State of Privacy
Report 2015

SYMANTEC / STATE OF PRIVACY REPORT 201501

Contents

Introduction										0201 The Depth of Security Concern						0502 The Data Trust Gap								1903 Where Does The Responsibility Lie?					

2704 The Future of Data Privacy							35Biographies										44SYMANTEC / STATE OF PRIVACY REPORT 2015

02

03

State of Privacy
Report 2015
Data is fundamental to the functioningof our economy and society, and theprotection of information has become
the climate change issue for theborn-mobile generation.
In the next year, we are likely to see theEuropean institutions adopt the new
General Data Protection Regulation(GDPR) reform, and implement aframework designed to transform
data governance in the EU. The newlegislation will replace an existing
structure that has been in place since
1995, a time that was in technology
terms, prehistoric. Although necessary,such enormous change is naturally
making many businesses slightly wearyof the amount of disruption at stake.
The changes will ensure organisations
have to adhere to new requirements
around the processing of personal data,and introduce stricter rules aroundcompliance. This is challenging evenfor the most informed, and has raised
concerns over complexities around new
information management processes,
increasing costs and even question
marks over career security. Althoughchange is sometimes feared as painful,

it is widely recognised that thesemeasures are necessary for people torealise the true potential of the internet
and new technologies, while putting
appropriate safeguards in place toensure personal privacy is protected.
Symantec’s State of Privacy reportoffers a snapshot of current perceptions
on data privacy, and reveals thatpeople don’t believe businesses andgovernments are doing enough to keep
their information safe. It also provides
guidance on how businesses can address
consumer concerns. We surveyedover 7,000 respondents across seven
European markets; UK, France, Germany,
Denmark, Spain, Netherlands and Italy
and learned nearly 60 per cent haveexperienced a data protection issue
in the past. Our findings suggest thatbusinesses and governments have an
opportunity to strengthen trust with
Europeans by implementing aggressive
security measures and assuring people
that their data is gathered, stored andused responsibly.
Additionally, the report explores therole people play in securing their own
information and their attitudes

about what their data is worth. Not
surprisingly, our findings reveal that
there is confusion about where to turnfor help and who should be accountablefor keeping information protected.
We’ve divided the report into four
sections to look at the various
approaches organisations and the public
sector can take to help Europeans feel
more at ease with how their data is being
used, where it is stored, and what impact
it has for wider society.
We have also spoken to experts within
the industry to provide insight andsuggestions on how businesses canimprove their data privacy position.
Darren Thomson
CTO and VP of technology
EMEA Symantec

SYMANTEC / STATE OF PRIVACY REPORT 2015

The Depth of
Security Concern
The State of Privacy research
identifies concern about the securityof Europeans’ data, and this mistrust
extends across all industry sectors.
The average European is not happy withthe way their data is handled by thecompanies they do business with.
Respondents also stated that theirsecurity concerns may cause a change
in their online behaviours, as theychoose to avoid certain services or
activities online. This is likely to placepressure on businesses to adopt newpractices. When business models relyon personal data, privacy and security
features must be promoted.

05

01“There is now a level of
uncertainty regarding data.
People are beginning to
express their mistrust in
businesses, particularlyin the technology space.”Siân John
chief strategist for
EMEA at Symantec

SYMANTEC / STATE OF PRIVACY REPORT 2015

06

07

Respondents who are worried theirpersonal information is not safe

57%

Total

Protecting data isa primary concern

57

78%

56%
62%

51%
53%

of Europeans are worried their data
is not safe. This is of biggest concern
to respondents in Spain, where 78%of people do not think it is safe.
Germany was the second highestwith 62% and UK-based respondents
showed least concern at 49%.

UK

Denmark

Italy

Netherlands

FranceGermany

Spain

%

49%
50%

59

%

of respondents have experienced
a data protection issue in the past.
These issues include an email
account being hacked, bank details
stolen, online identify theft, acomputer virus, social media accounthack, responding to an online scamor fake email or been notified of adata breach by a company that I use.

