If you thought a theft of customer data was a marketing nightmare before the new General Data Protection Regulation (GDPR), it’s time to wake up.
Under GDPR regulations for companies handling the personal data of EU citizens, companies must identify the breach, find out which individuals have been impacted and notify them — all within a 72-hour period.
But those three days probably seem like a luxurious vacation to banks in India, according to Ted Bardusch, chief information security officer of customer engagement hub Usermind.
Two years ago, The Reserve Bank of India decreed that any banks suffering a security breach must report it in no more than six hours.
Whatever the actual number of hours in your jurisdiction, the trend is clear. The length of time that companies have to publicly respond to a security breach is getting shorter and shorter.
Aside from better security measures, Bardusch suggests that brands should now extend customer journeys past their end zone of a loyalty or brand advocate stage and into a set of steps to handle customer interactions during a security breach. Obviously, the more planning a brand does beforehand, the faster it can respond.
[Read the full article on MarTech Today.]
About The Author
Barry Levine covers marketing technology for Third Door Media. Previously, he covered this space as a Senior Writer for VentureBeat, and he has written about these and other tech subjects for such publications as CMSWire and NewsFactor. He founded and led the web site/unit at PBS station Thirteen/WNET; worked as an online Senior Producer/writer for Viacom; created a successful interactive game, PLAY IT BY EAR: The First CD Game; founded and led an independent film showcase, CENTER SCREEN, based at Harvard and M.I.T.; and served over five years as a consultant to the M.I.T. Media Lab. You can find him at LinkedIn, and on Twitter at xBarryLevine.