Gartner, the world's authoritative IT research company, released five future privacy trends

Gartner (Gartner) is one of the most authoritative IT research and consulting companies in the world. It was founded in 1979 and is headquartered in Stanford, Connecticut, USA. Its research scope covers the entire IT industry, including IT research, development, evaluation, application, market and other fields, and provides customers with objective and fair demonstration reports and market research reports.

"According to our forecast, by the end of 2024, the personal data of 75% of the world's population will be protected by modern privacy regulations ," said Nader Henein, research vice president at Gartner. .Since most organizations do not yet have a dedicated privacy practice, the responsibility for privacy falls to the technical staff, and more specifically, to the security team led by the chief information security officer."

With privacy regulations expected to be implemented in dozens of jurisdictions over the next two years, many organizations feel the need to start working on privacy initiatives now. According to Gartner, by 2024, the average annual privacy budget of large enterprise organizations will exceed $2.5 million .

According to Gartner research, with the increasing number of privacy regulations around the world, there are challenges in protecting personal data and complying with regulatory requirements. By 2024, the "five major privacy trends" that enterprises and institutions should pay attention to are:

data localization
Privacy Enhanced Computing Technology
AI governance
Centralized Privacy User Experience
Remote mode evolves to "everything is a hybrid"

data localization

In a digital society without borders, it may seem counterintuitive to seek to exercise control over the country where data resides, yet many new privacy regulations require it, directly or indirectly.

Security and risk management leaders are faced with a regulatory environment of different scales, and need to adopt different localization strategies in different regions, which makes enterprises adopt a new cloud service design suitable for all service models in order to deal with the strategic risks of transnational business and get method. As a result, data localization planning will become a top priority in cloud service design and acquisition .

Privacy Enhanced Computing Technology

Data processing, sharing and analyzing data with multiple parties in untrusted environments such as public clouds has become fundamental to the success of organizations. As analytics engines and architectures become more complex, vendors must design privacy protection into the design early, rather than adding it after the product is complete. Enterprise organizations have applied AI models to many fields, but they must also train AI models, which brings new hidden dangers to privacy protection.

Unlike common data-at-rest security controls, privacy-enhanced computing (PEC) enforces protections on data in use. As a result, organizations can perform data processing and analysis activities that were previously impossible due to privacy or security concerns. Gartner predicts that by 2025, 60 percent of large enterprise organizations will use at least one PEC technology to support analytics, business intelligence, and cloud computing applications .

AI governance

A Gartner survey found that 40 percent of organizations are experiencing privacy violations by AI, with only a quarter of those being malicious . When organizations process personal data, whether they rely on pre-integrated AI modules in manufacturers' products or use independent platforms managed by internal data science teams, there are obvious risks of privacy leakage and personal data abuse.

"Most of the AI models currently running in enterprise organizations are integrated into larger solutions with little monitoring to assess the associated privacy impact," Henein said. These embedded AI capabilities are used to track employee behavior, assess consumption sentiment and build “smart” products that learn continuously on the fly. In addition, the data being fed into these learning models today will influence decisions years from now. In the future, when AI regulations are more mature, businesses will It will be nearly impossible for organizations to clean up the “toxic” data collected in the absence of an AI governance plan. IT leaders will have to abandon the entire system, which will cost the organization and its own standing.”

Centralized Privacy User Experience

Rising consumer demands for data subject rights and rising expectations for transparency have led organizations to place greater emphasis on creating a centralized privacy user experience (UX). Forward-thinking businesses understand the benefits of consolidating all elements of a privacy user experience, including notifications, cookies, consent management, and Subject Rights Request (SRR) processing, into one self-service portal. This approach not only provides convenience to key user groups, customers and employees, but also saves significant time and money. Gartner predicts that by 2023, 30% of consumer-facing organizations will have self-service transparency portals that support preference and consent management .

Remote mode evolves to "everything is a hybrid"

As individuals adopt more hybrid interaction modes in work and life, personal data processing activities such as tracking and monitoring will become more frequent, and privacy risks have become extremely serious.

A fully hybrid approach to interaction has many implications for privacy. At the same time, employee productivity and satisfaction with work-life balance have also increased across industries and sectors. Organizations should take a people-centred approach to privacy, minimizing the use of surveillance data and using it with a clear purpose, for example: improving the employee experience by removing unnecessary friction, or signaling health risks to employees. Signals to reduce burnout risk.

at last

The above are the five major privacy trends for 2024 released by Gartner. Now that one year has passed, have you noticed any changes in privacy protection around you? Welcome to leave a message to discuss.

PrimiHub is an open source privacy computing platform built by a team of cryptography experts. We focus on sharing technologies and content in privacy computing fields such as data security, cryptography, federated learning, and homomorphic encryption.