SYMANTEC / STATE OF PRIVACY REPORT 2015

08

Total

Respondents who are
happy for companies
to share their datawith third parties

13

%

14%

happy

Netherlands
UK

09

5%

Denmark

8%

Germany

8%
France

12%

Italy

46%

Companies, as part of their customer
data collection policies, can offer to sharecustomer data with selected third parties.
When questioned on this practice, only 14%
of respondents stated they were happy toshare their data with third parties, with 47%
being unhappy to share any data and 35%
requiring some form of check on exactly
what data was shared.

The results were broadly similar across all seven countries, apart from
Italy where a significantly higher 46% of respondents were happy for
their data to be shared with third parties.

The Italians differed to the European average on more than one occasion.
They were the country with the highest percentage of people reading
terms and conditions, so perhaps are well educated on what exactly they
are signing up to. This level of maturity shows informed consent.

For many businesses, the opportunity to share customer data withthird parties can be valuable, in terms of developing stronger customer
relationships and providing better service. For those businesses,
Symantec recommends they examine what they can do to improvecustomer trust that data shared will remain secure and private.

Spain

9%

SYMANTEC / STATE OF PRIVACY REPORT 201510

Respondents who think theirpersonal data has value

Total

11

81%
of consumers surveyed acrossEurope think their data holds
a certain amount of value.

Italy

81%

94%

Spain

Netherlands

87%

85%

Germany

France%77

UK

Denmark

81

%

75%

69%

€

Consumers acknowledge their data can enable businesses to makemoney. Italians are most aware of that fact, with 94% thinking theirdata holds value.

“For some years, we havepredicted that the valueof data will start to beunderstood by the creatorsof it. The State of Privacy
report shows that many
Europeans are starting tothink about how their data
might have significant worth
to others. We have reached
the tipping point.”
Darren Thomson
CTO and VP of technology
EMEA Symantec

Businesses may be surprised by
how highly their customers value
their own personal data.

Europeans place significant
value on their data. When
asked how much their
online footprint is worth,think that it
could be valued at€10,000 or more

24%

SYMANTEC / STATE OF PRIVACY REPORT 2015

12

Despite concerns over privacy and a high valuation of data, thebehaviour of many Europeans is not reflected by their actions
towards data protection.

Respondents who read the terms and conditions when
they buy products or services online

Italy

Total

25%

53%

Denmark

25%

Spain

Germany

23%

UK

13

23%

FranceNetherlands

Consumers are less cautious in their online approach, with only 1 in 4
people reading the terms and conditions in full when buying or signingup to products and services online.

59%of respondents confess to merely skimming the terms
and conditions when making a purchase, while 14%
state that they never read the terms and conditions.

15%

20%

19%

15%

In the Netherlands, onlyof people read the terms and conditions
in full, which is significantly lower than Italy, where over half say they do.

SYMANTEC / STATE OF PRIVACY REPORT 2015

“Terms and conditions for online services and products arein many cases hidden, long and difficult to understand oreven misleading.
We recommend that companies and public sector bodies
review their privacy policies and create simple, more effective
methods of communicating these to consumers.
Better placement on the website, or as a more integral partof the customer’s journey are just two options to improvethe customer experience.
We believe that terms and conditions should be more concise,easy to understand and companies should help customers
take control of their data.”

Professor Udo Helmbrecht
executive director of ENISA

14

15This situation presents an education
opportunity for organisations. By
adopting best practices for terms
and conditions and privacy policies,
companies will be better placed in thelong term with credible information on
their databases, in addition to building
trust among customers.

Terms and conditions are one tool
available to consumers to help themunderstand what they are buying or
signing up to, yet not everyone isreading them.

Despite much concern about
the security and privacy of
data, many are unsure what
to do to better protect
their data.

SYMANTEC / STATE OF PRIVACY REPORT 201516

17

One of the biggest issues that a consumer faces is how to act on a
problem they may have with a particular term or condition, and where
to go next if they have a data protection issue.

Respondents who would like to better
protect their personal details but are notsure how to go about doing this

66% of Europeans are unsure what steps to take to protect personal
information. This includes their personal bank details and their email
addresses.

