Ian Finn Ian Finn

Celebrate Deleting Data: Trust, Privacy and the Data MVP

Why great data stewardship starts with collecting less and deleting more: three takeaways from the Secure by Design series opener, plus a clip on the data MVP.

Most teams celebrate collecting data. Very few celebrate deleting it.

Data is about trust: trust in how it’s collected, stored, managed through its life cycle and, ultimately, deleted once it’s no longer needed. Trust is both an input and an outcome, and that’s the essence of good data stewardship.

In practice, good customer data acquisition comes down to three principles: just enough data, fit for purpose; stored safely and securely; and time-bound retention policies, linked to business need and customer tenure.

These principles were at the heart of my recent conversation with Rebecca Fairlamb, opening Product Economics’ Secure by Design webinar series. It’s the part of the conversation I’d want every practitioner working with data and privacy to hear.

Three things I’d take from it:

→ Give every data field one sentence: why we hold it, how long we keep it, and what the customer thinks it’s for.
→ Celebrate deleting data as much as collecting it. Less data means less risk, less cost and a smaller blast radius if something goes wrong.
→ Trust is an output of how a team works, so ownership has to sit with the product team, not only with compliance.

When launching a new proposition, define your “data MVP”: how much data is just enough, and why each field is justified. And remember that an MVP is about learning in the real world, with real customers, not in a simulated environment that never touches them.

That’s one of the principles in my book, Product Truths: Five Principles for Building Products That Work at Scale, and one of the key themes I discuss in the session. You can watch it in the sneak peek clip below.

→ Watch the full recording on YouTube

Related: [Data is now more valuable than oil]

Read More
Identity & Access Management, AI, Security Ian Finn Identity & Access Management, AI, Security Ian Finn

The Identity Paradox: Reflections on AI from the boardroom and from the back of a taxi

A ChangeMakers roundtable on non-human identities and AI governance, and a taxi ride home that put the same question in miniature: can the systems we trust actually be trusted with what matters most?

Privileged and invigorated to have been part of lively debate this week, on the very topical thread of non-human identities, now proliferating across organisations as a consequence of the AI adoption surge. By 2027 it is predicted that 74% of organisations will be using AI Agents (Deloitte study, 2026).

The event was a #ChangeMakers round table on ‘The Security Shift’ that is consequently underway, as non-human identities proliferate at pace. The discussions progressed through the AI adoption curve, governance considerations, practical challenges and looking to ensure cross-org alignment, whilst the pace of change is more rapid than the process, procedures and guardrails that follow in its wake. I offered a point about the conundrum proposed by the ‘Identity Paradox’, whereby organisations experience intense downward exec pressure to implement AI at pace; but the balancing capabilities in controls and checks and balances are often stretched to keep up.

The quality of discussion in the room was excellent and perfectly on point for this critical topic - bringing together tech leaders operating where bleeding edge Identity, AI and Security intersect.  

With AI now being such a pervasive element of modern life, it was perhaps not a surprise that even the taxi ride home was ‘on topic’. Travelling back in a cab from Guildford station, I found myself in conversation with the driver, who was telling me his own AI story and the impact it had on the lives of both him and his family, particularly for his daughter, who was experiencing learning difficulties. Utilising AI to research and uncover local authority and other support resources, he relayed how AI was an accelerating force in helping him navigate the hugely complex routes to securing help for his daughter, via untangling a web of complex processes.  

That's the identity paradox in miniature. In the room, we debated how to govern non-human identities before they outpace our controls. In the cab home, AI was already, quietly, helping a father navigate a system built for humans, on behalf of a daughter who needed it most. Two very different rooms. The same question: can the systems we trust actually be trusted with what matters most to us?

AI and Identity discussions in the room

Read More