{"id":382544,"date":"2018-05-25T15:05:46","date_gmt":"2018-05-25T19:05:46","guid":{"rendered":"https:\/\/www.steelcase.com\/?p=382544"},"modified":"2023-10-19T21:07:38","modified_gmt":"2023-10-20T01:07:38","slug":"data-privacy-design","status":"publish","type":"post","link":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/","title":{"rendered":"Data Privacy. By Design."},"content":{"rendered":"

“As data becomes the key resource for every business, the security and privacy of data becomes every organization\u2019s concern.”<\/p>Stuart BermanIT security architect at Steelcase<\/span><\/cite><\/blockquote>\n

The smallest actions can have the biggest implications<\/h3>\n

Every day we trade private information about ourselves inreturn for digital services. We make an online purchase, use a search engine, or download an app, and Google, Facebook, Apple, Amazon and others harvest data about where we go, what we buy, who we interact with online.<\/p>\n

For many people this is a reasonable trade, data for services that make life easier, more interesting, more fun. Others are less comfortable about this tradeoff. Yet everyone expects their personal data to remain private and secure.<\/p>\n

\u201cPrivacy in the workplace used to be about audio privacy, visual privacy, territorial privacy and informational privacy,\u201d says Steelcase Senior Design Researcher, Melanie Redman. \u201cThese are types of privacy people say they need in order to focus.<\/p>\n

\u201cWhat\u2019s changed is how we think about informational privacy: now we think about data privacy and about psychological privacy, because our perception of privacy impacts all of our other experiences. Privacy is more contextual in the workplace, more personal and a topic of growing importance in every organization.\u201d<\/p>\n

Privacy in a connected world<\/h3>\n

Privacy is not a new issue for Steelcase. The company has conducted research on privacy in the workplace<\/a> for over two decades, and three years ago began to study digital privacy issues.<\/p>\n

\u201cOrganizations have made assumptions about digital privacy, but those assumptions had never been tested. The assumption was that people are willing to trade personal data in return for services, such as web searches or connecting with others via social media, so they would be willing to make the same trade at work. In other words, they would allow the collection of data in return for helpful business services. We wanted to test those assumptions,\u201d says Redman.<\/p>\n

\n

\"\"<\/p>\n

\"\"<\/p>\n<\/div>\n

Steelcase surveyed 3,000 people around the world about privacy concerns in the workplace. A major finding: employees\u2019 attitudes about privacy are remarkably consistent across geography, gender and demographics. This calls into question popular notions about privacy, such as assuming younger workers, who constantly share information via social media, are less concerned about data privacy. It turns out that privacy attitudes don\u2019t vary by age; they vary by the type of organization people work in, and by the ways people work.<\/p>\n

Attitudes about privacy differ, for example, based on how mobile a worker is, how readily they adopt new technology or how collaborative they are in their work.<\/p>\n

Two dimensions of privacy have moved to the forefront for employees. One is being able to control stimulation and distraction, a fallout from more open workplaces and the use of mobile devices. It\u2019s hard to find quiet, private time and harder to disconnect from work. Controlling stimulation can be accomplished through the physical workplace and Steelcase has many strategies to help companies provide places for privacy, rest and rejuvenation.<\/p>\n

\"\"
Space measurement and analysis tools designed to improve the workplace must include leading-edge privacy protections that anonymize user data.<\/figcaption><\/figure>\n

The second ascendant issue is controlling information. The proliferation of data and the increased ease of aggregating and deriving value from it mean it\u2019s harder to control who has our information and what\u2019s done with it. Losing control over your data causes anxiety because controlling your information is essential to privacy.<\/p>\n

\u201cThe world is increasingly digital and data driven and we\u2019re rapidly entering a future where everything will be connected. As data becomes the key resource for every business, the security and privacy of data becomes every organization\u2019s concern,\u201d says Stuart Berman, IT security architect at Steelcase.<\/p>\n

