经济学人(情报股)-透明商业晴雨表(2019年).pdf

THE TRANSPARENT BUSINESS BAROMETER: Preparing for the end of easy data Sponsored by:3 The transparent business barometer Preparing for the end of easy data The Economist Intelligence Unit Limited 2019 Contents 1 About the research and acknowledgements 2 Executive summary 4 Introduction. Data in demand 6 Box I. The transparent business barometer: Gauging the impact of future data-privacy regulations 7 Chapter 1. Regulating their way to the top: Challenges and opportunities of data-privacy laws 9 Box II. Hacking the individual: Exploring the link between data privacy and cyber-security 10 Chapter 2. Data dispersal: Who should own your personal digital information? 12 Box III. Working with giants: Data-privacy management in large versus small rms 13 Conclusion. Privacy and propriety: Managing uncertainty in a data-driven world 14 Appendix I. Survey demographics 17 Appendix II. Barometer readings1 The transparent business barometer Preparing for the end of easy data The Economist Intelligence Unit Limited 2019 About the research and acknowledgements The transparent business barometer: Preparing for the end of easy data is a report from The Economist Intelligence Unit, sponsored by Ant Financial. Kim Andreasson is the author and Michael Gold the editor. Scott Aloysius assisted with data analysis. The report is largely based on a survey of 250 executives conducted in October- December 2018. All respondents represent a company that is primarily business to consumer and are very or somewhat involved with their organisations consumer data- collection operations. Survey takers come from China, the US, Western Europe and South-east Asia, with a minimum of 60 respondents in each country or region. Half of all respondents occupy the C-suite while the remaining half are senior executives and managers. Technology, nancial services and retail are the most commonly represented industries. The main functional roles are IT and technology, general management, and marketing. Half of all executives come from companies with more than US$500m in global annual revenue while half come from companies earning below that threshold. See appendix I for a full breakdown of the survey demographics. To better understand the opportunities and challenges of a changing data-privacy landscape, interviews were conducted with advisory board experts and supplemented with wide-ranging desk research to inform the executive survey. Our thanks are due to the following advisory board members for their time and insights: Daniel Castro, vice-president, Information Technology and Innovation Foundation Ann Cavoukian, distinguished expert- in-residence, Privacy by Design Centre of Excellence, Ryerson University J Trevor Hughes, president and CEO, International Association of Privacy Professionals Yan Luo, of counsel, Covington however, there are di!erences between regions and large and small companies in both preparedness and measures taken. The key ndings are: Data privacy is becoming increasingly important to organisations in the face of numerous rising concerns. In an era in which data-privacy topics make international headlines almost daily, nearly 100% of survey takers in Asia, Europe and the US agree that data privacy is important to their organisation today and 91% say it will be much more or more important in three years time. Executives in China and South-east Asia are more likely to tie data privacy practices to good corporate governance than those in the West. Almost all executives in China (98%) agree that data privacy is an important part of good corporate governancerunning counter to the commonly held view that privacy is an afterthought for Chinese rms. Cyber-security concerns will be the chief driver of stronger data-protection strategies. Illustrated by the frequency and scope of recent data breaches, the primary data-related worry among executives in our survey is the risk of data leaks from lapses in cyber-security. Boosting corporate governance and rising consumer demand take second and third place, respectively. American executives believe their companies are more prepared to face regulations than those in other regions. A barometer constructed for this study shows that companies are generally prepared and willing to take measures to meet emerging challenges, although the results vary by region, especially between Europe, which lags in readiness, and the US, which is well ahead. Regulations that create a level playing eld for companies, especially those operating across borders, may be a welcome development as concerns over data privacy proliferate. Executives generally believe people are willing to trade data privacy for improved services. In our survey, three out of four American executives agreed with this sentiment, higher than the 3 The transparent business barometer