Privacy and human rights in an AI world

Issue 3 2022 Security Services & Risk Management

Technology is a force for positive change in our lives. But the more we depend on it, the more we generate data, a lot of data. That’s why data privacy has become such a critical issue. Increasingly, customers demand it, governments enforce it, and smart organisations build it into their strategies, processes and products.

But to find out just where we stand on data privacy, Cisco conducted its 2022 Data Privacy Benchmark Study. Based on an anonymous survey of 4900 security and IT professionals from 27 geographies, the report highlights some of the key trends and concerns that are emerging in the privacy space, including the impact of AI.

Among the key findings: A full 90% of respondents now see data privacy as a business imperative. Another 90% would not buy from an organisation that does not protect data. And these concerns remained consistent across regions and cultures.

“Over the past few years, we’ve seen privacy mature and expand,” said Robert Waitman, Cisco’s director of data privacy and an author of the report. “It’s now critical for businesses because customers are driving a lot of the imperative. We’ve seen budgets expand, along with the benefits of those investments.”

These changes also reflect a shift in awareness. Data privacy is viewed as a fundamental human right by the UN, many governments, and companies like Cisco. So, the growing business imperative is increasingly infused with a higher purpose.

“When I started in privacy almost 20 years ago, it was really a brand exercise,” said Harvey Jang, Cisco’s vice president and chief privacy officer. “You had marketing teams leading privacy. And then with GDPR (Europe’s General Data Protection Regulation), things shifted to the compliance side because companies feared getting fined 4% of revenue. Now, we’re seeing the pendulum swinging again, with privacy driven by business need and brand.”

Attitudes towards legislation also illustrate the mainstream embrace of data privacy. Fully 83% of respondents believe that data-privacy laws have a positive impact, with only 3% negative. “That’s an unbelievably strong endorsement of the many privacy laws that have been enacted around the world,” said Waitman.

However, he was quick to add that compliance with such laws, which exist in about two-thirds of countries around the world, are increasingly viewed as table stakes. “Customers are saying, ‘we expect that your company specifies a clear privacy policy that aligns with ours,’” Waitman continued. “Customers often demand that organisations set higher standards than those specified in regulatory requirements.”

Privacy in an era of emergent technologies

Despite progress in data privacy awareness, concerns persist. “People we surveyed don’t feel they can adequately protect their data,” said Waitman. “They feel like they do not understand, control, or manage what is happening with their data.”

Increasingly, that translates into a hesitance around new technologies. 46% of respondents do not understand what organisations are collecting and doing with their data, and this may limit their interest in new technologies like AI. “People are reticent to engage with new technologies,” Jang stressed.

Another 56% of respondents expressed concerns about how businesses are using AI today. “Respondents are concerned about how businesses may be using AI to make automated decisions that may materially impact their lives,” said Waitman.

As new technologies emerge, Cisco is considering its approach to data privacy in a way that ensures a continuous engagement with customers and their feedback. “The applications of AI are wide-ranging and increasingly important to our customers,” said Anurag Dhingra, Cisco vice president and CTO for Collaboration. “We need to be sure that we are building systems that are fair and equitable and serve Cisco’s mission to power a secure and inclusive future for all.”

In the technology industry, several companies are considering governance of AI in a way that is ethical and responsible. This has been in response to several technological and operational challenges, particularly around bias and diversity. “We need to ensure that explicit and implicit human biases do not become ingrained or amplified in AI systems that we are building,” Dhingra warned. “It’s a big challenge, but it’s all about fairness and privacy and security.”

“We’ve established six foundational principles to guide our decision making and development around AI,” Dhingra said. The guiding principles are transparency, fairness, accountability, privacy, security and reliability, all of which are relevant to AI’s impact on ethics and human rights.

“Our recommendation is that firms think hard about any use of AI where decision making may be somewhat hidden from the customer,” he concluded.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Visualise and mitigate cyber risks
Security Services & Risk Management
SecurityHQ announced its risk and incident management capabilities for the SHQ response platform. The SHQ Response Platform acts as the emergency room, and the risk centre provides the wellness hub for all cyber security monitoring and actions.

Read more...
Eighty percent of fraud fighters expect to deploy GenAI by 2025
Security Services & Risk Management
A global survey of anti-fraud pros by the ACFE and SAS reveals incredible GenAI enthusiasm, according to the latest anti-fraud tech study by the Association of Certified Fraud Examiners (ACFE) and SAS, but past benchmarking studies suggest a more challenging reality.

Read more...
Deception technology crucial to unmasking data theft
Information Security Security Services & Risk Management
The ‘silent theft’ of data is an increasingly prevalent cyber threat to businesses, driving the ongoing leakage of personal information in the public domain through undetected attacks that cannot even be policed by data privacy legislation.

Read more...
Data security and privacy in global mobility
Security Services & Risk Management Information Security
Data security and privacy in today’s interconnected world is of paramount importance. In the realm of global mobility, where individuals and organisations traverse borders for various reasons, safeguarding sensitive information becomes an even more critical imperative.

Read more...
Proactive strategies against payment fraud
Financial (Industry) Security Services & Risk Management
Amid a spate of high-profile payment fraud cases in South Africa, the need for robust fraud payment prevention measures has never been more apparent, says Ryan Mer, CEO of eftsure Africa.

Read more...
How to prevent and survive fires
Fire & Safety Security Services & Risk Management
Since its launch in August 2023, Fidelity SecureFire, a division of the Fidelity Services Group, has been making significant strides in revolutionising fire response services in South Africa.

Read more...
A long career in mining security
Technews Publishing Editor's Choice Security Services & Risk Management Mining (Industry)
Nash Lutchman recently retired from a security and law enforcement career, initially as a police officer, and for the past 16 years as a leader of risk and security operations in the mining industry.

Read more...
Risk management: There's an app for that
Editor's Choice News & Events Security Services & Risk Management
Zulu Consulting has streamlined the corporate risk management process with the launch of Risk-IO, a web-based app designed to consolidate and guide risk managers through the process, monitoring progress as one proceeds.

Read more...
Integrated information platform for risk management
Editor's Choice News & Events Security Services & Risk Management
Online Intelligence recently launched version 7 of its CiiMS risk and security platform. Speaking to SMART Security Solutions after the launch event, the company’s Arnold van den Bout described the enhancements in version 7.

Read more...
Global Identity Fraud Report revealing eight-month ‘mega-attack’
Editor's Choice Security Services & Risk Management
AU10TIX recently released its Q4 Global Identity Fraud Report, with the research identifying two never-before-seen attack patterns, with the worst case involving 22 000+ AI-generated variations of a single U.S. passport.

Read more...