66%
Spain
73%
France72%
Germany69%
Denmark
63%
Netherlands
63%
Italy
63%
UK
59%
Total

?

There is a need for both businesses and the public sector to do more toeducate consumers on best practices to protect personal information.
There is an added requirement for businesses to promote better practices intheir attitudes towards data. Over a third of Europeans are concerned that too
many people have access to their personal details.
This feeling resonates highest with 73% of Spanish respondents. Despite
this, Spanish consumers still use the services, but with only 23% in Spain
reading the terms and conditions in full where they may discover further
details about what access they are giving.

Concern over data safety is one issue, but when consumers are faced witha data security infringement, only 20% of people were confident that theissue would be resolved.

“Data breach notification informs and empowers consumers.
It provides a transparency mechanism to show how data iseffectively secured. When the GDPR is adopted we hope thistransparency mechanism will give to consumers more confidence
in the way industry and government protect their data.”
Ilias Chantzos senior director government affairs EMEA at Symantec

SYMANTEC / STATE OF PRIVACY REPORT 2015

The Data
Trust Gap
The State of Privacy research
uncovered a “trust gap” between
organisations and their customers.
This is the difference in how privatea piece of data is perceived as being,
and how securely people trust that
it is held.
By accessing and analysing customer
information, businesses provide a tailormade approach, examining behavioural
trends and ultimately improving thecustomer experience. Analysis ofanonymised data, such as medical
information, has the potential to deliver
huge benefit to society.
Without access to internet traffic
data, which includes vast amountsof anonymous, pseudonymous, oreven occasionally personal data, we
at Symantec would not be able toanalyse it, discover threats and protect
our customers. It is fundamental tothe privacy and security of data that
resides with people, business and publicauthorities that we are able to accessand analyse such data from the internet.

19

02

The trust gap exists due to consumers’
concerns over the security of the data
they have already shared. We are ata tipping point where organisations
can take control of this issue anddemonstrate their commitment to
privacy, curbing this disconnect withthe public and consumers.

“Businesses should considera channel to allow consumers
to question how their data is
being used and advocate moretransparency. If businesses begin
to act like trusted advisors andput the privacy of consumer dataat the heart of the business, theconsumer is on a much better
footing to feel more confident
about their data.”

Philip Carter
VP for European
enterprise infrastructureand software group at IDC

SYMANTEC / STATE OF PRIVACY REPORT 201520

Trust in the following organisations
to keep data completely secure

The State of Privacy research showed the most trusted organisations arethose that do not have an overt business model built on collecting data.

Italy

Netherlands

Spain

Denmark

Germany

FranceUK

Total

Hospitals

69% 68% 71% 59% 78% 70% 72% 63%

Banks

66

Government

45% 39% 37% 30% 69% 37% 57% 45%

TechCompanies

22% 23% 22% 18% 20% 24% 18% 31%

Retailers

20% 21% 19% 24% 18% 22% 14% 22%

SocialMedia

10% 12% 8%

Hospitals

%

Banks

65

%

62

%

Government

21

58

%

9%

82

%

64

%

71

%

59

%

Of the 6 main sectors included in the study the least trusted
organisations are retailers and social media, with only 20% and 10%
respectively. Symantec sees the lack of trust in these companies as a
reputational issue, possibly stemming from recent
high profile data protection incidents.

Tech companies which have also suffered fromrecent data breaches, generated trust from only
22% of respondents

The most trusted sector was the health industry with a 69% level of trust.
This is interesting when one examines the quantity of data breaches in this
sector. Symantec’s Internet Security Threat Report indicated that healthrecords are globally the fifth most breached type of personal data, andthat the public sector is most at risk of targeted attacks.

