Corporate Digital Responsibility PDF

CHAPTER 4: YOUR CORPORATE DIGITAL RESPONSIBILITY ================================================ TRANSCRIPT VIDEO "CORPORATE DIGITAL RESPONSIBILITY" --------------------------------------------------- Like any revolution, the digital transformation of our world brings endless possibilities for go...

CHAPTER 4: YOUR CORPORATE DIGITAL RESPONSIBILITY ================================================ TRANSCRIPT VIDEO "CORPORATE DIGITAL RESPONSIBILITY" --------------------------------------------------- Like any revolution, the digital transformation of our world brings endless possibilities for good and countless prospects for bad. Anyone that categorically says "digitalization is GOOD" or "digitalization is BAD" probably hasn't given the issue more than a superficial level of thought. The truth is: it's BOTH. And in the end, how "good" or how "bad" your own organization's digital transformation will be, depends on how much Corporate Digital Responsibility you assume for the result. And that includes YOU, as an individual employee. Let's look at a couple of stakeholders every organization has and see how this plays out. We'll start with kind of an important one: our planet's environment. As you can see on the screen: there are numerous ways in which your organization's Enterprise Information System can both help and harm Mother Nature, depending on what you do. If you plan and act responsibly, then digitalization can reduce emissions, slash paper consumption, lower water consumption, curtail pollution, and cut down on the unnecessary wastage of resources. But if you plan and act irresponsibly, then the opposite will happen. Your digitalization is going to boost energy consumption, overburden the local electric grids, cause deforestation, raise air pollution and noise pollution, release greenhouse gasses and toxic materials into the environment, and generate a bunch of nasty, additional waste. So who ARE you? As I said earlier, digitalization is never a matter of entirely "good" or "bad". Instead, try to imagine a continuum for every organization like this. Where exactly along this continuum your organization lies -- so 'here... or 'here', for example - ultimately depends on how seriously your management and all the employees take your Corporate Digital Responsibility. The same is true for a second major stakeholder of yours, your Customers. We all know that digitalization offers incredible benefits for customers: 24/7 access to goods and services -- often at locations where customers previously couldn't get these goods and services at ALL. We also benefit from the convenience and the speed that comes with accessing services digitally instead of having to get off our collective couches and physically travelling to a place of business. The offers that we as customers receive from companies are far more customized than they were in the past -- simply because companies collect and analyze our buying behavior a lot more easily when it's tracked digitally. And in the long run, tracking consumer behavior also allows organizations to understand overall customer demand much better, which helps them to prioritize the development of the goods and the services that we really want. But all that comes at a price. How often have you interacted with a chatbot or an automated phone service and been frustrated that you're communicating with a standardized algorithm rather than a living, breathing human being? An increasingly heard customer complaint is that customers feel 'lonely' or 'unheard' in their customer communication because of over-automatization. And then there's that consumer data tracking we just talked about. All the potential benefits quickly pale in situations where our customer data has been collected in an unethical - or even illegal - manner and is being misused. Unfortunately, some organizations -- whether knowingly or unknowingly - try to manipulate customers with their AI. In fact, there's even a gender and a racial bias in some current AI systems due to the type of data those AI were fed with. And then there's that constant invasion of our customer privacy due to all the tracking technologies. I'm sure there are days where you feel like you're being bombarded by an endless armada of intrusive, non-stop online marketing campaigns. Who wants that? You and your Organization: are you going to be 'here' when it comes to your customers or are you going to be 'here'? It's up to you entirely. Let's turn to your organization's responsibility towards its employees. There are SO many benefits that digitalization offers employees -- let's count them up. There's the previously unthinkable access to information that employees now have at their fingertips. Then there's the speed at which artificial intelligence analyzes massive loads of data for you. There's the ease with which employees can now store and organize new information, and immediately make it available to others around the world. Then there's the ability to collaborate with colleagues, customers, and suppliers directly on digital platforms, rather than needing to sit at the same table. Connected with that is the ability to WORK remotely - maybe even from home. There's the ever-growing ability to automate repetitive tasks. There's the improved workplace safety that comes with letting the robots do the dangerous stuff, as well as from the 24/7 tracking of any risk data with sensors. Last, there's the greater reach that every organization now has to geographic markets everywhere, which allows organizations to grow and ideally offers higher job security. But just like with our earlier cases, that's only the ONE side of the coin. Sure, employees have far more access to information than they've had in human history. But that's a blessing AND a curse. 