Preparing for the end of easy data The Economist Intelligence Unit Limited 2019 average gure of about two in three. The equivalent gure for China, meanwhile, sits at 67%, again demonstrating that regional stereotypes around privacy may warrant closer inspection. Small rms lag their large counterparts in readiness to face regulations. The argument that one-size-ts-all regulations may stie innovation among start-ups, while large rms can use their vast resources to manage compliance, gains support among our survey panel.4 The transparent business barometer Preparing for the end of easy data The Economist Intelligence Unit Limited 2019 Introduction. Data in demand By any measure, the amount of data created is increasing rapidly, with the breadth and depth of such data generating signicant value for the organisations collecting them. A 2017 headline in The Economist exclaimed that “the worlds most valuable resource is no longer oil, but data.” 1Among other actors, international platform providers such as search engines and social media companies use data, often personal, to sell targeted ads and create innovative solutions based on data analytics. A recent article in The New York Times, for example, illustrated that many companies use apps on increasingly ubiquitous mobile devices to gather geographical information on users, generating a location-based advertising market worth about US$21bn in 2018. 2 Privacy proponents are objecting to such laissez-faire practices, and in response many policy-makers have established new guidelines for data collection and data privacy, such as the EUs General Data Protection Regulation (GDPR), which went into e!ect in May 2018 and also applies to foreign companies doing business in the region. 3Violators of the GDPR may be ned up to “20m (US$22.8m) or 4% of annual global turnover, whichever is greater. 4Globally, the way companies acquire and use personal data has never been under as much scrutiny as it is now, making improving data-privacy strategies a top priority for businesses. “The enormous increase in not only the scope of risk, but the complexity of risk, is the rst challenge,” says J Trevor Hughes of the International Association of Privacy Professionals. He notes that the pace of change, both with regard to technological innovation changing the understanding of privacy, and to the number of laws, regulations and expectations that are emerging around the world, is creating headaches for organisations. Companies are taking notice of the changing landscape, both in terms of regulations and more broadly. In the survey conducted for this report, about four in ve executives say data privacy is “very important” to their organisations today, with another one in ve saying it is simply “important”. Figure I. Safeguarding the new oil How important is data privacy to your organisation today?A majority (54%) of executives also say data- privacy will be much more important in three years time. Source: The Economist Intelligence Unit Very important Important Neither important nor unimportant Unimportant 1 9.6% 1 .2% 0 .4% 7 8.8% 1 “The worlds most valuable resource is no longer oil, but data”, The Economist, May 6th 2017 2 Jennifer Valentino-DeVries, Natasha Singer, Michael H Keller and Aaron Krolik, “Your Apps Know Where You Were Last Night, and Theyre Not Keeping It Secret”, The New York Times, December 10th 2018 3 EU GDPR Portal 4 Ibid5 The transparent business barometer Preparing for the end of easy data The Economist Intelligence Unit Limited 2019 One reason that executives are paying increasing attention to data privacy is its perceived importance to good corporate governance in future. Almost nine in ten (88%) executives agree with this sentiment; among Chinese executives, the gure reaches 98%. One reason for this disparity may be improved understanding of data-privacy regulations among Chinese executives. Overall, 83% of all survey takers agree that their knowledge of such laws has improved in the past three years; in China the equivalent gure is 92%. Another reason may be the importance of trust, which in China may be higher between data-gatherers (companies and/or the government) and data-providers (individuals) than in other regions. 