8% 11% 8% 17%

TechCompanies

RetailersSocial Media

69% 66% 45% 22% 20% 10%@“Consumer perceptions are really interesting here. We see a trend where
those industry sectors gathering data for consumer protection purposessuch as the medical industry or passport offices, have a higher level of trust.
However, where companies’ business models are based on data – whether forweb search or classification or social sharing – trust is much lower, and this issomething which companies will need to address.”Siân John
chief strategist for
EMEA at Symantec

SYMANTEC / STATE OF PRIVACY REPORT 201522

Perceived privacy of data vsperceived security – The “Trust Gap”

Italy

Netherlands

Spain

Denmark

Germany

FranceUK

Total

OnlineBrowsing-36pts -8pts -46pts -32pts -48pts -41pts -50pts -31pts

Contact
Details-34pts -7pts -46pts -36pts -33pts -36pts -38pts -38pts

Social MediaProfilesPassport-22pts -4pts -29pts -26pts -18pts -26pts -21pts -29pts-22pts -6pts -30pts -29pts -18pts -22pts -17pts -29pts

Grocery
Habits-19pts -4pts -24pts -14pts -23pts -21pts -31pts -12pts-19pts -7pts -23pts -27pts -14pts -18pts -18pts -26pts

OnlineBrowsing

Contact
Details

-36

-34

%

The largest trust gap exists for online browsing, where there is a 36%
difference between how private individuals believe their search history
should be, and how secure they believe it is. A gap also exists in all otherpersonal information sets. Even with vital passport information that iscontrolled by the government, the trust gap remains high at 22%.

“Businesses need to be more transparent withcustomers on how they are keeping data secure.
Security needs to be embedded into a company’svalue chain, but it should also be viewed internallyas a customer winning requirement, and notjust a cost.”
Ilias Chantzos senior director
government affairs EMEA at Symantec-25pts -6pts -34pts -25pts -30pts -29pts -31pts -22pts

Medical
Records

Bank

23

%

Social MediaProfilesPassport

-25

-22

%

Medical
Records%

Grocery
Habits

-22

%

-19

We have already discussed how the report shows that Europeans think their data
has transactional and financial value. However, the research also shows that the
majority think companies are using their data to make extra profit.

32

customer experience.

70

parties for profit.

74

are making money from their personal information.

% believe personal data is being used to improve% think their personal data is being sold on to third

Bank

%

The trust in organisations is further undermined by concern
over how companies profit from personal information.

-19%% of European respondents think it is unfair that companies

SYMANTEC / STATE OF PRIVACY REPORT 201524

25

Respondents who would trade theire-mail address for the following

DenmarkUK

Spain

Netherlands

Germany

Italy

FranceTotal

For a chance
to win a prize
or be enteredinto a raffle

To accessan app

42%
33%
29%
%
28
%
27
%
27
26%
30%

20% 20%17% 24%
22% 43%
%
%
17 26
%
%
11 29
%
%
12 34
17% 32%
17% 30%For
money

These figures demonstrate thetrade-off respondents are currently
prepared to make, and show how
convenience wins over security
in today’s society.
Across Europe, people consistently
showed that they were prepared todivulge personal information, if there
is an option to trade it for a benefit.
A third of respondents are willing togive their email address in exchange
for a store discount, while 3 in 10
would be happy to do so for a chance
to win a prize. While this remains true
today, Symantec questions whether
this will change if Europeans’ trust indata privacy and security continues tobe eroded.
However, benefits of data sharing
outside of financial gain are
not recognised.

“The report demonstrates we havenot done enough to explain thesocietal benefits of big data. As aresult we see consumers applying
a short-sighted approach to data
sharing, where they only sharefor direct and personal financial
benefit. People are not willing toshare because they do not think it issecure, they are concerned they willbe identified from their data
and worry about the potential
impacts of that. We need to beproviding a better view of how
anonymisation and privacy
enhancing technologies are used,
how aggregated data are protected
and what the broader societal
benefits of data sharing are.”Ilias Chantzos
senior director
government affairs
EMEA at Symantec

SYMANTEC / STATE OF PRIVACY REPORT 201527

Where Does The
Responsibility Lie?
Government, business and consumers
can all take different steps toensure better data protection, andSymantec explored opinions on
who is ultimately responsible.
The responsibility in protecting
information is relatively equal acrossgovernment, business and consumers,
according to the results. The majority(66%) of Europeans claimed they would
be prepared to take steps to better
protect their personal information,
but stated they required help andguidance from external parties.
In fact, the research showed that
consumers are willing to pay for dataprotection in the same way that theywould pay for travel or credit card
insurance.