'Information access' can quickly become 'information overload', crushing employees under mountains of information they don't need but are still required to work through. The same goes for communicating digitally. As human beings, we have a profound need for face-to-face, human connection. And as Abraham Maslow pointed out, this social need is at least partially fulfilled at our places of work. Communicating digitally and working remotely ignores this, increasing the very real risks of employee isolation and loneliness. Then there are the sensors. The improved workplace safety that digital sensors offer, can, simultaneously, threaten employee privacy and evoke the uncomfortable feeling that everything around us is being monitored. Automation and the support of AI free employees from tedious tasks. So much is true. But without proper foresight, they also lead to a substantial loss of employee autonomy and decision-making authority. Both of which -- if I refer to Maslow again -- are substantial motivational human needs at the workplace. And last, we'll address the elephant in the room: job security. While it's true that a company can now offer its goods and services in the remotest of geographical locations, the reverse is also true. We're no longer competing with just the shop down the road, we're competing with ALL the shops down ALL the roads of our blue planet. Combined with automation and AI, it's a harsh reality that many types of jobs that exist today won't exist tomorrow, or even later today! Which understandably frightens employees, unless their organization is taking steps to proactively train them in the types of jobs that won't be secured by international competitors or delegated to machines tomorrow. In all these cases -- and many more - Corporate Digital Responsibility becomes THE major determinant of whether your organization will rank on this end... or on this end of the spectrum. It's not enough for your Communications Department to publish a few polite blanket statements about your commitment to Digital Responsibility. Your responsibility needs to be implemented in the very fabric of your strategy: in your rules and protocols, in your business processes, your hard- and software choices, in the way in which each of your employees handles data on a day-to-day basis, and in the way you measure performance and do your controlling. Unless Corporate Digital Responsibility is anchored in the very DNA of your organization, even the best of intentions will leave you standing on the shallow end of the pool. **\ ** TRANSCRIPT VIDEO "WHAT IS WEB TRACKING?" ---------------------------------------- Imagine you\'re shopping online for a new pair of shoes. You visit a few websites, compare prices, and then decide to take some time to think about it before you purchase. The next day, you\'re browsing social media... and suddenly you see ads for the exact shoes you were looking at the day before. Coincidence? An all-knowing, mind-reading conspiracy? Not at all. Welcome to the world of web tracking, where your online activities are monitored, analyzed, bought, sold, and used in ways you might not even realize. Today, we\'re going to take a look at what you need to know about web tracking to understand -- what it is, how it works, and what it means for your online privacy. **What is Web Tracking?** Web tracking is the collection and sharing of information about an internet user\'s activities. It\'s like having an invisible observer following you around the internet, taking notes on everything you do. Websites, marketing companies, advertising agencies, and even governments use various technologies to observe your online behavior, follow you across different sites, and build a profile of your digital persona. This tracking can include: - Pages you visit - How long you stay on each page - What you click on - Your search queries - Products you view or purchase - Your location - The device and browser you\'re using **\ ** **Types of Web Tracking** Let\'s count down the main types of web tracking technologies, from the most common to the most sophisticated: - **Cookies** - - - **Local Storage** - **Heat Maps** - **Web Beacons** - - - - - **Digital Fingerprinting** - - - - - - - **The Extent of Web Tracking** The reach of web tracking is vast and often underestimated. Major tech companies like Google are estimated to have trackers on almost 80% of websites. That means every search you make, every page you visit, and every purchase you complete leaves a digital footprint that can be collected and