To ensure the responsible collection, analysis, and management of data, Steelcase designs all of its technology products to strict privacy and security standards. \u201cWe know how important it is for companies, and individuals, to control their information. So before we developed any digital products at Steelcase, we established company principles of privacy by design, and data security by design,\u201d says Barbara Hiemstra, Steelcase privacy engineer.<\/p>\n

\n

Meet Steelcase\u2019s Privacy Engineer<\/h3>\n

High-profile security breaches, social media user tracking, protecting and securing data from cyber attacks: The realities of the connected world have led to an emerging profession, the privacy engineer, an increasingly common position at web and software companies. Barbara Hiemstra is one of the first privacy engineers in the office furniture industry.<\/p>\n

\u201cI\u2019m part of the IT security team that interacts with researchers, designers, software developers, legal experts and others to help ensure that privacy is an integral part of the design process. We recommend privacy-enhancing technologies to mitigate privacy risks, conduct privacy-related risk assessments and help integrate privacy into the software engineering lifecycle,\u201d says Hiemstra.<\/p>\n

Her team also informs users in cyber hygiene: individual behaviors to maintain a \u201chealthy\u201d (secure) online presence. This includes password maintenance, software and virus protection updates, data backups and other strategies. The content is made available to Steelcase dealers, who in turn can offer it to customers.<\/p>\n

\u201cBig data is an awesome tool, but it comes with big responsibility,\u201d warns Hiemstra.<\/p>\n<\/div>\n

\"Data
Steelcase’s Workplace Advisor collects data about how the workplace is used in order to help organizations understand how to best use their real estate.<\/figcaption><\/figure>\n

 <\/p>\n

User-centered design<\/h3>\n

This approach stems from Steelcase\u2019s longstanding user-centered design process for developing new products. \u201cWe don\u2019t create a chair, for example, based on what we believe the customer wants. We talk to them first, we go into the field, we observe how people work, the issues they have. We draw insights from those observations, and we engineer and design around those insights. So we do the same work before we develop our digital products,\u201d says Redman.<\/p>\n

One of Steelcase\u2019s first digital products, introduced in 2017, is Workplace Advisor. It collects data about how the workplace<\/a> is used in order to help organizations understand how to best use their real estate and create more effective workplaces.<\/p>\n

\u201cWe are completely transparent about all the customer data Workplace Advisor collects, how we use it, how we secure it. We want our customers to completely understand the process,\u201d says Shawn Hamacher, assistant general counsel at Steelcase.<\/p>\n

\u201cPrivacy by design means we build privacy into the product. You don\u2019t try to bolt it on afterwards. Privacy is part of each digital product\u2019s DNA.\u201d<\/p>\n

To safeguard the confidentiality and privacy of the data collected by Workplace Advisor, Steelcase uses the Microsoft Azure IoT platform with its strong security and privacy guarantee. In addition, Workplace Advisor systems will be audited against the Service Organization Controls (SOC 2) framework. Developed by the American Institute of Certified Public Accountants, this includes third-party audits and reports available to Steelcase customers who use Workplace Advisor.<\/p>\n

\"\"
\u201cWe are completely transparent about all the customer data Workplace Advisor collects, how we use it, how we secure it.” -Shawn Hamacher, Steelcase Assistant General Counsel<\/figcaption><\/figure>\n

A global standard<\/h3>\n

Privacy standards evolve, of course. For example, Europe recently has taken the lead in digital privacy by establishing the General Data Protection Regulation, or GDPR, which went into effect in May. GDPR increases privacy protection for all individuals in the European Union. Steelcase will comply with GDPR for all of its digital products customers, not only those in Europe but around the world.<\/p>\n

\u201cIt\u2019s the most stringent standard globally for data privacy and security, and we\u2019re using it for all our customers\u2019 data. It doesn\u2019t matter if you\u2019re a Steelcase customer in Europe, Asia, Africa, North or South America, any country\u2014our digital products will comply with the GDPR,\u201d says Berman.<\/p>\n

\"\"
\u201cPrivacy by design means we build privacy into the product. You don\u2019t try to bolt it on afterwards. Privacy is part of each digital product\u2019s DNA.\u201d -Shawn Hamacher<\/figcaption><\/figure>\n