03“The law is favouring
the introduction of new
regulations to fill a gap leftby those consumers that are
not doing enough to protect
themselves. Some parts ofthe economy are getting
more attention than others
and from time to time, we
can expect mini explosionsof consumer reaction.”

Stewart Roompartner at PWC

SYMANTEC / STATE OF PRIVACY REPORT 201528

29

Respondents who are willingto pay for data protection“It is clear we are at a tipping point. It is now that business andgovernment leaders should act to ensure their customers andthe public can trust them sufficiently to share accurate data.
The general public rightly believes the privacy and securityof their data should be invested in. Data is fundamental tothe development of business and society. The opportunities
with data shared, analysed and used in a secure andprivate environment are endless. The data potential could
revolutionise how we live today.”

50%

Would pay the same or more
for data protection as their
credit card insurance

46%

Would pay the same ormore as their phone bill

Darren Thomson
CTO and VP oftechnology
EMEA Symantec

SYMANTEC / STATE OF PRIVACY REPORT 201530

31

Percentage of responsibility governments, businesses and consumers
should take in protecting personal information

Government

Business

You

44%

35%

22%

Italy

44%

33%

23%

France373627

Netherlands

34%

22%

44%

UK

32%

28%

40%

Germany

32%

28%

40%

Denmark

32%

29%

38%

Total

36%

30%

33%

Spain

%

%

%

Governments were given themost responsibility overall fordata protection at

The responsibilityof business ranked
lowest atand citizens in France, Spain and
Italy seemed to rely most heavily
on them.

overall, while 33% put the
responsibility to protect datawith the individual.

36

%

30

%

Of the respondents who work with personal data, less than half of those surveyed
believed that their employers enforced basic security processes, including frequentpassword changes (42%) or regular protection software updates (44%).

SYMANTEC / STATE OF PRIVACY REPORT 201532

33

To promote better data privacy practices and processes withinorganisations, Symantec recommends that businesses:

Analyse your own data: ensure you know what you
have and what needs to be protected.

Demonstrate to customers that their data is being used
to improve services and propositions.

Embed security within your internal value chain,
and your supply chain.

Promote data privacy education and guidance to your entire
business – it should be part of the employee value proposition.

As you develop new products and services, take a customer-led
approach, consider possible privacy implications.

Front line customer services should be able to answer
questions on data security and privacy.

Ensure your own systems are protected against data breachboth internally and externally. In the event of a data breachcommunicate in a timely manner with all relevant audiences.

Privacy policies and service terms and conditions should be
easily accessible, succinct and clear to understand.

Regularly communicate with your customers on
the best ways to keep their data secure.

Provide customers with an identified data privacy pointof contact within the organisation.

“Treating consumers honestly and with respect, by providing clear andtruthful information about privacy practices, is fundamental to generating
trust and confidence.”

Stewart Roompartner at PWC

SYMANTEC / STATE OF PRIVACY REPORT 201535

The Future of
Data Privacy

04

The State of Privacy research shows
how important data protection isto the majority of Europeans. Highprofile data hacking and debatesover government surveillance areexacerbating the issue.
Europeans are more conscious of how
they use the internet, where they use
it, and what steps they can take as
individuals to protect themselves
against any threats.
The report explored whether Europeans
will take a step back in regards tothe data they give out. It showed thatonline self-moderation is prevalent as
individuals claim they will post less, giveout false information, or even reduce theamount of time they spend online.

“Customers will certainly
migrate to those companies
and services that they
consider to be safest. In the
future, I believe customers
will move on from searchingout the best deal to form“buying tribes” and leverage
their knowledge to promotejoint purchasing power fromthose businesses that they
trust the most.”
Peter Cochranescientist, engineer
and entrepreneurat Cochrane
Associates Ltd

SYMANTEC / STATE OF PRIVACY REPORT 2015

36

Importance of factors when choosing
a company to shop with or use

37

Data security is very important to European consumers: 88% say this isimportant when choosing a company, more important than the quality ofthe product (86%) or the customer service (82%).

