Privacy Privation: Searching For A New Data Culture

barcodes_140368690Written by Vanessa Santilli for Smith Business Insight on July 12

Given how organizations harvest data from our online activities like there’s no tomorrow, you would think that privacy concerns are a thing of the past. That’s not the case: how personal information is handled remains a contentious area that is far from resolved.

As an industry insider, Mitchell Merowitz says there’s a way that this tension point can be eased, but only if organizations accept and address the bigger picture.

“People are talking about privacy and data but, at the same time, they either don’t understand it or are not taking accountability for it,” says Merowitz, vice-president of corporate affairs at LoyaltyOne, a firm that designs and implements coalition loyalty programs, customer analytics, and loyalty services for global clients.

Merowitz knows about privacy. In addition to being responsible for corporate reputation and regulatory and legislative affairs, he spends a good deal of time on global privacy practices, overseeing the company’s database governance and international consumer privacy and data protection policies.

Cultural Transformation

As far as Merowitz is concerned, organizations need to transform the way they think about privacy and data. “The way we do that is by focusing on culture,” he told attendees at a culture of analytics conference organized by the Scotiabank Centre for Customer Analytics at Smith School of Business.

One of the first ways to bring about this change is by altering the domain in which data resides. “Today, privacy or data is in the hands of a privacy office, an IT office, a legal office, a risk management office, or a compliance office,” he says. “But we as privacy stakeholders made a mistake by allowing this to happen.”

Privacy is not only a business imperative, Merowitz says, but a social imperative as well. He says data leadership should be vested in C-Suite executives who are directly accountable to internal and external stakeholders. His rationale is simple: this governance model would better resonate with individuals and marketplaces, and essentially re-frame data privacy in aspirational terms rather than a matter of compliance or risk.

“If we transitioned from a protective and defensive environment and we talked about data and privacy in such a way as to further individual interests, societal goals, and objectives, we’ll take individual accountability and interest in data to the next level. We need to think proactively and positively.” Merowitz outlines three additional principles that should be at the core of a new and sustainable approach to customer data privacy.


Discussing the concept of ownership tends to upset businesspeople, says Merowitz, but it is a critical topic for the good of our collective future. Around the world, consumers are pushing back and affirming that they own their data. “(They’re saying) I may have given an organization consent to use it, but the data is mine. It’s about time that organizations around the globe recognize this.” Continue reading