About the IAPP

 

Study: More Companies Are Turning to Privacy Expertise To Enhance Security Results and Protect Against Data Breaches

IAPP and TRUSTe find 50 percent of companies have increased involvement of privacy professionals on their information security teams

SAN FRANCISCO (March 1, 2016) – A joint study released today by the International Association of Privacy Professionals (IAPP) and TRUSTe finds 50 percent of companies over the past two years have increased the involvement of privacy professionals on their information security teams to enhance the prevention of data breaches.

The study - “How IT and Infosec Value Privacy” – polled 550 privacy, IT and information security professionals across the globe in December and January. The findings reveal a significant increase in privacy-related investments, with 42% of firms spending more on privacy technology, nearly keeping pace with increases in security tools. The study also confirms the well-documented extent of the cybersecurity threat as 39 percent reported an incident in the last two years and increased their infosecurity and privacy investments alike to address the growing threat.

“The study shows a change in the way companies are protecting themselves against cybersecurity threats,” IAPP President and CEO J. Trevor Hughes, CIPP said. “As the threat of cybersecurity breaches increases every day, companies are getting smarter about protecting themselves against this threat, and more are recognizing the importance of security and privacy working hand in hand to mitigate the risk and enhance accountability.” 

In fact, findings from the study show the most important way to protect against cybersecurity risk is through constant communication between the privacy and security teams, many of which are now populated with staff from each discipline.

Companies are also using core privacy functions to better understand the extent of their corporate risk, with 42 percent of companies increasing investment in privacy technology, 41 percent increasing use of privacy impact assessments and data inventory and classification, and 40 percent are increasing use of data retention policies.

“They say you can’t have privacy without security but this research shows it cuts both ways and privacy has a vital role to play in achieving security objectives and mitigating data breach,” TRUSTe CEO Chris Babel said. “Privacy adds value through data classification and minimization, establishing good policy, and communicating thoroughly so that organizations understand the value of the information they have and can better plan how to protect it and allocate resources. After years of reliance on external counsel and auditors the research also finds privacy technology spending is now outpacing investment in personnel,” said Babel.

Additional highlights of the study include:

• Some 75 percent of IT/infosecurity professionals ranked data minimization and data inventory and mapping as the most important privacy functions in mitigating the risk of a data breach, followed by privacy policies and privacy impact assessments.
• Privacy technology spending is outpacing investment in personnel, as privacy growth maps that of infosecurity over the last 10 years, and spend on privacy related technology was ahead of external counsel (34 percent) and external auditors (26 percent). 
• In addition, although regulatory enforcement actions are rare, firms find privacy investments highly important after they occur. When a regulator became involved, the privacy budget increased and the emphasis on privacy practices became more pronounced.

About the IAPP

The International Association of Privacy Professionals is the world’s largest association of privacy professionals with more than 24,000 members across 83 countries. The IAPP is a not-for-profit association that helps to define and support the privacy profession globally. More information about the IAPP is available at www.iapp.org.

About TRUSTe

TRUSTe powers privacy compliance and trust by enabling businesses to use data across their customer, employee and vendor channels. We have nearly 20 years’ experience and a team of over 150 professionals dedicated to providing data privacy management solutions and services, including assessments, certifications and our SaaS-based Platform. The Data Privacy Management Platform provides control over all phases of privacy; from conducting assessments and implementing compliance controls to managing ongoing monitoring. Companies worldwide rely on TRUSTe to minimize compliance risk and protect their brand. For further information see www.truste.com

                                                                        ###

IAPP Media Contact:
Lindsay Hinkle
lhinkle@iapp.org
(o) 603-427-9200  (c) 603-674-8168

TRUSTe Media Contact
Eleanor Treharne-Jones
Eleanor@truste.cpm
415 430 8945