Mastercard Establishes Principles for Data Responsibility
Miami, Fl | October 24, 2019
An approach for collecting, managing and using data with decency
Nine out of ten people say data privacy is important to them, according to a recent Mastercard-commissioned survey, yet only one-quarter say companies are doing a very good job handling individuals’ data. Mastercard today announced the launch of the Data Responsibility Imperative to advance a dialogue around how organizations can work together to close this gap, inviting others to join them in the effort. The initiative hinges on establishing a core set of principles guiding the ethical collection, management and use of data.
When it comes to data—and treating personal data with decency—Mastercard believes that:
- You own it – Every day you produce data. That data belongs to you.
- You control it – You have the right to understand and control how your data is shared and used.
- You should benefit from the use of it – Your data should be used to make your life easier and richer.
- We protect it – Your data will be kept secure and used responsibly.
“In today’s fast-paced digital economy, we’re facing never-before-seen circumstances that test our ethics on a daily basis,” said JoAnn Stonier, chief data officer, Mastercard. “We need high data standards that allow us to face these situations head-on, knowing that our practices are sound, consistent and based on treating individuals and their data with decency. For Mastercard, this commitment starts at home, and we’re embedding these principles into how we do business – every day.”
The initiative is based on the premise that businesses have a responsibility to individuals, one another and society as a whole in how they manage their data.
Mastercard is proposing six data responsibilities that will help deliver sustainable data programs designed to best navigate the challenges and opportunities of the digital economy—and how to make that digital economy work for everyone, everywhere. These principles are meant to complement—and not substitute—regulatory compliance.
| The Six Data Responsibilities | |
| Security & Privacy | Companies must uphold best-in-class security and privacy practices |
| Transparency & Control | Companies should clearly and simply explain how they collect, use, and share an individual’s data and give individuals the ability to control its use |
| Accountability | Companies must keep consumer interests at the center of their data practices |
| Integrity | Companies must be deliberate in how they use data in order to minimize biases, inaccuracies, and unintended consequences |
| Innovation | Companies should be constantly innovating to ensure individuals benefit from the use of their data through better experiences, products and services |
| Social Impact | Companies should use data to identify needs and opportunities to make a positive impact on society |
According to the survey research, an organization committing to these principles would help drive trust with upwards of 90 percent of individuals. Consumers in India and Brazil are far more positive about the handling of personal data, and more than 50 percent of consumers say they would be more likely to use a company that’s transparent about how it uses data. With these findings, ‘corporate data responsibility’ could become the corporate social responsibility of the 21st century.
Mastercard commits to these principles, making sure personal data is leveraged only in ways that are ethical, compliant within the regulatory environment and enhance the consumer experience. Today at Mastercard, that includes:
- Multiple layers of security, including tokenization and encryption, to protect information
- Expanding the protections of the EU Global Data Protection Regulation (GDPR) globally, including the My Data portal so individuals everywhere will be able to see and manage what personal information Mastercard holds
- Developing a world-class anonymization solution—data trust Trūata—that protects privacy while enabling analytics under the GDPR
- Embedding the Data Responsibility principles into its product development process
- Robust data transfer mechanisms, including Binding Corporate Rulesfor personal data transfers globally, and certifications under Asia-Pacific Economic Cooperation systems—one of the few companies to achieve both
- Providing controls over the use of data, including opt-outs for data being used for marketing, data analyticsand web analytics using online forms
- A comprehensive data for good program led by the Center for Inclusive Growth, helping to increase the data science capacity of the social and civic sectors through partnerships with organizations such as the Rockefeller Foundation
“At Mastercard, we believe that individuals own their personal data, have the right to control how it is shared and should benefit from the use of it,” said Dimi Dosis, president of Advisors, Mastercard. “And, it’s incumbent on us to protect that data. We’ve embedded this thinking into our product development, and it will inform everything we do moving forward. Innovation is critical to business success, but not at the expense of the individual.”
"Together, organizations have a tremendous opportunity to transform the way we think about responsible data practices and a sustainable data framework that drives universal benefit,” said Stefaan Verhulst, New York University GovLab's co-founder and director of research and the head of its Data Collaboratives Initiative. “In particular, these principles embrace an opportunity that many other data frameworks do not: using data responsibly to produce insights into societal patterns and behaviors that can help solve real world problems."
“Mastercard’s Data Responsibility Imperative is a good model for companies that want to use data while honoring individual privacy rights,” said Jules Polonetsky, CEO of the Future of Privacy Forum. “Data is more than just a valuable business asset; principled, moral data practices are a corporate responsibility. In the long run, companies that build trust through principled uses of data – even when there is a short-term cost – will be best suited to thrive in a data-driven economy.”
More information about the Data Responsibility Imperative will be made available shortly. To download the white paper, visit www.mastercard.com/dataresponsibility.
Survey Methodology: Mastercard commissioned a third-party online survey of 2,487 individuals and 830 business leaders across Brazil, Germany, India, Spain and the United States from July-August 2019 to better understand how data is viewed around the world.