\u201cWe want all of our customers to understand that privacy and security by design means transparency in how we operate, how data is gathered and used, and how we protect that data,\u201d adds Hamacher. \u201cThere is no privacy without security. Privacy starts with secure data.\u201d<\/p>\n

The same applies to all Steelcase digital products, including Steelcase Find, a mobile app that helps people quickly locate workspaces and colleagues, which makes it easier to connect and collaborate, the core work of the innovation economy.<\/p>\n

\u201cHigh expectations and tough requirements have always been part of development at Steelcase,\u201d says Steve Rodden, who heads the development team for Smart + Connected products. \u201cAs a company, we\u2019re used to dealing with regulatory guidelines, quality standards and different compliance issues for furniture. We want to not just meet basic standards. We want be excellent in those areas, so we set even higher design, engineering and manufacturing requirements of our own. It\u2019s the same with digital products. We want to lead in data privacy and security, so it was an easy decision for us to set stringent data privacy and security standards as part of our development process.\u201d<\/p>\n

Business runs on data. Every time we trade information for a digital product, we help fuel the new global economy. Users must be able to rely on organizations to be fully transparent about how they collect, store and analyze that data.<\/p>\n

\u201cIt\u2019s important that our customers understand that the everyday transactions of data in exchange for helpful services rest on a foundation of privacy and security,\u201d says Hamacher. \u201cWe\u2019ve stood behind our products for over 100 years and that\u2019s not going to change because it\u2019s a digital product. How we operate is how we\u2019ve always done business. It\u2019s all about trust.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"