Italy

Netherlands

Spain

Denmark

Germany

FranceUK

Total
Keeping yourdata safe andsecure88% 89% 88% 86% 88% 87% 88% 88%

Qualityproducts

86% 88% 86% 82% 86% 85% 86% 86%

Delivering
great customer
service

82% 85% 83% 76% 82% 83% 81% 85%

Treating theiremployees
and suppliers
fairly69% 69% 67% 69% 60% 76% 73% 67%

Beingenvironmentallyfriendly

56% 50% 55% 49% 45% 66% 52% 72%

Givingback to thecommunity

47% 46% 50% 43% 30% 65% 43% 54%

Keeping data safe and secure (88%) now also rates far ahead ofenvironmental concerns (56%) for shoppers.

“The recent major breaches and the broader discussions about appropriate
limits to government surveillance have put a spotlight on the question ofprivacy and how it impacts customers and the public at large. As a result
there is a perception that industry is not doing enough to protect personaldata, contributing to the trust gap. This perception has resulted in a muchbroader public debate about what industry and government are doing andhighlighted a real public sensitivity. More is needed from industry andgovernment to explain the positive contribution they are making.”
Ilias Chantzos senior director government affairs EMEA at Symantec“Business must respect the user and gain trust. At Symantec
we know that consumers will end transactions if a company
has a poor data protection reputation. A high level of trust
will ensure accurate data, this will allow businesses to not
only make more money but the trends can be used to aid
product development and guide the direction of the business.
Companies should not pay lip service to data protection issues,
but educate and inform users on data protection and privacy
policies in a straightforward manner.”Siân John chief strategist for EMEA at Symantec

SYMANTEC / STATE OF PRIVACY REPORT 2015

The old models for data
security, a castle and moat
approach to ring-fence valuable
information, have become
irrelevant with the adventof smartphones and tablets,
cloud computing, social
networking, and the emerging
internet of things.
Connected devices and the internet ofthings all generate large quantities ofdata. There are significant benefits tobusiness in being able to correlate andanalyse large amounts of this data, but
this data must be kept secure, and there
must be trust among customers that
their data, anonymised or identifiable,
is secure.

38“Awareness raising has a keyrole in enhancing the generalpublic’s understanding ofprivacy issues and relevant
mitigation measures.”
Professor
Udo Helmbrecht
executive directorof ENISA

39“Symantec believes that oneof the major reasons thatdata privacy is becoming
such a concern is because
there is now a clear
understanding amongst
consumers that their dataholds value. Providers oftechnology service shouldtake heed. The IT industry is
not trusted today to do theright thing by consumers
when it comes to data
privacy. Much work will need
to be done in the coming
years to build and sustain
this level of trust.”
Darren Thomson
CTO and VP oftechnology
EMEA Symantec“It’s great to see theconsensus across Europe
on the importance of dataprotection. There is a realconsistency emerging thatprivacy is a competitive
advantage for businesses
and that privacy concerns
also determine consumers’
behaviour. It is criticalto ensure consumers are
empowered to understandwhat their data is being used
for and how it is protected.”
Ilias Chantzos
senior director
government affairs
EMEA at Symantec

SYMANTEC / STATE OF PRIVACY REPORT 201540

Respondents who would avoid
posting personal details online

66%
57%

63%

63%

53%

59%

44%

53%

41

Europeans are actively adopting a selfmoderation approach to their personal
data and taking the matter in to theirown hands. According to Symantec’s
research, over half of those surveyed(57%) are now avoiding posting personal
details online.

Another popular approach to selfmoderation could also have chilling
repercussions for business, as 1 in 3
consumers admitted they provide false
information in order to protect theirprivacy. 36% of Germans and 34% of
UK respondents stated they had given
fake details online, in a bid to avoid
As data concerns increase, Symantec’s
giving out their credentials, which will be
experts warn that individuals could avoid equally worrying for businesses basing
posting personal information online. As
programmes, projects and campaigns
data is seen as a valuable commodity, itaround this data.
could ultimately have long term effects
to the way we do business.

