Data breach notification must demonstrate commitment to customer service

Data breach notification must demonstrate commitment to customer service

What's the best way to notify customers of a security or data breach? Do you recommend having a policy in place in case this happens? What should it include? Obviously, our company is hoping to avoid a problem like this, but how should we alert customers if any kind of breach occurs?

    Requires Free Membership to View

    Login

    When you register, you'll begin receiving targeted emails from my team of award-winning editorial writers on the latest customer relationship management (CRM)and call center technology issues today. Our goal is to keep you informed on the hottest issues facing this fast-changing industry.

    Hannah Smalltree, Editorial Director

    By submitting your registration information to SearchCRM.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchCRM.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

The best approach is to plan for a data breach. Assume that problems will happen and then ask yourself how you can demonstrate your commitment to your customers in a data breach notification. Instead of optimizing your processes, it will be wiser to optimize your complaint-handling process. In designing a response plan for a data breach, focus on four important elements:

1. Speed of response – Your ability to respond within an hour and not wait for the customer to contact you is crucial. It will demonstrate your proactive approach and that fact that "things are under control."
2. Assuming responsibility – Regardless of the real reason, the customer will view you as responsible for the problem. You might as well assume the responsibility and not argue with the customers (unless they were grossly negligent). Assuming responsibility will take the "sting" out of the dispute and put you and the customer on the path to resolution.
3. Providing proactive guidance – In a data breach notification, provide customers with directions as to what to do next to minimize the damage or rectify the situation. Your directions should be specific and include links to online resources or to the relevant forms they need to fill out. Save the customer time and hassle by sending him directly to the right Web page.
4. Compensating for damage -- If the damage is substantial, include a small monetary compensation for the inconvenience. If you want to retain your customer, view this compensation as an investment in the long-term relationship. By providing compensation, you will demonstrate that you sincerely care about the damage that was caused.

By planning and being proactive, you will demonstrate your commitment for the future and to your relationship with your customers. In general, problems such as identity theft will be forgiven only if companies act swiftly and responsibly. Preparing for such events will allow you to create a better and more complete response. Problems are a great opportunity to differentiate your company through delightful experiences.

This was first published in March 2007