What Marketers Need to Consider When It Comes to Protecting Customer Data

Apr 26, 2018 | Data, Mobile, Social Media

Featured article by Matthew Walker Jones, Independent Technology Author

The amount of integrated information, marketers would get about their customers, three or two decades ago, is tremendously different to the granularity they can achieve now with customer data platform, machine learning, and third-party apps. In the course of digitalization, data is being generated, stored, processed and analyzed on a scale that wasn’t possible before, and we are all part of it. On the surface, these tiny bits of information seem trivial, but once aggregated can create powerful insights, giving marketers a chance for the first time, not only to understand the past behaviour but also to influence the future.

Although the improvements are not bereft of concerns ( such as privacy) research proves that consumers are largely in favour of targeted marketing, that delivers content relevant to their needs, rather than the old-fashioned, and impersonal tactics we all know too well.

But in the wake of GDPR, and recent data-scandalsthat attracted a lot of media attention, there is a need for marketers who among many things, analyse large customer data to take a break, and ask themselves a really important question – do I comply with the new regulations? Is my customer data secure? Below we include a manual that will help you to answer these, not always easy, questions such as How not to breach data privacy laws using direct marketing techniques?

Process Data Fairly and Lawfully

It’s not a silver bullet rule, but a very important one, from which stems many other, smaller data privacy regulations. In the light of GDPR, processing data fairly and lawfully will mean being transparent about the use of data with the data subjects that use your services and buy your products. This should include ( but not be limited to), providing a privacy notice, written in an unambiguous language, explaining to individuals everything they need to know to safely use your websites, and apps.

Consider encryption and anonymisation

Large-scale analytics involving huge volumes of data is a blessing for every marketing company, however, if you decide to trade with personal, sensitive data, your organisation need to make sure compulsory anonymization and encryption methods are in place. Otherwise, you are risking hurting your business reputation when things go out of hand. Irrevocably.

Consent vs. legitimate interest

In the case of direct marketing, consent has slightly tighter definition, than in other context, thus it is important to differentiate between legitimate interest of your customers for the time being, and their consensual agreement for data processing. Apart from being freely given, specific, and informed, consent in the case of direct marketing can only last under the stated circumstances (sometimes only a short period of time or cover a specific type of communication).

Consent and Third Parties

If there are any third parties involved in the transmission of data, marketers need to specifically ask their customers for a permission to get their data flowing between various databases. They are also obliged under data protection regulations to name those companies. In 2016, Verso Group (UK) Limited, delivering sales leads firm, was fined with 80,000 £ for supplying a gambling company with 2 million data belonging to customer records, gathered from services or websites unrelated to the company. By paying attention to avoid the so-called” consent, you treat your customers fairly and avoid risking huge fines.

Delete any irrelevant or excessive information  

During the first hearing at Congress, Mark Zuckerberg was asked for how long his company stores logs of users’ data once they decide to abandon his platform. The answer he gave, wasn’t entirely clear, but it might have suggested a period of time that could span from a week to eternity. Luckily, marketers, if challenged with a similar question, will have to provide more straightforward answer. If their customers decide they don’t want to be a part of data processing, their information must be erased immediately, with the only trace of them in companies’ databases being, their very permission to unsubscribe from marketing.

Respect the Right to Opt – Out

The way big data can be used not only to improve lives of marketers but in general to ease and enrich our lives as customers are stunning. However, not all of us want to be a part of the digital transition, which is a choice that should be respected, especially by the data-driven companies. Above all, personal data is just that – personal, and we need to learn how to better protect it to sustain the trust we have when engaging with browsing activities. Thus, marketers need to allow their data subjects to opt-out from receive marketing at any time. Opting – out choice should be made and communicated in a clear way.

About the Author

Matthew Walker Jones is a freelance writer specializing in content covering topics including data driven marketing, online data protection and cyber security. With a passion for all things data, Matthew is constantly staying up to date with the latest news on data information.

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

October 23, 2026 | ITBriefcase.net Why it matters: Tuesday, October 21 delivered one of the heaviest single-day security disclosures of the year: PHP2Shell, GitLab CVE-2026-110264, and Node.js security releases all shipped simultaneously, each carrying unauthenticated...

read more
Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

October 16, 2026 | ITBriefcase.net Why it matters: Microsoft's October 2026 Patch Tuesday is the largest software security release in the company's history — 1,411 flaws, three zero-days, 75 critical vulnerabilities, and a live Windows Shell security feature bypass...

read more
Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more
Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more