“If you’re a business relying on user data, take heed of thisinformation regarding false data from consumers. You may
be putting your faith in user data at the expense of truth.
Data does not always acknowledge the human side of yourcustomer. Too much reliance may deliver an advertisingor marketing campaign with little relevance.”

Germany

Italy

UK

Netherlands

Spain

Denmark

FranceTotal

Siân John
chief strategist for
EMEA at Symantec

SYMANTEC / STATE OF PRIVACY REPORT 2015

42

43

People are now considering avoiding the internet altogether, as the mostextreme example of self-moderation. Two thirds of respondents said theywould take a break from the internet in order to protect their data.

Respondents who would takea break from the internet

Germany

85

%

Italy

75

%

“As with the adoption of all technology, security and privacy can be left by
the wayside in the rush to achieve financial growth or obtain a product orservice in a fast and convenient manner. Errors have been made on bothsides: businesses have learnt the hard way how to maintain data security
and forge strong relationships with customers, while consumers are now
beginning to vote with their feet and choose businesses and services who
respect and maintain consumer security and privacy.”Siân John chief strategist
for EMEA at Symantec

Netherlands

UK

%

75

73

Spain

France69%

Denmark

47

%

%

57

“Governments can help reduce
the trust gap between businesses
and users by making the former
accountable for data protection
and by strongly enforcing
compliance with the underlying
legal obligations.”“I do think people will boycottcertain businesses if the abusegoes too far and people begin
to understand the practices
behind the use of data. People are
increasingly concerned about theirdigital footprint and considering
how it might affect them in the
future. The trust gap is real, there
is now no question about it.”

%

Total

69

%

Professor Udo Helmbrecht
executive director of ENISA

Philip Carter
VP for European
enterpriseinfrastructureand softwaregroup at IDC

SYMANTEC / STATE OF PRIVACY REPORT 2015

44

45

Biographies

Darren Thomson,
CTO and VP of technology,
EMEA, Symantec

Dr Peter Cochrane,
scientist, engineer and entrepreneur,
Cochrane Associates Ltd

Siân John,
chief strategist for EMEA
at Symantec

Professor Udo Helmbrecht,
executive director, European Union Agency for
Network and Information Security (ENISA)

Darren is responsible for creating and leading marketingstrategy across the EMEA region. Since joining Symantec
in July, 2003, Darren has run various groups including
global services practices covering Business Continuity
Management, Storage & Data Management andCloud Computing.

Peter is a futurist, entrepreneur, business andengineering advisor to international industries andgovernments. With over 40 years of technology andoperational experience, Peter has been involved in thecreation and transformation of corporations.

Siân leads articulation around Symantec’s overall
technology strategy. She has a particular focus on cyberand information security. Siân has worked in the IT
industry for over 20 years, both as a security architect
and as an independent security consultant.

Professor Udo is the Executive Director of ENISA, a rolehe has held since October 2009. His experience in thefield of security has been acquired through extensive
work in a variety of areas, including energy, insurance,engineering, aviation, defence, and the space industry.

Ilias Chantzos,senior director, government affairs
EMEA, Symantec

Philip Carter,
vice president, European enterprise,
infrastructure and software group, IDC

Stewart Room,global head of cyber security anddata protection law at PwC Legal

Ilias represents Symantec before government bodies,
national authorities and international organisations
advising on public policy issues with particular regard
to privacy, data protection, IT security and data risk
management and availability.

Philip leads a team of analysts that cover the infrastructure,
middleware, and applications software markets andis tasked with writing and presenting on broader
enterprise infrastructure software trends and the impactof emerging technology areas such as Big Data, cloud,mobility, and social as they relate to the European region.

Stewart advises companies on their strategies for using
personal data and confidential information and on how tohandle serious security breaches. With over 20 years ofexperience as a barrister and solicitor, Stewart specialises
in privacy, data protection and data security law.

www.symantec.com