Security experts discuss the complex array of challenges and opportunities in the Middle East regarding data privacy.
Amid the dynamic landscape of digital privacy and cybersecurity, the Middle East stands at a pivotal juncture. With the region increasingly tightening its data protection measures in response to evolving threats, the imperative for vigilance and adaptability has never been more pronounced.
Datatechvibe talks to two industry leaders on Data Privacy Day about the intricate web of challenges and opportunities facing organisations in the Middle East.
Ramzi Itani, Regional Director at Veritas Technologies
Data Privacy Day serves as an important reminder for IT leaders in all organisations across the Middle East region of the scale of growing cyber threats to their data, as well as the business risks presented by non-compliance with the rapidly evolving regulatory landscape, designed to keep data safeguarded. In line with this year’s theme of ‘Taking Control of your Data,’ the role of Artificial Intelligence, and its relationship to our data protection cannot be overlooked.
While the transformative impact of Artificial Intelligence (AI) on the way we manage our data is evident, AI’s swift evolution has given rise to new challenges, notably seen in the surge of autonomous ransomware attacks.
Veritas’ Data Risk Management report revealed that 73% of UAE organisations fell victim to ransomware attacks in the last two years. AI not only enhances threat detection but also empowers cybercriminals to execute sophisticated attacks.
The evolution of AI is also making data privacy compliance more complex, and regional and national regulatory must continue to develop legislative guardrails for public-facing large language models (LLMs) and Generative AI (GenAI). For example, The DIFC recently announced amendments to its existing data protection regulations, with newly added AI provisions being some of the most significant changes.
As the Middle East tightens its data protection frameworks in response to these challenges, it is clear that vigilance and adaptability are not merely optional but essential and are also recognised as critical by individuals. Veritas research on the use of generative AI technologies in professional environments showed that 44% of employees questioned in the UAE understood that using public generative AI tools did introduce greater risks of sensitive information being leaked.
The commitment to principles of ethical AI use in the region, particularly with the UAE’s national strategy for AI, is a testament to the proactive stance being taken. In navigating the intricate balance between leveraging AI for protection and preventing its misuse, the balance struck today will define the security and privacy of our digital tomorrow.
Mohammed Eissa, Regional Sales Director, MEA, Entrust
Safeguarding digital identities must take centre stage in our increasingly interconnected world. The so-called conflict between “seamless user experience” and security is over — the only answer is that security has to be welcomed as part of the experience.
Over the past few years, data breaches and privacy scandals have become alarmingly commonplace, raising concerns about the security of our personal information. From large-scale corporate breaches to individual cases of identity theft, the threats to our digital privacy persist and continue to evolve.
As technology continues to advance at a rapid pace, so too do the tools and techniques employed by malicious actors. From sophisticated hacking attempts to more subtle forms of data mining, our personal information is constantly under siege. Even the most highly-trained security professionals may miss increasingly realistic AI-generated phishing scams, across text, voice, and video.
Governments and regulatory bodies across the Middle East continue strengthening the fight against an ever-evolving threat landscape. For instance, UAE’s Dubai International Financial Centre (DIFC) recently announced modifications to its current data protection laws, perhaps of the most important of which are the newly included AI clauses.
Some key strategies that organisations can implement to safeguard digital identity amidst these challenges can be embracing a Zero Trust model, implementing strict access controls, continuous monitoring, and robust authentication mechanisms; including biometric authentication. It is also crucial to prioritise ongoing cybersecurity training programs to educate employees and users recognizing phishing attempts. Finally, Implementing end-to-end encryption for sensitive data will ensure that even if unauthorised access occurs, the intercepted information remains indecipherable.
Businesses in the UAE must protect digital identities today more than ever before. CISOs play a pivotal role in shaping the cybersecurity landscape of their organisations, and their strategies must adapt to the evolving challenges posed by cyber threats. By embracing innovative technologies, fostering a culture of security awareness, and adhering to robust privacy practices, organisations can navigate the digital seas with confidence, safeguarding the identities of individuals in an interconnected world.
