NEWS14 August 2017
UK – Up to three quarters of customer data held within UK organisations’ marketing databases will become ‘useless’ when the General Data Protection Regulation (GDPR) is introduced, according to a new study.
From May 2018, consent requirements for data use will change to opt-in permissions, with a clear affirmative action required; failure to opt out will no longer be sufficient consent. Required consent will also be granular; separate permissions must be acquired for permission to send different marketing materials, for example.
The report, from W8 Data, reveals that only 25% of existing customer data meets the requirements specified under the GDPR. In order to use existing data, marketers must be satisfied that it meets the new standards and have a fully documented permission trail including the data and source of the consent.
The study also found that one in three marketing campaigns are now focused on gathering consent, at the expense of customer acquisition, customer retention and brand building.
Finally, the report revealed that just 35% of organisations have a regular data cleansing process in place.
“It’s unsurprising that repermissioning campaigns are rocketing as marketers are waking up to the realisation that much of their data will be useless come May 2018," said Dave Lee, director at W8 Data.
"However, what is crucial moving forwards is that the opted-in data is quality-checked and well maintained, otherwise it risks becoming uncompliant and unusable. The fact that two thirds of organisations are currently failing to regularly review their data speaks volumes, and under GDPR is something that is going to have to change.”
Guidance on how to prepare for the GDPR can be found here.
1 Comment
Anon
a month ago
How is this going to affect MR e.g. Customer Satisfaction studies? Will clients need to pre-permission their databases before supplying them for such projects - or can the Customer Satisfaction project itself incorporate that? Are ESOMAR / Efamro / MRS any further down the track of getting MR treated as a special case (a 'legitimate interest' in its own right) - and if so, what does this mean in terms of what MR companies actually need to do to be compliant? (Why did I have to provide my name and email address to post to this forum - albeit being allowed to 'post anonymously'? And what will happen to this data?!)
Like Reply Report