwww.theverge.com%2F2021%2F4%2F27%2F22405474%2Fapple-app-tracking-transparency-ios-14-5-privacy-update-facebook-data/1/0102017c4fb80e81-9760713e-ad0c-4424-8521-3c44ccab7949-000000/iv2rhfrlxzgXWY3EA2vJ79Jp5Oo=238) the ability for consumers to opt out of IDFA-based app tracking front and centre in its latest iPhone update, iOS 14.5; this is a move that has been lauded by consumer groups.

The direction of travel is clear: as we dive deeper into the data decade, we will see more regulation coming into force globally and more constraints on data usage. Organisations that adopt a proactive, privacy-centric approach will be better positioned to manage regulatory [risk whilst still enabling data](https://www.financedigest.com/trendrating-1-3-delivers-faster-data-analysis-and-enhanced-risk-control-tools.html "Trendrating 1.3 delivers faster data analysis and enhanced risk control tools") innovation to flourish and building deeper levels of consumer trust.


---
This blog is powered by Superblog. Visit https://superblog.ai to know more.
---