ECP Seminar Privacy in de Praktijk The Value of Our Digital Identity Beleidsvisie & Praktische Implicaties 10 Juni 2013, Den Haag Stephan Luiten, Director Public Policy
"Big Data" belooft significante stijging van beschikbare persoonsgegevens Consumenten zijn echter bezorgd Global data explosion Consumers' anxiety Global data transaction volume in terabyte (TB) Share of respondents (%) 10 10 10 9 2015: 7.91 10 9 TB Consider at least one sector a privacy threat 88% 16,000 10 8 10 7 1990: 4.97 10 5 TB Social media boom Internet of things Want independent entity to control data security 82% 10 6 Data transaction online 10 5 Digital services & media 1990 1995 2000 2005 2010 2015 Think companies' data uses are not transparent enough 79% Source: comscore; Sandvine: "Information White Paper"; IDC; BCG analysis; BCG digital identity survey (n = 3,107, August 2012) 2
Digitale Identiteit is groeifactor in een stagnerende Europese economie Digital identity value European economy EU-27 in 2011 and 2020, billion EU-27 in 2011, billion +14% CAGR 997 328 ~ 8% of GDP ~ 2 budget defícit 12,629 Organizations 315 53 669 520 Consumers 262 2011 2020 GDP Budget deficit Source: OECD; BCG economic value modeling 3
Waardeverdeling Digitale Identiteit Waarde innovatieve toepassingen voor ondernemingen en publieke instellingen Private- and public-sector value of digital identity 2020, billion 6 Further potential 52 34 14 112 6 36 15 84% 7 Current value 2011 11 7 5 8 1 9 5 16% @ Traditional production Retail Financial services Telco & media Public/ health Web 2.0 comm. Info/ entertainment E-commerce Source: BCG economic value modeling 4
Internet & retail lopen voorop in waarde creatie uit Digitale Identiteit Value Public sector I Evolutionary path of digital identity value creation Creating basic digital product experience Traditional production Digitization Basic digital identity uses as secure authentication Financial Telco & services media II Leveraging personal data internally Internal enhancement Usage data for R&D, delivery optimization, etc. Internet sectors Retail III Tapping data ecosystem opportunities External applications Sharing data with third parties in both directions Digital identity intensity Time Source: BCG analysis 5
Waardeverdeling Digitale Identiteit Consumenten waarde van innovatie toepassingen is dubbel de commerciële waarde 6
2/3 toekomstige waarde is echter in gevaar Stakeholders moeten betrouwbare stroom van persoonsgegevens genereren Digital identity value at risk 682 443 407 306-65% 138 553 275 315 364 262 53 190 Digital identity value 2011 Full potential 2020 Value at Risk Remaining potential Consumer benefit Organization value 7
De digitale consument & privacy 8
Meeste personen bezorgd over privacy, weinig inzicht hoe eigen Digitale Identiteit te managen Source: Eurobarometer 2010; BCG Analysis 9
Historische consumenten segmentatie achterhaald - Pragmatics delen persoonsgegevens bij duidelijk voordeel.. Historic privacy segments Current Reality Online Population The Fundamentalist (~25% of pop.) û The Fundamentalist (~25% of pop.) Less then 0.1% of respondents not willing to share any of their private data with organizations The Pragmatic (~65% of pop.) The Pragmatic (~100% of Internet population) Basically all of the Internet population today is part of the historic The Pragmatics segment The Unconcerned (~10% of pop.) Source: Alan F. Westin, segmentation first introduced in1991; Kumaraguru 'A Survey of Westin s Studies' 2005; BCG analysis û The Unconcerned (~10% of pop.) Source: BCG analysis Less then 0.1% of respondents sharing all of their data for free This clearly indicates increased awareness for personal data usage 10
.. daarbij maken consumenten onderscheid tussen diverse typen persoonsgegevens Willingness to share per type of data Willingness to share data with organizations (% of respondents) Sensitivity Low Medium Age group and gender Opinion on products Name and e-mail Interests High Past purchases Purchase plans Media usage Location Social network posts Health record Financial data Credit card data Compensation ( per month) Note: The absolute monetary figures cannot be interpreted as the actual "value of the data." Rather they serve as indications of the value consumers place on their personal information Source: BCG digital identity survey (n = 3,107, August 2012) 11
Dilemma: Consumenten willen enerzijds meer controle over privacy - anderzijds meer gemak Control Convenience "I would like to have the opportunity to always decide whether my data can be collected." "I do not like if a website asks me for the same information every time I open it." 100% 100% Strongly agree 23% Strongly agree 44% 94% Agree 40% 86% Agree 38% Undecided Undecided 23% Disagree Strongly disagree 12% 3% 3% Disagree Strongly disagree 8% 6% Dilemma cannot be resolved, but alleviated with consent dependent on data sensitivity and context Note: Based on primary consumer research with representative sample of n = 3,107 (NED: 1,026; GER: 1,041; PL: 1,040) Source: BCG analysis 12
