Enterprise data privacy can’t exist as an isolated operation but instead should serve as a vital thread woven into the fabric of the enterprise. As a data privacy leader, you know you can’t achieve this level of influence without first securing crucial support from your C-suite executives.<\/p>\n
Data privacy is already a concern of many senior executives, according to 2021 PwC’s Top Policy Trends<\/a> report. Among the 400 surveyed C-suite leaders, 44% listed data privacy as one of the top three policies impacting the business.<\/p>\n Over the past few years, enterprises have been adapting their data policies to comply with the rapidly evolving regulatory landscape — from the European’s Union’s General Data Protection Regulation<\/a> (GDPR) to the California Consumer Protection Act<\/a> (CCPA).<\/p>\n Many executives have acknowledged the growing need to regulate how enterprises collect, store, and share data. Even so, data privacy is not typically perceived as an innovation or profit driver, and it can be challenging to sell the value of a program rooted in risk avoidance.<\/p>\n Despite the recognized importance of data privacy, some executives worry it could stifle innovation and their ability to effectively operate the enterprise. More than one-third of leaders even report tension between innovation and compliance, per a Bizagi<\/a> report.<\/p>\n As your organization’s data privacy head, you need your C-suite to serve as a champion for your work. Here are some best practices in securing C-suite support for your data privacy program.<\/p>\n Before you can turn your CEO and leadership team into strong data privacy advocates, you first need to understand the context of the organization.<\/p>\n It’s critical to consider the mission of the enterprise and how data privacy will align with that purpose. Ask yourself, will the goal of data privacy be focused on consumer protection, consumer benefits, protecting vulnerable populations, or some other function?<\/p>\n For example, Apple — which is often recognized for its data privacy efforts<\/a> — has a mission “to bring the best personal computing products and support to students, educators, designers, scientists, engineers, businesspersons, and consumers in over 140 countries around the world.”<\/p>\n The brand’s data privacy policies fall in line with that mission. Apple collects personal data for the sole purpose of improving its products, services, and content, as well as to keep accounts secure. However, Apple states that it does not share personal data with third parties for marketing purposes.<\/p>\n In 2014, CEO Tim Cook emphasized this policy in an open letter to customers<\/a>, writing, \u201cA few years ago, users of internet services began to realize that when an online service is free, you\u2019re not the customer. You\u2019re the product. But at Apple, we believe a great customer experience shouldn\u2019t come at the expense of your privacy.\u201d<\/p>\n Apple effectively leverages privacy as a marketing tool and business advantage<\/a> by putting its data privacy strategy at the forefront of its products and brand reputation.<\/p>\n While this strategy has worked for Apple, it won’t be suitable for every organization — plus, it carries risks. If you place your privacy goals at the top of your business strategy and you experience a privacy issue, then you’ve opened the brand up to negative media.<\/p>\n In order to operate in alignment with the enterprise, you must consider how high-profile your C-suite wants data privacy to be. What role do they envision privacy playing?<\/p>\n As a senior data privacy leader, you’re fluent in the language of data privacy <\/a>— it’s likely your C-suite is not. Education can play a critical role in establishing the value of your program.<\/p>\n An Investis Digital article on how C-level executives can own data privacy<\/a> states, “It\u2019s no longer acceptable to assume someone else in your organization understands the vagaries of data privacy.”<\/p>\n It’s the Chief Privacy Officer’s duty to engage and effectively educate both the C-suite and workforce on the requirements and goals of the data privacy program. This can be achieved through various learning materials, assessments, and presentations to the C-suite, among other resources.<\/p>\n The demand for workplace data privacy education has experienced rapid growth in recent years. According to the ethics and compliance firm LRN Corporation<\/a>, the completion of data privacy courses increased by 262% between the first and second quarters of 2018.<\/p>\n Still, data privacy should be more than a set of loosely followed guidelines and a few online courses may not be enough to drive home the crucial nature of data protection.<\/p>\nUnderstanding the enterprise goals<\/h2>\n
Educating the workforce<\/h2>\n