Showing posts with label data security. Show all posts
Showing posts with label data security. Show all posts

Monday, March 9, 2015

Apple's big bet on consumer trust and privacy

The Apple Watch understandably took the limelight at Apple's big launch event today. But what is becoming increasingly clear is that to really understand the company we need to see it as so much more than simply a technology company. And we have to look beyond its products, however alluring they might be.

Nowhere is this more evident than in the area of corporate responsibility. For much of the past few years, the corporate responsibility community has been focusing hard on Apple's product supply chain. And for good reason, with a spate of labour violations plaguing the company (most recently from the BBC in December last year) despite some impressive commitments to responsible sourcing. But with the launch of the Apple Watch and its extended capabilities for health monitoring, research and diagnosis, along with the rapid growth of its Apple Pay system, it is the company's capabilities in data management and security that will likely define its reputation for corporate responsibility over the next decade.

As Tim Crook noted at the launch, the Apple Watch is "the most personal product we've ever made". It is not only wearable but collects real time data on users' health and fitness, enables them to make contactless payment direct from their financial services provider, and provides the possibility for a host of other applications relying on personal data. Keeping all of this data private and secure is going to be a big test for the company. Their success now will rely just as much on maintaining the trust of their consumers as it will on wowing them with cool new gadgets.

Apple is not alone in this of course. Other technology companies such as Facebook, Sony, Microsoft and Google have already learnt to their cost the necessity for maintaining the confidence of their customers in terms of privacy and security. Apple has had its own scares with breaches of its iCloud service, but its exposure to data security risks are only going to accelerate now that it is going increasingly personal. Apple is now not just in the technology industry but also in financial services and health services where the privacy and security concerns are accentuated even further.

Apple is making a big bet on consumer trust because it has a strong reputation for digital security already (say, compared to Microsoft) and it has less of the challenges in managing privacy compared to some of its others competitors. This is because it does not rely on ad revenue (and therefore intimate knowledge of its consumers) to drive profitability, unlike say, Google and Facebook. So it is already out ahead in many important respects. Whether it can maintain that pole position will remain to be seen. But what is clear is that Apple's reputation for corporate responsibility, and indeed its success in personal devices and services more generally, will increasingly be won and lost in the area of consumer trust and privacy rather than product design and execution alone.

Image copyright Martin Hajek. Reproduced under Creative Commons Licence

Friday, May 13, 2011

Will privacy and security be critical differentiators in cloud computing?


The debut this week of Google's new web-only Chromebook laptop, coming hot on the heels of Sony's massive data security breach just a few weeks ago suggests that data security is becoming increasingly critical for the success of technology companies. Google, no stranger to accusations over infringements of privacy, is upping the ante with the release of a computer that, rather than running software and storing files on its own hard drive, will instead rely predominantly on cloud computing. Yes, that means everything that you'd usually keep stored on your laptop will actually be held somewhere in a vast data center run by Google ... and of course, everything that you do can be tracked and recorded because you're signed-in and doing it online.

Although the Chromebook itself may not become quite the challenger to Microsoft and their Windows operating system that Google hopes it will be, the shift to cloud computing (which anyone using Picasa, Google Docs, Dropbox or numerous other applications is already very much part of) is sure to continue apace. But cloud computing raises a number of troubling ethical issues. On the one hand there are the environmental problems associated with running servers capable of storing such huge amounts of data. And then, of course, there are the privacy and data security issues that are faced by any company storing so much personal data online.

In recent weeks, consumers have been made all too aware of these privacy and security issues because of several high profile data disasters. Last month, for example, Amazon, which has been a leader in cloud computing, was forced to shut down its service for several days. A number of companies using its services were paralyzed and some even lost potentially valuable data. Then Sony's travails with hackers reached a new zenith when the company was forced to concede that more than 20,000 of users of its online gaming system had their financial details stolen. Osama bin Laden even got in on the action when a swath of spam Facebook messages purporting to be photos and videos recording the death of the former Al Qaeda leader turned out, according to the Financial Times, to be malicious malware designed to phish for passwords and financial data from infected computers. Ironically, even as we tried to publish this post, Blogger experienced a service disruption that meant that we were unable to publish for more than 24 hours. So much for the instantaneity of social media! All of this added up to bad news for technology companies looking to convince customers of the safety and security of their products and services.

This then raises the question of whether data security and privacy protection will increasingly become critical areas of competition between leading technology companies, especially those relying on cloud computing, rather than just being a kind of necessary evil for everyone concerned. Microsoft, whose operating systems and internet software had long been plagued with security problems, certainly seemed to be thinking this way when it launched its Windows 7 operating system. The company has long been compared unfavourably in terms of security to Apple's Mac OS - but appears to have regained some ground with its latest version. But as more and more personal data moves to the cloud, and companies like Facebook and Google become increasingly involved in recording, using and selling data related to our usage stats and preferences, this is likely to affect a wider range of companies ... and potentially in an even more significant way. Yesterday's revelations that Facebook employed a leading PR company to plant negative stories in the media about Google's privacy policies gives some indication of just how high the stakes are becoming. And nothing focuses corporate attention more than the threat of multiple lawsuits, which is the latest ignominy faced by Sony in the fall-out from its hacking attack.

Despite all this, there are still reasons to doubt whether security and privacy will ever become major differentiators in the battle for technology market share. Unlike speed, performance and design, security is a tricky intangible that is difficult to evaluate up front. And besides, despite their criticisms of technology companies, most end users in practice tend to display a fairly carefree disregard for security issues, and even for their own privacy protection. After all, how many people actually read all of those terms and conditions when they download another Facebook app or install a new piece of software? With commercial users the equation is different, of course, but for the average Joe, security is a concern but not one that yet impacts significantly on their technology choices.

In the end, a better way of looking at this might be for technology companies to start looking at privacy and security as pre-competitive issues. That is, rather than competing on the quality of their privacy protections, why not collaborate with one another to improve standards across the industry. After all, a major hack at Sony, an outage at Amazon, or a spate of malware at Facebook threaten the reputation for security across the board not just for the individual company that is targeted. Problems at one company can spell reputational damage for the industry as a whole. Sure, healthy competition can drive innovation in new security systems. But so too can healthy cooperation. And in the long run it might just be more effective, and provide a better service for skeptical consumers unsure of how far they want to put their trust in tech companies.

Picture by samplereality. Reproduced under Creative Commons licence.