Why Google's Privacy Changes (And The 'Data Tidy Up') Moves Everything Forward

Blog post info and actions

Blog post body

Google has handled its privacy debate by being disarmingly clear with a little note left on the fridge the other week.

We’re tidying up and love data too much to not want to connect it better.

Like it or lump it.

Love Google.

It’s their right - they are after all a private company and not the public service we somehow feel them to be. Google wants to “create a beautifully simple, intuitive user experience” and its data consolidation is what will help it do this. Facebook makes one product called Facebook while Google up until now has chosen to run many nom de plumes, betas, and side initiatives. I’d like to see a more capable ‘joined up’ Google sparring with Apple and Facebook on who can do the coolest and most useful things for people using data. In truth, the Google engineering team must be relieved to ditch the sticking plasters and chewing gum connecting the hitherto disparate data sets they manage.

Read more

Google Data Integration: Could It Drive PIDM Adoption?

Blog post info and actions

Blog post body

Fatemeh Khatibloo

Yesterday, Google announced that, effective March 1, it would be creating a single view of users across the majority of its products and services and creating a single, simplified, global privacy policy to cover the new approach.

Now, as a customer intelligence analyst, I preach a “consolidated view of the customer” to clients nearly every day. I advise retailers, CPGs, and others that creating an optimal experience for customers is nearly impossible without having a clear understanding of their needs and preferences, across all channels and lines of business. But what Google’s doing extends well past traditional “single view” and into “personal data locker” territory.

On the face of it, Google claims that it’s making these changes for the same reason: to improve the user experience. But to remain profitable and keep providing free services to several hundred million users, Google will also use its vastly increased insight about users to sell better targeted (read: more expensive) ads to advertisers. 

Is Google’s new policy PIDM-friendly?

I wanted to look at how these changes map to the principles that companies must follow to be successful as personal identity management emerges. Here’s my take:

  • Privacy: Google’s new privacy policy is a good one. It’s simply written, well constructed, and fairly concise. It’s almost global, excluding only a handful (Chrome, Wallet, Books, DoubleClick) of its businesses. However, while the policy allows broad-brush opt-outs, its failure to provide its granular controls over what’s shared between properties and devices is a major miss.
     
Read more

The Data Digest: Consumers' Attitude Towards Online Privacy And Security

Blog post info and actions

Blog post body

Reineke Reitsma

Over the weekend, one of the most reputable online retailers in the US, Zappos, broke the news that its database was hacked and that the information for about 24 million user accounts was breached.

How do stories like this affect consumers’ attitude toward online privacy? In our August 2011 Community Speaks Qualitative Insights report, “Consumer And Online Privacy: How Much Information Is Too Much?” (available for Community Speaks subscribers only), we found that online privacy is one of the most concerning topics in online users’ minds. Two-thirds of US online consumers report being very concerned about the recording and collection of their personal details by websites. 

Read more

How Data Sensitive Are Your Customers?

Blog post info and actions

Blog post body

Fatemeh Khatibloo

Most marketers and customer intelligence (CI) pros tend to lump together most types of customer data. Sure, things like passwords and social security numbers are considered more "sensitive," but for the most part, the systems that protect all the data -- and the privacy policies that communicate their capture and governance -- are largely the same.

This model used to work just fine. But in an era where consumers are becoming increasingly aware of data capture, data breaches, and the value of personal data, it's not enough to treat all data (nor all customers) the same. In researching our latest report, "Personal Identity Management Success Starts With Customer Understanding," we found that:

  • Individuals see different types of data differently -- they're most worried about what we consider individual identity data, and far less concerned about the capture and use of their behavioral data
  • Most consumers are willing to share their data in exchange for value. But, what they consider "valuable" is very age-dependent -- in other words, the same consumer isn't equally motivated by discounts and cash rewards. 
  • A surprising number of consumers "just say no" if a privacy policy doesn't pass their sniff test, and the numbers seem to be rising. 
Read more

How Privacy Legislation Will Change The Ad Network/Exchange Paradigm -- Pulling Back The Curtain Of Oz

Blog post info and actions

Blog post body

In my recent paper titled Privacy Laws Force Rich Dialogue with Customers I outlined some of the looming legal directives that will change the targeting dialogue between brands and consumers and how the industry should respond. 

The ad network ecosystem will ultimately be forced the pull back the curtain of Oz to reveal to customers the machines and levers behind targeting technology. As illustrated in my paper, the predominant approaches are full targeting vesus opt out, but this is not enough choice. Segmentation strategies and targeting techniques used by ad tools are hidden within engines and will need to be surfaced to customers so that they may verify, modify, and importantly play with them.

This isn’t easy, however, as the mathematical vernacular of targeting technology with confusing terms such as graphs, nodes, and vectors are unintelligible to most. Metaphors will be needed to distill the complexity for customers. One of the approaches to take will be similar to how optometrists work by showing the customer different "lenses" (perceptions) held about them and subsequently allowing them to choose. These "lenses" may not just be rich segmentation concepts but will include social and individual assumptions too.

Where does this transparency and explanation rationale take us?

Read more

Carrier IQ: When CI Should Be Damned

Blog post info and actions

Blog post body

Rob Brosnan

Did you see the news about Carrier IQ covertly capturing Android users' activities for analysis by carriers? Trevor Eckhart, who analyzed the application, writes:

Carrier IQ software, which consists of embedded software on mobile devices and server-side analytics applications, enables mobile operators and device OEMs to understand in detail a wide range of performance and usage characteristics of mobile services and devices. These include both network-facing services such as core voice and data offerings, as well as non-network-facing capabilities such as music players, cameras and other side loaded media, in order to assist with product and service development and roll-out [emphasis added].

