Data Privacy Day underscores data protection importance

Data Privacy Day highlights the importance of safeguarding sensitive information in an age dominated by digital data, say two cybersecurity leaders.

Ellison Anne Williams, CEO and Founder of Enveil, emphasises the role of Privacy Enhancing Technologies (PETs) in preserving data privacy throughout its lifecycle. "Data Privacy Day serves as a crucial reminder to safeguard sensitive information in an era where data dominates. As we navigate an increasingly interconnected world and transformative technologies such as AI grow their foothold in the digital economy, finding ways to protect data privacy and mitigate risk will be essential," she said.

Williams advocates for the use of PETs as a means to secure data usage and enable businesses to harness the capabilities of AI while maintaining privacy. "Privacy Enhancing Technologies (PETs) enable, enhance, and preserve data privacy throughout its lifecycle, securing data usage and allowing users to capitalise on the power of AI without sacrificing privacy or security. Organisations that truly prioritise data will incorporate PETs as a foundational, business-enabling tool that will fortify data-driven capabilities and enable data to be leveraged securely across silos and boundaries," she said.

The theme for this year's Data Privacy Day, "take control of your data", extends beyond individual data privacy concerns, according to Williams. She calls for businesses to integrate PETs into their digital strategies. "This year's Data Privacy Day theme is 'take control of your data', but that sentiment should not be limited to our personal data footprint. Businesses need to be proactive in their approach to data protection and commit to a future where PETs are woven into the very fabric of digital strategy. This will empower users to responsibly and securely harness innovative tools, such as AI and Machine Learning, in line with global regulations and compliance requirements," she added.

Edwin Weijdema, Field CTO EMEA & Cybersecurity Lead at Veeam, notes the significant changes in cybersecurity regulations such as NIS2 and DORA, which have evolved since last year's Data Privacy Day.

"This year, Data Privacy Day seems a little different. With significant cybersecurity regulations coming into force around the world, most notably NIS2 and DORA, it feels like a lot has changed since we marked this day just 12 months ago," Weijdema remarked.

He highlights the growing emphasis on corporate accountability for data resilience and the shift towards viewing data resilience as a business differentiator. "And it has. We've seen corporate accountability given increasing weight when it comes to data resilience thanks to NIS2. It's no longer a case of passing the buck – responsibility ultimately sits with the C-suite. Simultaneously, data resilience is shifting from a 'cybersecurity requirement' to a tangible business differentiator," he observed.

Weijdema also points out the persistent nature of data breaches and the necessity for C-suite executives to prioritise evidence of data resilience. "At the moment, breaches and ransomware are still a 'when', not an 'if' - and I don't see this changing. As C-suites become ever more aware, they'll be demanding to see evidence of their organization's data resilience, from their internal teams and any third-party partners," he said.

Reflecting on Data Privacy Day, Weijdema asserts that data resilience should remain a priority throughout the year, not just during awareness days. "Data Privacy Day is a good chance to reflect on how much can change in a year. After all, organizations can't rely on markers like this to nudge them on the importance of data resilience - it needs to be a priority 365 days a year," he concluded.