#dataprivacy, #datagovernance, #datacompliance are the talk of the town in #digitalmarketing and #digitalanalytics. Those are often addressed from the legal compliance point of view: how can we reduce legal risks for the business? While an ethical approach would ask: are we doing the right thing for our customers? One is about risk mitigation, the other is about customer centricity. Yet, #datasecurity and #cybersecurity is not often mentioned and still largely perceived by marketers as an IT responsibility. The #EuropeanCommission just published the Cyber Resilience Act, which has two main objectives: 1) create conditions for the development of secure products with digital elements by ensuring that hardware and software products are placed on the market with fewer vulnerabilities and ensure that manufacturers take security seriously throughout a product’s life cycle; 2) create conditions allowing users to take cybersecurity into account when selecting and using products with digital elements. The article also mentions four specific objectives: 1) ensure that manufacturers improve the security of products with digital elements since the design and development phase and throughout the whole life cycle; 2) ensure a coherent cybersecurity framework, facilitating compliance for hardware and software producers; 3) enhance the transparency of security properties of products with digital elements, and 4) enable businesses and consumers to use products with digital elements securely. The concepts of #privacybydesign and #privacybydefault start there - right at the design of any hardware or software. How many #databreaches could have been prevented with proper cybersecurity practices from the start? How accountable should data processors and controllers be for their cybersecurity practices? #NoConsentNoTracking #GDPR #CCPA