analyzed. This data is used for various purposes: - Personalized advertising - Market research - Product development - User experience optimization - Sometimes, unfortunately, for more nefarious purposes like political manipulation or identity theft As you can imagine, the sheer amount of power that can be gained from web tracking data has caused quite a stir in data privacy circles -- and nations have started taking action to help protect consumers online. **Legal Aspects of Web Tracking** From an EU perspective, web tracking is legal as long as companies comply with data privacy regulations. The General Data Protection Regulation (GDPR), implemented in 2018, set a new standard for data protection: - Websites must obtain explicit user consent before tracking them through cookies and similar technologies. - Users must be given clear information about what data is being collected and how it will be used. - Users have the right to access their data, have it corrected or deleted, and withdraw their consent at any time. However, the reality of web tracking regulation is more complex: - Many users click \"accept all\" on cookie banners without actually reading the details, essentially giving blanket consent. - Some tracking methods, like digital fingerprinting, are harder to detect and regulate. - The line between essential tracking for website functionality and more invasive tracking for marketing purposes can be blurry. - And last: Enforcement of these regulations can be challenging, especially for smaller websites or those based in countries with less stringent privacy laws. **\ ** BEWARE OF CYBER ATTACKS ----------------------- Below are typical examples of cyber-attack risks to your network and devices: - **PHISHING**: - **MALWARE:** - **SPYWARE:** - **RANSOMWARE:** - **ROGUEWARE**: - **HUMAN ERROR**: - **DDoS ATTACKS:** - **HARDWARE THEFT:** - **SQL INJECTIONS:** - **SOCIAL ENGINEERING:** - **BOTNET**: - **CROSS SITE SCRIPTING:** - **ZERO DAY EXPLOITS**: - **WATERING HOLE ATTACKS**: **\ ** CYBERSECURITY TO THE RESCUE --------------------------- Below are numerous steps you can take to protect your organization's data from a\ cyber-attack: - **BACKUPS**: - **FIREWALL SOFTWARE**: - **ANTI-VIRUS / ANTI-MALWARE SOFTWARE**: - **ACCESS RIGHTS**: - **DIGITAL SIGNATURES / DIGITAL CERTIFICATES**: - **INTRUSION DETECTION SYSTEM:** - **PUBLIC KEY ENCRYPTION**: - **RULES AND PROTOCOLS**: - **MULTIFACTOR AUTHENTICATION**: TRANSCRIPT VIDEO "DATA PRIVACY" ------------------------------- There's nothing quite like coming home after a long day, closing your front door, and knowing that you've finally gained some peace and quiet in the privacy of our own space. In the physical world, we often take this privacy for granted. But in our digital world, maintaining that same level of privacy has become somewhat of a challenge. We may *think* we are in control of our personal information, but the truth is, it\'s being collected and shared without our knowledge or consent. It's like sitting down on the couch to binge watch a show, while ad companies, big businesses, and even nefarious individuals are peeking through our metaphorical window, gathering information about us and using it for their own benefit. But don't worry, you can still take back control of your data privacy. By understanding the basics of data privacy and taking some simple steps to protect yourself, you can enjoy the same level of peace and quiet in both the physical and digital worlds. But before we can take action, let's define what exactly data privacy is. **What is Data Privacy?** Data privacy involves protecting personal information from unauthorized access or use. It\'s about regulating who can access personal data, how it\'s collected, used, and stored. Think of it as the digital equivalent of closing your front door -- it gives individuals control over their personal information in the online world. This concept includes various types of data we use every day, such as: - Personal identifiers like names, addresses, and social security numbers - Financial information such as credit card numbers and bank account details - Health records - Online behavior data, including browsing history and search queries - Geolocation data from mobile devices - Biometric data like fingerprints or facial recognition information Sometimes, giving this information to businesses or brands can be helpful -- online banking, online shopping, and social media all require some personal information. However, it\'s important to understand how this data is collected, used, and stored by these entities. **Why is Data Privacy a Hot Topic?