How do you measure the impact of GDPR on your LBS strategy and performance?

1 Data quality and accuracy

One of the main goals of GDPR is to guarantee that personal data is accurate, up to date, and pertinent for the purpose for which it is processed. This means that LBS providers must establish mechanisms to verify, correct, or delete data that is inaccurate, incomplete, or outdated. Data quality and accuracy are essential for LBS, as they can determine the reliability, relevance, and value of the services provided. To measure the effects of GDPR on data quality and accuracy, you can use metrics such as the number and percentage of data records that are verified, corrected, or deleted; the frequency and duration of data quality audits and reviews; the number and percentage of data requests, complaints, or breaches related to data quality and accuracy; as well as feedback from users and partners regarding data quality and accuracy.

2 Data minimization and retention

The GDPR principle of collecting and processing personal data only to the extent necessary and proportionate for a specific purpose applies to LBS providers. This means they should limit the amount and type of data they collect, store, and use, and delete or anonymize it when no longer needed. Data minimization and retention are essential for LBS, as they reduce the risks of data misuse, loss, or theft, and increase user and partner trust and loyalty. To measure the impact of GDPR on data minimization and retention, metrics such as the number and percentage of data fields collected, stored, and used; the average size and growth rate of data sets and databases; the frequency and duration of data retention periods; as well as the number and percentage of data records deleted or anonymized can be used.

3 Data consent and transparency

A core requirement of GDPR is that personal data should only be processed with valid and informed consent of the data subjects, or another lawful basis. This means that LBS providers must obtain and document the consent of users and partners for the collection, processing, and sharing of their data, as well as informing them about their data rights and choices. Data consent and transparency are essential for LBS, as they ensure compliance, legitimacy, and accountability of their services. To measure the impact of GDPR on these aspects, you can use metrics such as the number and percentage of users and partners that give, withdraw, or modify their consent; the frequency and duration of consent requests and notifications; the number and percentage of data requests, complaints, or breaches related to data consent and transparency; and the feedback and satisfaction of users and partners regarding data consent and transparency.

4 Data security and protection

A fundamental obligation of GDPR is that personal data must be processed securely and confidentially, with appropriate technical and organizational measures in place to prevent unauthorized or unlawful access, disclosure, or damage. Therefore, LBS providers must implement and maintain robust data security and protection policies and practices such as encryption, authentication, backup, or breach response. Data security and protection are essential for LBS to safeguard the integrity, availability, and resilience of their services. To measure the impact of GDPR on data security and protection, metrics such as the number and percentage of data records that are encrypted or authenticated, the frequency and duration of data security and protection audits and tests, the number and percentage of data incidents, breaches, or attacks, as well as user and partner feedback regarding data security and protection can be used.

5 Data value and innovation

The ultimate aim of GDPR is to enable the fair and lawful use of personal data for the benefit of individuals, organizations, and society. Leveraging the opportunities and challenges of GDPR, LBS providers can create and deliver more valuable and innovative services that meet the needs and expectations of users and partners. Data value and innovation are essential for LBS, as they are responsible for the differentiation, competitiveness, and growth of the services offered. To measure the impact of GDPR on data value and innovation, metrics such as the number and percentage of users and partners that use, recommend, or renew the services; the frequency and duration of user and partner engagement and retention; the number and percentage of new or improved features, functions, or benefits of the services; as well as user and partner feedback regarding data value and innovation can be used.

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?