Information management assignment on data protection at Nike and privacy of its customers

Question

Task: You have been asked to review how the organisations obtain, stores and uses information from within the organisation and from external sources. Discuss the use of consumer data in your information management assignment.

Answer

Introduction
Nike is a global leader in athletic apparel, footwear, and accessories. Founded in 1964, the company operates in more than 200 countries around the world and is a leader in innovation and technology in the industry. Nike strives to provide its customers with quality products and services, as well as a safe and secure environment for their data. This Data Protection Statement in the information management assignmentexplains how Nike collects, processes, and stores personal data, as well as how it protects the privacy of its customers. It also outlines the rights of customers to access, amend, or erase their personal data. Finally, the information management assignment outlines the measures taken by Nike to ensure the security of its customers' data. The statement also applies to all of Nike's digital services, including its website, mobile apps, and social media accounts.

Types of Information Collected by Nike explained in the information management assignment
Nike is committed to protecting the privacy of its customers and visitors to its websites, applications and products (Mohammed 2020). As per the information management assignment they collect, store and use various types of data about their customers, including but not limited to: contact information such as postal address, name, telephone number, email address, and other personal information; payment information such as credit card or other financial data; non-personal data such as purchase history, browsing history, and other usage data; and technical information such as IP address, device identifiers, and other device-specific data. As per the information management assignment they use this information to provide, improve and protect our products and services, to contact customers, to process payments, and to better understand how their customers interact with them and their products. They may also use this information to provide personalized services, offers, and communications.

As per the information management assignment they may share this information with third parties, such as service providers, advertising platforms, and analytics providers, who help them deliver their services and process payments (Isaak and Hanna 2018).They will only share information when necessary to provide their services, and they will not sell or rent any personal information.

They take reasonable steps to protect the security of their customers’ data and to ensure it is used appropriately and in compliance with this Privacy Statement. As per the information management assignment they also comply with applicable data protection laws, such as the EU’s General Data Protection Regulation (GDPR).

Data Collection, record and uses addressed in the information management assignment
Nike collects and records data in a variety of ways. First, Nike collects data from its customers through online surveys and customer feedback (Qin 2020). This data is then used to improve product design and marketing strategies. As per the information management assignment findings, Nike also collects data from its online stores, such as online sales, customer reviews, and product ratings. This data is then used to identify trends and patterns in customer behavior and preferences. Nike also collects data from its social media channels, such as Twitter and Instagram. This data is then used to understand customer sentiment and engagement levels. Furthermore, Nike uses analytics tools to measure the success of its marketing campaigns and to improve them (Nica, Chiri?? and Ionescu 2021). Finally, Nike collects data from its partners, such as retailers and suppliers. As per the information management assignment this data is used to determine which products are selling well, as well as to identify opportunities for growth. Overall, Nike collects and records data in a variety of ways, and this data is then used to improve product design and marketing strategies, identify trends and patterns in customer behavior and preferences, measure the success of marketing campaigns, and identify opportunities for growth.

Safeguard
Nike has implemented a number of safeguards to protect data and personal data mentioned in the information management assignment.

• Nike has implemented encryption technologies to protect data from unauthorized access (Diovu and Agee 2019). This includes encrypting data both in transit and at rest. • Nike has implemented a system of access control and authentication to ensure that only authorized personnel can access sensitive data (Karmakaret al. 2020). This system requires users to authenticate themselves with a password or other credentials before they can access the data.

• Nike has implemented a data backup system to ensure that data is not lost in the event of a system failure or other disaster (Rasoolet al. 2022). As per the information management assignment this system allows Nike to quickly restore data in the event of a system failure or other incident.
• Nike has implemented a system of monitoring and logging to detect and respond to data security incidents. This system allows Nike to detect unauthorized access attempts and take appropriate action.
• Nike has implemented a system of data privacy and security policies to ensure that data is handled and processed in accordance with applicable laws and regulations. As per the information management assignment this includes a policy prohibiting the sale of customer data to third parties. Overall, Nike has implemented a comprehensive system of safeguards to protect data and personal data, including encryption technologies, access control and authentication, data backup, monitoring and logging, and data privacy and security policies.

Effectiveness of Safeguard
Nike’s safeguards are fairly effective in protecting data and personal data (Steele 2022). The encryption technologies and access control and authentication systems help to protect data from unauthorized access. As per the information management assignment the data backup system ensures that data is not lost in the event of a system failure or other disaster. The monitoring and logging system allows Nike to detect and respond to data security incidents. And the data privacy and security policies help to ensure that data is handled and processed in accordance with applicable laws and regulations.

However, there is always room for improvement. For example, as per the information management assignmentNike could implement additional encryption technologies and access control and authentication systems to further protect data. Additionally, Nike could update its monitoring and logging system to detect more sophisticated data security incidents. Finally, Nike could update its data privacy and security policies to ensure that data is not misused or shared with unauthorized parties.

Overall, Nike’s safeguards are fairly effective as per the information management assignmentin protecting data and personal data. However, there is always room for improvement, and Nike should continue to update and refine its safeguards to ensure maximum data security.

