Risk Management & Regulatory Compliance
3 minute read
Nov 27, 2019
Written by: Laurent Robert
The European Union’s General Data Protection Regulation is just the tip of the iceberg when it comes to protecting consumer data. It’s by far the most comprehensive regulatory guideline to date, and its reverberations are already being felt stateside.
Using the California Consumer Privacy Act (CCPA) as our bellwether, this post aims to provide your organization with four steps you can begin today that will lay the groundwork for implementation.
In response to events such as the personal data misuse by Cambridge Analytica, the California Legislature set out to give consumers greater control over their personal information. The act gives Californians the right to:
These rules might feel crippling, especially for small businesses and startups. And for that reason, the legislation only applies to organizations who meet very specific criteria:
While CCPA doesn’t go into effect until January 1, California-based organizations, and those with a heavy customer-base in the state, are scrambling to stay on top of revisions and build out the organizational infrastructure to be in compliance, or at the very least show a good-faith effort.
The knee-jerk reaction is to approach this solely as an operational challenge. While that may be a short-term solution to meet impending deadlines, those in and outside the California (and Nevada) borders should approach this as both an operational and strategic exercise. As organizations begin instituting mechanisms to better organize and protect customer data, senior leaders need to get into the practice of asking themselves, how do these actions impact our broader business strategy? And, as sensitivity around the topic of customer privacy grows, will this necessitate a broader pivot?
While you ponder the strategic implications, there are several activities organizations that collect sensitive consumer data should be taking now to prepare themselves for this new era of consumer data protection.
Most states and the federal government are still several years away from approving laws that prioritize consumer protection over the bottom line – but consumer attitudes are already there. Starting with your strategy – and beginning to build a culture around the sensitivity of customer data – will help streamline the operational shifts, making the transition to compliance far less difficult.
For those of you beginning this process or looking to begin it, I encourage you to reach out, ask questions and share insights.
When it comes to project management, it may seem like it’s “all Agile all the time.” Because right now it is. Agile is “the” buzz in project management. Even the Wall Street Journal recently jumped on the bandwagon. But, let’s be honest, Agile is not the answer to every question, nor the solution to every problem. Outside of the full-on “Agile is the silver bullet” approach, we see real-world Agile implementations that look quite different than the by-the-numbers textbook approach you may think is the only way to go.
Customer Channels & Operations Management 3 minute read
Cutting-edge technology, coupled with the disruption of COVID-19, has driven significant change in the banking industry this past year. Consumers are now more apt to choose online banking services – a trend that’s been bolstered by the continued ingenuity of the fintech segment. And while customers are keeping banks on their toes with continued demand for new tech, we expect that demand to be accompanied by new policy and regulatory pressure in the next five years.
Customer Channels & Operations Management, Data & Analytics, Risk Management & Regulatory Compliance 1 minute read
The Big Picture We remember spending hours (if not days) each month in mind-numbing tedium as junior analysts, producing regular reporting for our business lines. The recurring exercise had us piecing together data from various sources, manually updating Excel files and praying fervently that none of the associated formulas got corrupted along the way. Excel would generate new graphs, which we transferred over to PowerPoint, and, more often than not, further manipulation would be required to fit them into the approved templates to avoid formatting glitches. Copy-Paste was both our dearest friend and greatest foe.
Data & Analytics, Compliance 2 minute read
Like how we think? Subscribe to have our articles delivered direct to your inbox each month.
Headquarters: 8000 Franklin Farms Drive, Suite 100, Richmond, VA 23229
©2023 Spinnaker Consulting Group. All rights reserved.