On the path to a 'more private' internet, third-party cookies that have closely tracked the movements and activities of internet users, collecting analytical data and offering personalized offers based on that data, are crumbling. The elimination of these cookies is actually an opportunity for positive changes in every industry that exists in digital form, as it allows all important information to be collected directly from users, without intermediaries. At the same time, it is also a challenge because not everyone has access to people who know how to manage the data dragon, which can spew toxic fire with potentially costly consequences if mishandled. In other words, there are very few data scientists and other data professionals compared to the demand for them, and a solid legal framework has been established to regulate this delicate area. The General Data Protection Regulation – GDPR and the ePrivacy Regulation (ePR or Cookie Law), which put personal data in electronic communication under control, impose strict penalties on companies that do not align their operations with the rules of the game. It must be openly acknowledged: the playground is becoming less and less fun, data collection requires more effort, but the end results could also be better.
Privacy as a Business Imperative
With the departure of third-party cookies, companies operating digitally must build relationships with users by transparently stating what they do with their personal data. Once they gain their trust (and desired data), they will actually have a better view of users' interests, preferences, characteristics, and behaviors, which means more accurate predictions of their behavior, improvements in targeting, and even more personalized content, as well as a possible reduction in costs that were previously allocated to third parties.
– Caring for personal data protection increases the trust of clients and employees and positively affects the reputation of the business entity, which consequently reduces sales problems. Reducing the risk of personal data breaches is always a good idea, and research shows that more than 70 percent of organizations claim to have significant business benefits from privacy, such as operational efficiency, agility, and innovation. For many organizations, privacy is today a crucial business imperative – confirms Duje Kozomara, founder of the company Consent, which specializes in personal data protection consulting and building an internal culture of privacy.
He emphasizes that there has always been interest in his services, which include aligning business operations with GDPR, performing the role of an external data protection officer, compliance analysis with legislation, and conducting training and education related to this area, but over time it has increased as awareness of the importance of personal data protection grows in the corporate environment.
– Part of the interest has likely increased due to more intense activities of supervisory bodies in the European Union, including the Croatian AZOP (Agency for Personal Data Protection, ed.), which recently imposed two high monetary fines for GDPR violations. On the other hand, it seems that the leaders in the management of Croatian companies are beginning to understand that GDPR-compliant business does not only mean avoiding monetary fines but can also bring a range of business benefits – says Kozomara, who most often conducts internal training on the basic principles and obligations of GDPR and training internal data protection officers (DPOs).
