Published by: GlobeNewswire
Findings from ZL Technologies and Osterman Research study highlight major obstacles and uncertainties in the management of employee personal data and GDPR compliance
MILPITAS, CA–(Globe Newswire – December 5, 2017) – ZL Technologies, Inc. (ZL), a leader in unified governance, eDiscovery, compliance, and analytics for large enterprises today released the findings of a major study on data privacy conducted by Osterman Research. The study surveyed 258 IT decision makers and influencers at American organizations of 2,000 employees or more, all of who were familiar with their organization’s data protection policies. The survey asked questions concerned with the processing and management of employee and employee-created personal data, with an emphasis on data privacy and compliance with the General Data Protection Regulation (GDPR).
The findings indicated that a majority of large organizations process several types of employee-created personal data for analytics purposes, including email, files, HR records, and web browser usage, and within these organizations there exists widespread concern among employees about the privacy of this data. There was generally a lack of effective policies and technologies in place to adequately manage personal data, although organizations with EU customers were more likely to be able to do so.
A key finding of the study, only 23% of IT decision makers and influencers were “very confident” their own personal data privacy was properly managed. Though the majority were “reasonably confident,” over 20% were “only somewhat confident” or less. That a group with inside knowledge of organizational data management practices would lack full confidence in their own data privacy may point to underlying issues in the state of data management.
Other notable findings included:- 73% of organizations have analytics initiatives in place that process employee personal data
- 60% of organizations had unmanaged personal data in their file shares and other collaboration spaces
- Only 19% of respondents were “very confident” that their organization could identify and remediate data on a given employee in order to comply with GDPR
- 65% of organizations had employees who had expressed concern that personal data created on their devices might be processed for business purposes
“Most organizations operate today with large volumes of unmanaged personal data across the organization, data that they cannot easily locate or process for compliance or other purposes,” said Michael Osterman, President, Osterman Research Inc. “This puts them at risk on a number of levels, from losing employee confidence in how their data is managed to the potentially more serious issue of non-compliance with key regulations, such as the GDPR. To mitigate these risks, decision makers need to understand the risks they face and implement the appropriate processes and technologies that will enable them to manage employees’ personal data much more effectively.”
Organizational concerns around complying with the globally enforceable GDPR have recently energized personal data privacy initiatives in large enterprises. Often overlooked, however, are issues surrounding employee personal data, which could potentially cause massive fines when GDPR goes into effect this May.
“In the US, we have not been sensitized to protecting the privacy of personal data,” said Kon Leong, CEO, ZL Tech. “Only now with GDPR on the horizon are organizations beginning to take note of this vital issue. As analytics and information technologies both make major strides and as new regulations push boundaries, it’s crucial that we rethink how we handle privacy going forward.”
Please click here to find the full research report or learn more about ZL Tech’s innovative approach to managing personal data for GDPR compliance.
About ACC
The Association of Corporate Counsel (ACC) is a global bar association that promotes the common professional and business interests of in-house counsel who work for corporations, associations and other organizations through information, education, networking opportunities and advocacy initiatives. We anticipate and understand the needs of the in-house bar; help members deliver services to their corporate clients efficiently; promote the value of in-house services; influence the practice of law as it affects the in-house bar; and deliver a mix of relevant, timely services including information, education, networking and advocacy. With more than 40,000 members employed by over 10,000 organizations in 85 countries, ACC connects its members to each other and to the people and resources necessary for their personal and professional growth.