COVID-19: Data privacy risks and potential opportunities
- 20 January 2021 (5 min read)
Executive summary:
- The pandemic has presented an opportunity to rethink the dynamics of data privacy risks and opportunities for technology companies
- Our engagement discussions with investee companies has revealed that tech firms have been taking serious steps to mitigate data privacy risks during the pandemic – but more work is needed
- The crisis has accelerated the digital transformation and highlighted the impact technology is having on society from a professional, personal and public health perspective
Social sensitivities around personal information held by external parties, particularly technology firms, has rapidly grown in recent years - and it’s a concern which has escalated in the wake of the COVID-19 pandemic. Before the global lockdown, we published1 a piece highlighting the risks and opportunities relating to data privacy for technology companies and investors. We concluded that while the collection and use of personal data is a major driver of tech companies’ commercial models, they also represent greater risk with regards to data privacy. This is a result of stricter global regulations and subsequent increased scrutiny for firms exposed to privacy issues.
The coronavirus crisis has affected multiple aspects of many people’s lives – including how individuals rely on technology to assist and enable personal and professional responsibilities. Our relationship with tech companies has only accelerated since lockdowns were imposed. As we slowly adjust to, and even embrace this new approach to life, many of us have placed further trust in companies and how they treat our personal data.
We believe this pandemic offers an important opportunity for rethinking risks and opportunities in managing data privacy. This research paper explores not just the downsides, but also the upsides and wider positive societal outcomes linked to tech companies that have been revealed by COVID-19.
In our view, the pandemic represents an opportunity to reshape people’s trust in tech firms, to illustrate what is a legitimate use of data and then to change the way we – and technology companies – manage and regulate the use of personal data. As explained by AXA Research Fund, Scientific Board member, Lawrence Lessig: “We can’t control access to data. It’s just not controllable. What we can control is its use.” This is what we also identified from our engagement activities with tech companies, and we believe that the crisis could lead to a paradigm shift in the way we approach data privacy.
The risks are still real
COVID-19 did not change our findings and the key risks associated with data privacy. Corporations collecting and processing personal data are still exposed to reputational, operational and regulatory risks related to users’ and customers’ privacy.
We built on our findings to run an engagement programme with tech companies exposed to data risks and opportunities. Given these conclusions, during 2020 we engaged with more than 20 technology firms in terms of how their way of working compares with the good practices we identified around:
- Transparency on data privacy policies and practices
- Oversight of the issue at board level
- Data collection minimisation
- Privacy by default
The first positive outcome of our engagement activities is that companies overall were transparent, and happy to have an open dialog with us on data privacy issues. Fifteen firms out of 20 responded to our requests. Of those we spoke to, we had in-depth, positive discussions on their approach to privacy and how the pandemic impacted their business. We also felt that tech companies now want to better understand investors’ expectations around data privacy. Our engagement highlighted that tech companies are acknowledging the materiality of data privacy and taking steps to mitigate risks. Through public disclosure and our dialog with firms, we found that 65% consider data privacy as one the most material environmental, social and governance (ESG) issues they are facing - and is one of their sustainability priorities. With regards to management of privacy issues and day-to-day practices, we often got positive responses from companies. For example, some of the best practices we have seen through our engagement include, among others:
- A company that established a dedicated privacy committee at board level
- A company applying a strict non-content based and behavioural targeting
- A company that published a human rights policy that encompasses privacy issues
Lastly, we were glad to hear that tech companies we have been in discussions with, agree with the main message we have regarding data privacy. This is that responsible privacy practices are key in building and maintaining user trust, therefore allowing these to create and deliver sustainable, long-term value through the collection and processing of data. Of course, work still needs to be done. Some firms did not reply to our requests and we identified areas of improvement for tech companies; therefore, our engagement programme around data privacy will continue in 2021.
Not for Retail distribution
This document is intended exclusively for Professional, Institutional, Qualified or Wholesale Clients / Investors only, as defined by applicable local laws and regulation. Circulation must be restricted accordingly.
This promotional communication does not constitute investment research or financial analysis relating to transactions in financial instruments as per MIF Directive (2014/65/EU), nor does it constitute on the part of AXA Investment Managers or its affiliated companies an offer to buy or sell any investments, products or services, and should not be considered as solicitation or investment, legal or tax advice, a recommendation for an investment strategy or a personalized recommendation to buy or sell securities.
Due to its simplification, this document is partial and opinions, estimates and forecasts herein are subjective and subject to change without notice. There is no guarantee that forecasts made will come to pass. Data, figures, declarations, analysis, predictions and other information in this document is provided based on our state of knowledge at the time of creation of this document. Whilst every care is taken, no representation or warranty (including liability towards third parties), express or implied, is made as to the accuracy, reliability or completeness of the information contained herein. Reliance upon information in this material is at the sole discretion of the recipient. This material does not contain sufficient information to support an investment decision.
Before making an investment, investors should read the relevant Prospectus and the Key Investor Information Document / scheme documents, which provide full product details including investment charges and risks. The information contained herein is not a substitute for those documents or for professional external advice.
The products or strategies discussed in this document may not be registered nor available in your jurisdiction. Please check the countries of registration with the asset manager, or on the web site https://www.axa-im.com/en/registration-map, where a fund registration map is available. In particular units of the funds may not be offered, sold or delivered to U.S. Persons within the meaning of Regulation S of the U.S. Securities Act of 1933. The tax treatment relating to the holding, acquisition or disposal of shares or units in the fund depends on each investor’s tax status or treatment and may be subject to change. Any potential investor is strongly encouraged to seek advice from its own tax advisors.
Past performance is not a guide to current or future performance, and any performance or return data displayed does not take into account commissions and costs incurred when issuing or redeeming units. The value of investments, and the income from them, can fall as well as rise and investors may not get back the amount originally invested. Exchange-rate fluctuations may also affect the value of their investment. Due to this and the initial charge that is usually made, an investment is not usually suitable as a short term holding.
Risk Warning
The value of investments, and the income from them, can fall as well as rise and investors may not get back the amount originally invested.