By: Luis Manzo
Let’s imagine that we are customers of a telephone company and that we provide them with our data such as: name, telephone number, address, email, etc.
We provide this data because it is necessary for the service relationship they provide us to be carried out. However, what happens if this data that we voluntarily provide is extracted by one of their employees and offered to the highest bidder?
In the best-case scenario, this database would be purchased by a competing company, and we would start receiving regular calls offering us a better service than our current telephone company offers.
In the worst-case scenario, this database falls into the hands of criminals specializing in identity theft, and they could take out loans, cards, and different financial products in our name.
The same thing happens with service providers; they could use that information to receive credit card offers or even clone the provider’s image to carry out financial scams.
In these examples, we can see everything from a very “common” case to a situation that can bring many complications to our lives.
For this reason, it is very important that companies have clear processes to protect this personal data, that it is clear who is responsible for ensuring that this information is protected and safeguarded so that it is not used for any purpose other than that for which we voluntarily provide that information.
In Mexico, since 2010, the Federal Law on the Protection of Personal Data Held by Private Parties has been enacted, where there are fines and even prison sentences for those who fail to comply with or make illegitimate use of the personal data of their clients or suppliers.
Even so, and after several years since this law was enacted, not all companies are taking serious and safe steps to comply with it.
Many times due to ignorance or simply due to lack of interest. But that negligence could lead to fines, prison sentences, and currently even the loss of clients or potential client prospects.
The reality is that internationally this type of law is becoming more relevant for doing business, and if a company wants to be able to participate in the business world with a firm presence, it must comply with this law, but not because it is an obligation, but because it is part of the best commercial practices currently.
