RSA-2019数据隐私和安全调查报告（英文）-2019.3-16页_877kb

RSA DATA PRIVACY & SECURITY SURVEY 2019 Summary

Core Content

The RSA® Data Privacy & Security Survey 2019 highlights the growing disconnect between consumer expectations regarding data privacy and the ways in which businesses collect, use, and share personal information. The survey, conducted across France, Germany, the U.K., and the U.S., reveals that while consumers are aware of the risks associated with data misuse, they often lack a full understanding of how their data is handled. The findings emphasize the importance of ethical data practices, transparency, and building trust in an increasingly digital world.

Main Points

• Consumer Awareness and Concerns: Consumers are becoming more aware of how their data is used and are increasingly concerned about privacy. However, they often do not take full responsibility for protecting their own data, leading to risky behaviors such as password reuse.

• Ethical Data Use: A majority of consumers (48%) believe there are ethical ways for companies to use their data, but this belief varies by country and generation. The U.S. leads with 60% agreement, while France lags at 45%.

• Context and Generational Differences: Consumer attitudes toward data privacy vary by context, generation, and region. Gen Z and younger Millennials show higher comfort with data sharing than older generations. However, they also express concerns about their digital footprints and the ethical use of their data.

• Cultural Differences in Privacy Expectations: Privacy expectations are influenced by cultural norms and regulations. The GDPR has had a significant impact on European consumers, particularly in Germany, where privacy concerns have increased sharply. French consumers, on the other hand, are more willing to share data, possibly due to lower exposure to major breaches.

• Data Breach Blame and Responsibility: Consumers tend to blame companies rather than hackers when data is breached, especially in the U.S. and U.K. This is due to high-profile breaches and a lack of trust in corporate data security practices. In contrast, German and French consumers are more likely to blame hackers.

• Personalization and Its Ethical Implications: While personalization improves user experience, it is increasingly viewed as unethical by consumers. Tailored content and targeted advertising are seen as intrusive, with only a small percentage of consumers finding them ethical.

• Device and Location Tracking: Consumers are generally against device tracking, but they are more accepting of it when it serves anti-fraud purposes. The French are the most skeptical, with 58% viewing device tracking as unethical.

Key Insights

1. Context Matters

• Consumers are concerned about financial and sensitive data, but their concerns vary by generation and region.
• Gen Z is more concerned about digital footprints (location, photos, and videos) than other data types.
• Top 5 Data Types Consumers Care About:
  • Financial/Banking Data: 78%
  • Security Information: 75%
  • Identity Information: 70%
  • Medical Information: 61%
  • Contact Information: 57%

2. Data Privacy Expectations Are Cultural

• GDPR has increased privacy awareness in Europe, especially in Germany.
• French consumers are the least concerned about data privacy, with a notable increase in concern compared to the previous year.
• Germans are more protective of their data, particularly location-tracking data, since the GDPR's implementation.

3. Consumers Are at Odds with Businesses on Personalization

• Personalization is seen as beneficial but also as unethical.
• Consumers are increasingly cynical about companies' data protection claims and are pushing back against intrusive data practices.
• Ethical Use of Data:
  • 52% of respondents believe companies should only use the data necessary to deliver services.
  • Only 29% of all respondents agreed that more data leads to better products and services.

Recommendations

• Transparency and Consent: Companies should clearly communicate their data policies and gain consumer consent.
• Education and Training: Businesses must educate employees on data security to reduce risks from internal vulnerabilities.
• Ethical Data Practices: Companies should adopt ethical data use policies that align with consumer expectations, especially in the context of personalization and anti-fraud measures.
• Adapt to Cultural and Generational Differences: Tailor data policies to meet the expectations of different regions and age groups.
• Proactive Risk Management: Companies should proactively manage data risks by improving security controls and responding quickly to breaches.

Conclusion

The survey underscores the need for businesses to address the digital disconnect by embracing ethical data practices. As consumer expectations evolve, companies must adapt their policies to maintain trust, avoid backlash, and ensure sustainable growth in the digital marketplace.