** You and I generate vast amounts of data daily -- from our browsing history to our shopping habits, social media interactions, and even our physical locations. You may think this data is mundane, but it's actually highly valuable to businesses and can be used for everything from personalized marketing to product development. Data has become the new oil -- a valuable commodity that drives business and profits. But with the rise of data collection, there are also growing concerns about data privacy. Who has access to our personal information? How is it being used? And most importantly, how is it being protected? The Facebook-Cambridge Analytica scandal in 2018, where millions of Facebook users\' personal data was improperly obtained and used for targeted political advertising, revealed how personal data could be harvested and used for political manipulation. Suddenly, we all collectively woke up to how all of this data isn't being collected and saved in a vault somewhere. Companies are *using* us to make money, influence opinions, and even potentially manipulate events. **How Businesses Collect, Store, and Use Personal Data** Now, you might be wondering, \"How exactly are businesses collecting all this data?\" Well, let us break it down for you. First up, we have websites and mobile apps. Every time you create an account or fill out a form, you\'re handing over information. But it doesn\'t stop there. Those pesky cookies? They\'re watching which pages you visit and how long you stay. Next, think about your last shopping trip. The store\'s point-of-sale system captured what you bought and how you paid. And if you used a loyalty card? They\'re tracking your shopping habits over time. Social media is another goldmine of information. Your profile details, your likes, your shares - it\'s all data that companies can use. Even your emails and customer service chats are sources of data. Signed up for a newsletter? They\'ve got your email. Complained about a product? That\'s noted too. And let\'s not forget about the Internet of Things. Your smart home devices and fitness trackers? They\'re constantly collecting data about your daily habits and health. But where does all this data go? Well, it\'s stored in massive databases, cloud systems, and data warehouses. Some companies even use what\'s called a \"data lake\" - imagine a vast digital reservoir of raw information. So, what do businesses do with all this data? The uses are endless. They personalize your shopping experience, showing you products you\'re more likely to buy. They target you with ads based on your browsing history. They analyze market trends to stay ahead of the competition. Companies also use this data to improve their products and services. Your feedback, whether you realize you\'re giving it or not, helps shape future offerings. And behind the scenes, this data is helping businesses run more efficiently, from managing their supply chains to detecting fraud. However, as numerous scandals have shown us, our data can and IS often also used in ways that do not serve the common good. **Conclusion** As we continue to live more of our lives online, data privacy will only become more important. Understanding the basics of data privacy empowers us to make informed decisions about our personal information and to hold organizations accountable for how they handle our data. Remember, in the digital world, data privacy is our front door -- and we all have the right to decide when to open it and when to keep it closed. As consumers, we should be aware of our rights and how our data is being used. And as we step into roles as business leaders and professionals, we have a responsibility to handle personal data ethically and securely. By staying informed and proactive about data privacy, we can all contribute to creating a digital world where personal information is respected and protected. **\ ** THE EU GDPR REGULATION ---------------------- The **General Data Protection Regulation** (**GDPR**) is a European Union law that aims to protect digital privacy rights. It was introduced in 2018 and [applies to all organizations that process the personal data of individuals residing in the EU]. This includes companies, non-profits, public authorities, and online service providers (e.g. social media platforms, e-commerce websites). The GDPR introduces several key principles, including - - - - The GDPR also states that members of the groups listed above must a. b. These requirements apply to all personal data - regardless of whether it\'s stored on paper or electronically. Organizations found to be in violation of the GDPR face penalty fines of up to €20 million or 4% of global sales revenues. +-----------------------------------------------------------------------+ | - In addition to the GDPR, the EU plans the introduction of an | | **ePrivacy Regulation.** | | | | - This law would focus specifically on data protection rules for | | electronic communications | | | | | | | | - Due to strong disagreements with individual EU member states on | | how far-reaching the ePrivacy Regulation should be, it has not | | been enacted yet. | +-----------------------------------------------------------------------+ +-----------------------------------------------------------------------+ | *[The main laws regulating data protection in Austria | | are:]* | | | | - **General Data Protection Regulation** (GDPR) | | | | - **Data Protection Act** (DSG): supplements the GDPR and also | | applies to the data of legal persons (e.g. corporations) | | | | - **Convention for Protection of Individuals with Regard to | | Automatic Processing of Personal Data** (\'Convention 108\') | +-----------------------------------------------------------------------+