Building Privacy into 5G Technology Cannot Be an Afterthought

For anyone who is a keen follower of technology, it is highly likely that they have been a part of conversations around the 'Race to 5G' and the impact it can have on economies and societies. The road to 5G began back in 2015 and today, it is the fastest-growing mobile technology with commercial operations live in 24 markets. By offering greater speed in transmissions, lower latency, better control over remotely connected applications, and real-time ability to sense and respond, 5G enables instant connectivity to billions of devices. So yes, 5G networks are already effectively fueling innovation and increasing performance across a number of industries, but this innovation also brings with it an increased risk towards data privacy and protection.

Because of its ability to create a hyper-connected environment where not all networks and devices are built with equal security measures or regulations, the chances of online fraud, data breach, identity theft, and ransomware attacks are higher. As we inch closer towards more rollouts that are commercial across industries, it is important to consider a privacy-by-design approach and develop a proposal that will safeguard data and ensure privacy.

So what exactly are the threats that can impact such an ecosystem? In a 5G powered world, the network infrastructure moves away from a central, hardware-based network to a decentralized, virtual, and software-defined network (SDN).

Networks prior to 5Goperated with physical plug points where security checks are done; however in a software-defined network, virtualized network functions (VNF) take place at the virtual network edge, thus eliminating points of inspection and control. With no physical boundaries and a 5G network using cloud-based data storage, there is a high probability that operators will find it difficult to control user data stored in cloud environments.

Usually, countries often operate at different levels of privacy measures and enforcement, and hence data protection remains highly challenged when the data is stored in the cloud outside of the home country.

How we do address this

While business is gearing up to unlock the opportunities 5G presents, is important to consider a privacy-by-design approach and develop a proposal that will protect organizations against attacks. As 5G is breaking the boundaries of what is possible with mobile network technology, new regulations and guidelines defining how 5G networks operate need to be enacted, primarily because the usage of the 5G network will impact more enterprises and individuals.

5G manufacturers and solution providers should be designing insecurity into their networks, and enterprises should be held responsible for the privacy of data created and stored on the network. There is also a need for enhanced identity access management and data protection in addition to the physical security of on-location customer equipment.

Lastly, businesses need to educate employees on their shared responsibility of protecting company assets on a 5G network. With the hybrid work culture making significant progress, regular training should be provided to key stakeholders to foster a culture wherein each individual is aware and has the ability to control the transfer of data.

For a network superior to 5G, organizations need to be prepared with solutions based on high cybersecurity standards and privacy best practices to truly unleash the potential it offers.

Author

Barry Cook, Group Data Protection Officer, VFS Global

Mr. Barry Cook, VFS Global's Group Data Protection Officer, is in charge of ensuring the organization's compliance with Data Privacy & protection legislation across all locations of operations. Mr. Cook is a results-driven, innovative leader with in excess of 20 years of experience in providing Data Privacy, Information Security, and Risk Management solutions to major international businesses to government, pharmaceutical, private banking, and retail organizations.

In his current role, among several responsibilities, Mr. Cook oversees and directs privacy specialists, and coordinates privacy and data protection programs with senior executives globally to ensure consistency across the organization. He coordinates with the appropriate regulating bodies to ensure that programs, policies, and procedures involving data protection and privacy considerations are addressed in an integrated and comprehensive manner. Mr. Cook also develops and coordinates a risk management and compliance framework for privacy at VFS Global.

In the past, Mr. Cook has worked in the fields of Air Traffic and Defence Systems Design Engineering, Training & Development, Systems Analysis, IT Security and Risk Management, and Information Security with reputed organizations across the UK and Switzerland. Prior to joining VFS Global, he was leveraging his expertise to provide services to multinational and non-governmental organizations as a Data Privacy &Cybersecurity Consultant.

Mr. Cook is a Certified Information Systems Security Professional (CISSP) and has a Bachelor's degree in Integrated Engineering with Management. He is also an IBM Certified AIX Technical Expert (ATE).