The majority of people would not do business with a company that had failed to protect its customers’ card data, a new study has revealed.
In the survey, conducted by OnePoll and commissioned by Semafone, 86.55% of the 2,000 respondents stated that they were “not at all likely” or “not very likely” to do business with an organisation that had suffered a data breach involving credit or debit card details.
The proportion of women expressing this view was 91.48%, which was markedly higher than the figure of 81.93% for men.
The survey also revealed that other types of data breach would drastically erode customer confidence. 82.95% of people stated that they were “not at all likely” or “not very likely” to do business with an organisation which had suffered breaches involving home address, while 80.1% said the same about telephone number and 76% about email address.
“These figures serve to underline what we should already know – that the reputational damage suffered by companies who fail to protect personal data can translate directly into a loss of business,” said Tim Critchley, CEO of Semafone.
“The protection of card details is no longer simply a matter of best practice – the economic consequences of a failure to do so are potentially devastating for a business of any size.”
>See also: Data breaches – It’s not just digital, physical data breaches matter too
The research findings coincide with news that the European Parliament has voted to approve the EU’s new data protection legislation, which brings in a number of serious measures in favour of customers.
These include a potential fine of 5% of gross revenues for companies who fail to protect customer data adequately, and the requirement to inform local data protection authorities within 24 hours of any breach.
“I can’t see how any organisation can continue to ignore the increasingly loud demand from customers to keep personal data safe,” said Critchley. “Our research shows how seriously the public takes the safeguarding of its data, and the new data protection legislation makes effective security even more imperative.
“Not only will offending companies face the financial penalty of a fine, but they will suffer the immediate negative publicity that comes from the 24 hour disclosure rule. I think we are going to see a great many companies starting to take security a whole lot more seriously. ”