5“China understands how important basic online trust is in the shared economy,” says Andrew Ballen of Shanghai-based AVD Digital Media. China understands how important basic online trust is in the shared economy. Andrew Ballen, AVD Digital Media Figure II. Transparent and trusted Data privacy will be important to good corporate governance in future (% agreeing, by region) Source: The Economist Intelligence Unit 0 1 0 2 0 3 0 4 0 5 0 6 0 7 0 8 0 9 0 1 00 China South-east Asia US Western Europe98.4%88.3%86.9% 80.9% 5 David Brooks, “How China Brings Us Together”, The New York Times, February 14th 20196 The transparent business barometer Preparing for the end of easy data The Economist Intelligence Unit Limited 2019 In our survey, executives were asked to rate on a one-to-ten scale their readiness to face data-privacy regulations and their likelihood of taking various actions in response. Specically, the readiness question (composed of ve sub-questions) asked how prepared organisations are to deal with various aspects of regulations, including that which might restrict the ability to view, analyse, buy or sell consumer data. The likelihood question (composed of three sub-questions) asked how likely it is that organisations will take di!erent measures moving forward, such as withdrawing operations from certain jurisdictions, in response to potentially stricter data-privacy regulations. An answer between one and four is considered low preparedness/likelihood, a score of ve to seven indicates medium preparedness/likelihood and a score of eight to ten suggests high preparedness/ likelihood. Given the di!erences in the number of questions per category and the number of respondents per country and region, the scores were weighted in order to use numerical answers as a proxy for preparedness/likelihood across countries or regions. Key ndings The transparent business barometer shows that survey takers are relatively well prepared to face regulations (7.36 out of ten) but relatively less likely to take di!erent measures in response (6.47 out of ten). The average score across all geographies and categories was 7.02. There are large geographic di!erences. American executives are the most prepared (8.04), despite di!ering regulations across states and industry sectors. US executives are also the most bullish about trying di!erent measures to meet regulations (7.16). Conversely, Europeans are the least prepared (6.69) and least willing to attempt new approaches (5.67). Scores from China and South-east Asia fall between these two outliers. See appendix II for full barometer questions and results by region. Simon Chesterman of the Faculty of Law at the National University of Singapore explains these regional di!erences by noting that “Europe is driven by individual rights and America by corporate interests, while in Asia, governments have been trying to make a home for safe data,” which refers to a top-down approach meant to secure information on behalf of users and attract big-data companies. Figure III. Privacy pioneers Transparent business barometer aggregate scores, by region Source: The Economist Intelligence Unit Box I. The transparent business barometer: Gauging the impact of future data-privacy regulationsCountry or region Western South- China US Europe east Asia Tot al Readiness 7.35 8.04 6.69 7.42 7.36 Likelihood 6.58 7.16 5.67 6.56 6.47 Overall 7.06 7.71 6.31 7.10 7.027 The transparent business barometer Preparing for the end of easy data The Economist Intelligence Unit Limited 2019 The EUs GDPR has undoubtedly taken centre stage in the debate around data-privacy regulations. In January 2019 CNIL, Frances data-protection regulator, slapped Google with the largest ne to date under the GDPR, to the tune of “50m (US$57m). 6Yet GDPR may be having less of an impact than many believe. In our survey, fewer European executives believe data privacy is very important to their organisation (71% compared with 79% of all executives) and fewer still believe it will be much more important in three years time (38% compared with 54% across all regions). As indicated in the transparent business barometer (see box I), one reason may be that European executives are waiting to see how regulations actually play out in practice and whether hefty nes will continue to be issued. Having regulations on the books may not be e!ective unless they are carried out, says Gus Hosein of Privacy International, a watchdog group. “Enforcement is denitely the bigger problem.” Indeed, uneven and/or arbitrary enforcement ranks among the top regulation-related challenges, named by just over a quarter of executives. Conversely, only about one in eight cited penalties for violations as being too steep. Lack of clarity about consumer rights, such as data portability, regulations that are behind the curve of technological advancements, and lack of clarity about roles and responsibilities among di!erent government agencies comprise the other top challenges. Chapter 1. Regulating their way to the top: Challenges and opportunities of data-privacy laws Figure IV. Laying down the law What are the biggest data-privacy barriers faced by your organisation with regard to regulations? Source: The Economist Intelligence Unit 6 “The French fine against Google is the start of a war”, The Economist, January 24th 2019 ! “! #! $! %! Lack of clarity about consumer rights, such as data portability Regulations are behind the curve of technological adv