Customer Intelligence is not a spying operation. The promise of CI is not reductively commercial. Instead, proper CI practices help businesses – with their customers' consent – to understand the preferences and needs of their customers. Firms also use CI processes and technologies to determine and enforce an optimal and respectful relationship with customers.

What lessons does the Carrier IQ incident highlight?

  • CI pros have an ethical responsibility to customers. CI pros are customer advocates after all. They cannot truly represent customers unless they also help their employers understand appropriate boundaries for data capture. Helping customers also helps businesses, protecting firms from the risk of public outrage and litigation. CI pros: Help your employers understand when data capture goes too far.
Read more

Are You Ready For A World Of Consumer-Managed Data?

Blog post info and actions

Blog post body

Fatemeh Khatibloo

It has been a few years since Forrester delved deeply into the issues surrounding consumer privacy, and in that time, an awful lot has changed:

  • Facebook Connect, Google ID, Yahoo Identity, and Sign In With Twitter have emerged as a whole new way of being recognized across a myriad of websites across the Net. As little as a decade ago, most adults online couldn’t have imagined the convenience of single sign-on.
  • At the same time, data capture methods have not only proliferated, they’ve become exceptionally sophisticated. Tactics like Flash-based cookies and deep packet sniffing surreptitiously collect behavioral data about online consumers, while loyalty and membership cards provide more insight into consumers’ purchasing habits at the line item level than ever before.
  • All that extra data is hard to protect without big changes to governance policies and technology stacks, and when data breaches happen, they're public and ugly.
  • Finally, legislators have forged ahead with regulations to protect consumer data. Europe's answer is the Data Protection Directive – a regulatory framework that governs the capture, management and use of consumer data, while in the US, congressional leaders, egged on by consumer advocacy groups, are introducing bills designed to limit data capture and to provide remediation in cases of data and security breach.
Read more

The Big, Gray, Squishy, And Constantly Moving Line Of Social Data Privacy

Blog post info and actions

Blog post body

Zach Hofer-Shall

Last week at Facebook's developer conference, the massive social network announced a few big changes. Loosely veiled in the enhanced features is a startling amount of new data, giving Facebook even more capabilities to track and learn from consumers sharing behavior, networks, purchases, songs they listen to, and so on.

While there were no direct announcements about what this means for marketers, it's still brought a fair amount of discussion around social marketing, customer data, and the future of consumer privacy online. Last week I tweeted a link to this summary (and pointed out the URL's passive aggressive analysis). But since then, the concerns around Facebook's use of data have only increased. So what does this mean to Customer Intelligence professionals?

The way I talk about customer privacy and social data - the information you can collect and manage from social media channels - is that it's a big, gray, squishy, and constantly moving line. It's not black and white. It's not a thin line. And the overall sentiment about how privacy online works seems to shift constantly. The best thing Customer Intelligence teams can do today is to make sure they're on the right side of that line.

Read more

Your Common Questions On EU Privacy Regulations Answered

Blog post info and actions

Blog post body

Chenxi Wang

The security group at Forrester has been handling a steady stream of client inquiries regarding EU data privacy laws, from both EU and North America clients. While there are many good legal sources out there, we thought it'd be a good idea to compile a list of common Q&A questions about EU privacy laws into a report, to serve as a definitive information source for Forrester clients.

The report, titled: “Q&A: EU Privacy Regulations,” is now live on Forrester's website. It is not our intention, by writing this report, to give legal advice. Rather, we envisioned this report to be a repository of the most important information regarding EU privacy laws, updated every 18 months or so. The report has a wealth of information, including links to actual information sources – be that EU's data protection directive web site or interesting studies/analysis done by external parties. For example, one noteworthy study on US Safe Harbor  is by Chris Connelly from Galexia consulting. He looked at 2,170 US companies that claimed to be Safe Harbor compliant. Out of these, 940 do not provide information on how to enforce individuals' rights; 388 were not even registered with the US Department of Commerce.

The report also contained information on Model Clauses and Binding Corporate Rules, for which we are beginning to see increased interest. We also discussed new and pending privacy laws in the report, including the EU “cookies” directive and EU's view on geo-location privacy.

Read more

Mobile Location Becomes Invisible

Blog post info and actions

Blog post body

Thomas Husson

Maps and navigation are not yet mainstream, but they are more useful as product features anyway. This means that location is no longer a service like maps or navigation but is increasingly an enabler of new product experiences.

  • Location and maps are increasingly becoming features of new mobile products and services.
  • Location will happen automatically, behind the scenes. Adjustments will be invisible from a user perspective (think about the automatic weather update on your home screen widget).
  • Relevancy of local data will improve quickly. The era of basic point of interest (POI) information is over. Enriching addresses with more accurate information on opening hours, real-time data (traffic information, promotions, etc.), product/brand data, dynamic data (consumer reviews, inventory information) will deliver greater consumer benefits.
  • New algorithms will bridge the physical and digital worlds. Coupling more accurate local data with user context and other sources of information will foster the development of crowdsourcing and predictive analysis (e.g., predicting traffic congestion or air quality monitoring). Moving forward, these new algorithms will have far-reaching consequences well beyond mobile.
Read more