The benefits of a connected world\u2014greater innovation, growth and prosperity\u2014will not be realized unless people can trust that data being collected is managed and analyzed responsibly.<\/p>\n","protected":false},"author":15,"featured_media":382738,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"topic":[5484],"class_list":["post-382544","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","industry-workplace","topic-privacy"],"acf":[],"yoast_head":"\nDesigning for Data Privacy in the Workplace | Steelcase<\/title>\n<meta name=\"description\" content=\"In today\u2019s digital and connected world, organizations must consider data security and privacy as an integral part of the design process for any digital product.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Designing for Data Privacy in the Workplace | Steelcase\" \/>\n<meta property=\"og:description\" content=\"In today\u2019s digital and connected world, organizations must consider data security and privacy as an integral part of the design process for any digital product.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/\" \/>\n<meta property=\"og:site_name\" content=\"Steelcase\" \/>\n<meta property=\"article:published_time\" content=\"2018-05-25T19:05:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-10-20T01:07:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/images.steelcase.com\/image\/upload\/c_fill,dpr_auto,q_70,h_600,w_1200\/v1527256762\/www.steelcase.com\/2018\/05\/25\/18-0105715.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Areli Arellano\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Areli Arellano\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Designing for Data Privacy in the Workplace | Steelcase","description":"In today\u2019s digital and connected world, organizations must consider data security and privacy as an integral part of the design process for any digital product.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/","og_locale":"en_US","og_type":"article","og_title":"Designing for Data Privacy in the Workplace | Steelcase","og_description":"In today\u2019s digital and connected world, organizations must consider data security and privacy as an integral part of the design process for any digital product.","og_url":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/","og_site_name":"Steelcase","article_published_time":"2018-05-25T19:05:46+00:00","article_modified_time":"2023-10-20T01:07:38+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/images.steelcase.com\/image\/upload\/c_fill,dpr_auto,q_70,h_600,w_1200\/v1527256762\/www.steelcase.com\/2018\/05\/25\/18-0105715.jpg","type":"image\/jpeg"}],"author":"Areli Arellano","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Areli Arellano","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/#article","isPartOf":{"@id":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/"},"author":{"name":"Areli Arellano","@id":"https:\/\/www.steelcase.com\/#\/schema\/person\/2f8efe95c5ad8253b4a674dbcfefe5cd"},"headline":"Data Privacy. By Design.","datePublished":"2018-05-25T19:05:46+00:00","dateModified":"2023-10-20T01:07:38+00:00","mainEntityOfPage":{"@id":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/"},"wordCount":1637,"commentCount":0,"publisher":{"@id":"https:\/\/www.steelcase.com\/#organization"},"image":{"@id":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/#primaryimage"},"thumbnailUrl":"https:\/\/images.steelcase.com\/image\/upload\/v1527256762\/www.steelcase.com\/2018\/05\/25\/18-0105715.jpg","articleSection":["Corporate"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/","url":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/","name":"Designing for Data Privacy in the Workplace | Steelcase","isPartOf":{"@id":"https:\/\/www.steelcase.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/#primaryimage"},"image":{"@id":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/#primaryimage"},"thumbnailUrl":"https:\/\/images.steelcase.com\/image\/upload\/v1527256762\/www.steelcase.com\/2018\/05\/25\/18-0105715.jpg","datePublished":"2018-05-25T19:05:46+00:00","dateModified":"2023-10-20T01:07:38+00:00","description":"In today\u2019s digital and connected world, organizations must consider data security and privacy as an integral part of the design process for any digital product.","breadcrumb":{"@id":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/#primaryimage","url":"https:\/\/images.steelcase.com\/image\/upload\/v1527256762\/www.steelcase.com\/2018\/05\/25\/18-0105715.jpg","contentUrl":"https:\/\/images.steelcase.com\/image\/upload\/v1527256762\/www.steelcase.com\/2018\/05\/25\/18-0105715.jpg","width":3200,"height":1800,"caption":"360 magazine data privacy by design"},{"@type":"BreadcrumbList","@id":"https:\/\/www.steelcase.com\/research\/articles\/topics\/privacy\/data-privacy-design\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.steelcase.com\/"},{"@type":"ListItem","position":2,"name":"Data Privacy. By Design."}]},{"@type":"WebSite","@id":"https:\/\/www.steelcase.com\/#website","url":"https:\/\/www.steelcase.com\/","name":"Steelcase","description":"","publisher":{"@id":"https:\/\/www.steelcase.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.steelcase.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.steelcase.com\/#organization","name":"Steelcase","url":"https:\/\/www.steelcase.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.steelcase.com\/#\/schema\/logo\/image\/","url":"https:\/\/images.steelcase.com\/image\/upload\/v1531399627\/sc_core_424_sm-1.jpg","contentUrl":"https:\/\/images.steelcase.com\/image\/upload\/v1531399627\/sc_core_424_sm-1.jpg","width":331,"height":87,"caption":"Steelcase"},"image":{"@id":"https:\/\/www.steelcase.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.steelcase.com\/#\/schema\/person\/2f8efe95c5ad8253b4a674dbcfefe5cd","name":"Areli Arellano","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.steelcase.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/41fbafa4ace615b5ed6c37a375d49eca?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/41fbafa4ace615b5ed6c37a375d49eca?s=96&d=mm&r=g","caption":"Areli Arellano"},"sameAs":["https:\/\/www.steelcase.com"],"url":"https:\/\/www.steelcase.com\/research\/articles\/author\/aarellan-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2\/"}]}},"_links":{"self":[{"href":"https:\/\/www.steelcase.com\/restapi\/wp\/v2\/posts\/382544"}],"collection":[{"href":"https:\/\/www.steelcase.com\/restapi\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.steelcase.com\/restapi\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.steelcase.com\/restapi\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/www.steelcase.com\/restapi\/wp\/v2\/comments?post=382544"}],"version-history":[{"count":13,"href":"https:\/\/www.steelcase.com\/restapi\/wp\/v2\/posts\/382544\/revisions"}],"predecessor-version":[{"id":825266,"href":"https:\/\/www.steelcase.com\/restapi\/wp\/v2\/posts\/382544\/revisions\/825266"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.steelcase.com\/restapi\/wp\/v2\/media\/382738"}],"wp:attachment":[{"href":"https:\/\/www.steelcase.com\/restapi\/wp\/v2\/media?parent=382544"}],"wp:term":[{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.steelcase.com\/restapi\/wp\/v2\/topic?post=382544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}