Current legislation Nike should be Complying
Nike must comply with the European Union's General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA2018). The GDPR is an EU-wide law which applies to all EU member countries and is designed to strengthen data protection and privacy for all individuals within the EU. As per the information management assignment it applies to companies and organisations of any size and requires that they obtain consent from individuals before collecting or processing their personal data. The GDPR also sets out data subjects' rights and the obligations of data controllers and processors.

The Data Protection Act 2018 is the UK's implementation of the GDPR. It applies to all organisations, including Nike, that process personal data in the UK and offers similar protections to those given by the GDPR. As per the information management assignment it also gives individuals more say over how their data is used and sets out their rights, such as the right to be informed about how their data is used, the right of access to their data, and the right to object to the processing of their data.

Nike must ensure it is compliant with both the GDPR and the DPA2018 by adhering to the principles of data protection and processing personal data in a lawful and fair manner. It must also ensure that it has suitable policies and procedures in place to protect the personal data it holds, such as having a privacy policy and a data protection officer. In addition, it is advised in this information management assignment that it must comply with the rights of individuals, such as providing individuals with the right to access their personal data and the right to have their data corrected or deleted.

Conclusion
This information management assignmentconcludes that Nike is committed to protecting the privacy of its customers and visitors to its websites, applications and products. They collect, store and use various types of data about their customers, including but not limited to: contact information, payment information, non-personal data, and technical information. They use this information to provide, improve and protect their products and services, to contact customers, to process payments, and to better understand how their customers interact with them and their products. Nike has implemented a number of safeguards to protect data and personal data, including encryption technologies, access control and authentication, data backup, monitoring and logging, and data privacy and security policies. As per the information management assignment they also comply with applicable data protection laws, such as the EU’s General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA2018). Overall, Nike’s safeguards are fairly effective in protecting data and personal data. However, there is always room for improvement, and Nike should continue to update and refine its safeguards to ensure maximum data security and compliance with data protection laws.

References
Diovu, R.C. and Agee, J.T., 2019. Enhancing the security of a cloud?based smart grid AMI network by leveraging on the features of quantum key distribution. Transactions on Emerging Telecommunications Technologies, 30(6), p.e3587.https://onlinelibrary.wiley.com/doi/abs/10.1002/ett.3587 Isaak, J. and Hanna, M.J., 2018. User data privacy: Facebook, Cambridge Analytica, and privacy protection. Computer, 51(8), pp.56-59.https://ieeexplore.ieee.org/abstract/document/8436400/ Karmakar, K.K., Varadharajan, V., Nepal, S. and Tupakula, U., 2020. SDN-enabled secure IoT architecture. IEEE Internet of Things Journal, 8(8), pp.6549-6564.https://ieeexplore.ieee.org/abstract/document/9290076/

Mohammed, I.A., 2020. USABILITY AND PRIVACY IN ACADEMIC LIBRARIES: REGAINING A FOOTHOLD THROUGH IDENTITY AND ACCESS MANAGEMENT. International Journal of Innovations in Engineering Research and Technology, 7(3), pp.43-48. https://www.researchgate.net/profile/Ishaq-Azhar-Mohammed/publication/353887827_USABILITY_AND_PRIVACY_IN_ACADEMIC_LIBRARIES_REGAINING _A_FOOTHOLD_THROUGH_IDENTITY_AND_ACCESS_MANAGEMENT/links/61169d5c1ca20f6f861e4539 /USABILITY-AND-PRIVACY-IN-ACADEMIC-LIBRARIES-REGAINING-A-FOOTHOLD-THROUGH-IDENTITY-AND-ACCESS-MANAGEMENT.pdf

Nica, I., Chiri??, N. and Ionescu, ?., 2021. Using of KPIs and Dashboard in the analysis of Nike company's performance management. Theoretical & Applied Economics, 28(1).https://www.researchgate.net/profile/Ionut-Nica-2/publication/351123152_Using_of_KPIs_and_Dashboard_in_the_analysis_of_Nike_company's_performance _management/links/60927337458515d315f79753/Using-of-KPIs-and-Dashboard-in-the-analysis-of-Nike-companys-performance-management.pdf

Qin, Y.S., 2020. Fostering brand–consumer interactions in social media: the role of social media uses and gratifications. Journal of Research in Interactive Marketing.https://www.emerald.com/insight/content/doi/10.1108/JRIM-08-2019-0138/full/html

Rasool, R.U., Ahmad, H.F., Rafique, W., Qayyum, A. and Qadir, J., 2022. Security and privacy of internet of medical things: A contemporary review in the age of surveillance, botnets, and adversarial ML. Journal of Network and Computer Applications, p.103332.https://www.sciencedirect.com/science/article/pii/S1084804522000017

Steele, V., 2022. Corporate Social Responsibility, Data Protection and the Right to Privacy. LJMU Student Law Journal, 2.https://openjournals.ljmu.ac.uk/index.php/SLJ/article/view/577