The first pillar focuses on expanding the scope and application of privacy laws, including broadening what is classed as personally identifiable information as well as removing exemptions for small businesses, HR records, politicians and journalists.
Individuals will gain rights similar to the EU’s data subject rights, including the right to erasure and the right to object, and companies will have to publicly share how their automated systems make decisions based on PII data. It will be a good time to be a privacy compliance officer or data protection officer: demand for people with these skills will soar, as they will be vital in ensuring organisations adhere to the new laws.
Adapting to these changes while maintaining effective marketing strategies will be challenging, to say the least.The first thing you need to do is to understand where you are now: audit your existing practices, processes and systems.