Meer controle = Meer bereidheid tot delen Tot op zekere hoogte leidt bekendheid met privacy controle mogelijkheden tot meer data-sharing Impact of consumers' privacy protection proficiency on willingness to share Willingness to share data, standardized +52% 60 50 0 lowest highest Consumers' privacy protection proficiency Note: Privacy protection proficiency is ability to perform activities to protect their privacy, e.g., change privacy settings in social network, opt-out of data usage, surf web in incognito mode, disable cookies in browser, etc.. We asked people for eight most common activities whether they apply them and grouped people from lowest proficiency (apply none) to highest (apply all eight). Source: BCG analysis 13
Makkelijkere controles = Meer bereidheid tot delen Willingness to share data, standardized 15 +37% +36% 10 +31% +45% 5 +38% +28% +31% +39% +4% -2% +3% Difficult to do Easy to do -7% 0 Age group and gender Opinion on products Name and e-mail Interests Past purchases Purchase plans Media usage Location Social network posts Health info Financial data Credit card data low sensitivity medium sensitivity Note: Comparison of people experiencing privacy protection activities as relatively easy compared to people experiencing them relatively difficult Source: BCG analysis high sensitivity 14
Consumenten willen verschillende mate aan controle per data-categorie Voorbeeld Opt-In Consumers' assessment of required consent per data type Note: There is a strong bias to request higher share of control (opt-in) than preferred in real life 39% 31% 61% 40% 52% 53% 49% 56% 62% 80% 83% 83% Opt-in 37% 24% 43% 26% 31% 7% 42% 18% 36% 12% 36% 12% 39% 12% 33% 10% 31% 6% 16% 4% 14% 3% 14% 3% Opt-out No agreement Age group and gender Opinion on products Name and e-mail Interests Past purchases Purchase plans Media usage Location Social network posts Health info Financial data Credit card data low sensitivity medium sensitivity high sensitivity Note: Based on primary consumer research with representative sample of n = 3,107 (NED: 1,026; GER: 1,041; PL: 1,040) Source: BCG analysis 15
Data type meeste impact op bereidheid tot delen, Recht om vergeten te worden het minste Dimension Weight Variance for decision to share data in % lower willingness to share Ø higher Right to be forgotten 10% Not defined At your request Collection method 13% Tracked Volunteered Use of the data 13% Transfer to 3rd party (traceable) Delivery of requested service Sector 16% Social network Online shop Data type 31% Credit card data Age group and gender Note: Based on primary consumer research with representative sample of n = 3,107 (NED: 1,026; GER: 1,041; PL: 1,040) Source: BCG analysis
Conclusies 17
Privacy Geen One-size-fits-all Consumenten maken duidelijk verschil tussen persoonsgegevens met een hoog, midden of lage gevoeligheid de onderneming/sector/instantie die deze gegevens verzamelt en verbinden daarmee verschillende voorkeuren m.b.t controle en compensatie Om sociale & persoonlijke waarde, economische groei en innovatie te stimuleren moet de consument in staat gesteld worden om zelf te bepalen hoeveel waarde middels toepassingen van zijn Digitale Identiteit mag worden gegenereerd. Transparantie is daarbij een voorwaarde. Geen one-size-fits-all in Wetgeving & Toezicht. Wel een level playing field scheppen m.b.t. de rechten & plichten van nationale en internationale spelers op basis van Europese privacy beginselen die praktisch zijn, en kosten-efficiënt kunnen worden geïmplementeerd Wijziging cookie wet maakt onderscheid in toestemmingsvereisten voor diverse soorten cookies al naargelang hun daadwerkelijke impact op privacy Recht om vergeten te worden wellicht afgezwakt tot verplichting gegevens te verwijderen van websites onder eigen beheer 18
Nieuw privacy paradigma voor ondernemingen om waarde van Digitale Identiteit te realiseren Control Transparency Responsibility Benefits Meer & gemakkelijkere privacy controles voor de consument leidt tot meer beschikbare persoonsgegevens Transparantie in verzameling & gebruik van persoonsgegevens creëert vertrouwen Persoonsgegevens zijn waardevol en dienen verantwoordelijk te worden behandeld in interne bedrijfsprocessen. Veiligheid van databases is essentieel. In geval van voldoende voordeel zullen consumenten persoonsgegevens willen delen. Dit voordeel dient duidelijk gecommuniceerd te worden 19
Liberty Global & UPC Nederland Digitaal Vertrouwen is het centrale thema in de Corporate Responsibility strategie van Liberty Global en UPC NL Liberty Global en UPC NL hebben een Data Privacy Officer Voortdurende training personeel met data bevoegdheden Privacy Impact Assessments toegepast in interne processen, bijvoorbeeld middels Privacy by Design bij productontwikkeling Opt-in voor persoonlijke aanbevelingen over lineaire content, on-demand content, web- en persoonlijke content op de Horizon box Veilig & verantwoord internetgebruik staat centraal in UPC s CR strategie Mediawijsheid : basisschool jongeren leren omgang internet, social media, TV Safe & Sociaal : kinderen op verantwoorde manier met social media omgaan 20
Thank you! www.libertyglobal.com 21