Is your use of other people's personal data properly managed or will your response to your next data protection challenge be determined by a quick game of rock, paper, scissors?
This is our goal for data protection and privacy in the UK hospitality industry:
"No more random acts of data protection."
It is part of the answer to a very serious problem all hotels face. The problem is this:
Privacy is contextual. Your management of privacy and data protection depends heavily on the context of your use of, the availability of and the risks surrounding personal data. This is a fluid environment, it changes shape regularly. Which means it can be very frustrating to deal with.
The problem with frustration is that it quickly leads to people not making what might be considered "the best" decisions or introducing "the best" solutions to problems.
Which means you end up with random acts of data protection (and privacy). For example, think about cookie banners on websites. Everyone is fed up with them, businesses are frustrated by them, when they do use them they are usually badly configured so they don't work properly and as a result website visitors just click "accept all". Often this is a bad decision for them - and because the banner doesn't work properly, it if usually a bad decision for the website using it too.
Random acts of data protection are a result of doing what you can on the basis of a minimal and often ill-informed understanding of what is required. As a business manager you do what you can, even when you know deep at the back of your mind that it's probably not going to be enough.
...all examples of doing what you can.
When you look at this world of constantly having to establish the context of personal data use it is frustrating and confusing. There are often several plausible answers to fairly simple questions. It can seem to face in several directions at the same time.
Can you imagine what happens when this constantly evolving data protection world collides with random acts of data privacy? What happens when something random crashes into something in a constant state of flux?
As might happen when an incident occurs with the personal data you're using. Your random acts of data protection are by definition too thinly deployed and incapable of coping with even the simplest of challenges.
The result is, at best, that there is increased scope for trouble for you. At worst, chaos can ensue. Things that go Bang! are never good in a hotel.
Getting a grip on a chaotic situation is difficult. It takes a lot of time and money. If you deploy random acts of data protection you can expect similarly random results from your efforts to put things right.
There are no guarantees in the world of data protection and privacy. "Compliance" with the regulations are fleeting moments in your management efforts. Things change so quickly.
The answer lies in stacking the odds in your favour. Which means no more random acts. Instead you prepare your defences, you make sure you can prove your accountability, you force everything in and around your hotel business to support you as you protect personal data.
So that when the inevitable collision happens and your use of personal data meets the irresistable force of data protection principles and rights, you are able to absorb the impact instead of igniting it.
And you can start stacking the odds in your favour by joining hotelDPO today.
Become a member of hotelDPO and start enabling your marketing databases, realising the value of the personal data you use, upholding those data protection rights and starting to play a genuine role on the data economy.