11 / 03 / 2020
Information Age - What to expect if the New York Privacy Act is enacted
TRUATA CPO, AOIFE SEXTON PROVIDES COMMENT ON THE POTENTIAL PITFALLS FOR BUSINESSES LOOKING TO ANALYSE PERSONAL DATA.
Information Age – What to expect if the New York Privacy Act is enacted, following the privacy regulation boom of GDPR and CCPA
Since the introduction of the General Data Protection Regulation (GDPR) in 2018, similar bills have begun to emerge in the other countries, particularly the US — like the CCPA and the New York Privacy Act California signed into law the California Consumer Privacy Act (CCPA) only a month after the GDPR was introduced, facing much criticism from its own state’s tech industry — now, will the New York Privacy Act get a second run?
Problems with compliance
There are still potential pitfalls for businesses looking to analyse personal data.
Aoife Sexton, Chief Privacy Officer at Truata sees issues with the process of de-identifying data as an integrated aspect of a wider data collection.
“Anonymising personal data can provide an effective method for businesses seeking to limit the risks when analysing personal data. However, academic research has demonstrated how easy it is to re-identify an individual from a so-called “anonymised” dataset when the dataset is released at row level,” she says.
“This is because all too often poor anonymisation practices have meant that only obvious identifiers like name, address, etc. have been removed or obfuscated from a data set before it is released making it still possible to re-identify individuals by linking other less obvious identifiers remaining in the data set. A better approach would be to have a separate expert organisation independently carry out the anonymisation and only release aggregate insights.”
Sexton sees a solution by outsourcing the de-identifying process to partner companies.
“By finding a trustworthy partner to handle data anonymisation, organisations can reap the benefits from data analytics and derive valuable insights – but importantly, as the output will be genuinely anonymised, organisations can retain the trust of their customers and build confidence in their brand.”
Follow the link to read the full Information Age article.