Magazine menu Close Magazine menu

supply chain

Latest stories

customs clearance technology

AI platform could banish import and export ‘customs crunch’

  • min read
    • Every year, we export and import some 19 trillion US dollars worth of goods around the world. Whether they arrive or leave by air, land or sea, one thing is common at borders: Customs clearance facilities face a crunch. The 'customs crunch' is when mismatched, missing or incomplete documentation hampers the passage of goods through borders. With complex international trade rules, anyone can make a mistake. Delays and confusion mean costs and inefficiency, but AI might be about to change everything. The ins and outs of the customs crunch Parties sending and receiving international cargo must share information about themselves, like addresses and phone numbers, and their shipment, at many points in the international supply chain. A common digital platform for sharing import and export documentation could mean significant efficiencies. Now, there are finally minds working on the hard problem of documentation sharing to get goods across international borders with speed and ease. Sam Tyagi, Founder, CEO and Chairman of customs clearance platform KlearNow, gives an example of how Brexit, the UK's exit from the European Union (EU,) has exacerbated problems. "Post-Brexit, the UK and its EU trading partners need multiple documents in place to trade. Many UK exporters can manage the export declaration process for goods leaving the UK. Still, when goods reach the destination country's border, the importer may not be prepared for the import declaration on the other side, thanks to extra documents needed since Brexit." The extra documentation can include things like phytosanitary certificates and testing and analysis reports. Haider Abdo, founder and CEO of retail returns specialists Returnado recounts an EU-based fashion firm "had around 1.4 million US dollars worth of customer returns stuck in their UK proxy warehouse. Getting all their suppliers to prepare paperwork and procedures to get the goods through UK ports, back to the EU, was new." He also saw the COVID-19 pandemic add to the problem. "During lockdowns, retailers offered many discounts and customers who would normally buy in-store bought online. We heard about record growth in e-commerce, but little on the corresponding increase in returns." Tyagi outlines how beneficial arrangements like trade agreements can also mean more documentation. "Aside from the EU, there's the North American Free Trade Agreement (NAFTA,) Progressive Agreement for Trans-Pacific Partnership (CPTPP) and more," he explains. "These agreements also brought new technical requirements and sanitary measures, meaning more customs clearance processes and documentation." AI's role in solving the customs crunch KlearNow has spearheaded the first all-computerized AI-based online software platform for exporters, merchants and specialists to share information and conduct customs business in real-time with local customs authorities. Tyagi explains how it works. "Partners add KlearNow to their communication streams. The platform then digitizes documents and correspondence so they can be centrally accessed and used throughout the process, including meeting customs recordkeeping requirements." "It eliminates manual data entry, archiving and printing, meaning faster export and import filings," says Tyagi. He believes his company's clients didn't see the same disruption from the coronavirus pandemic as many businesses in the same industry. Working from home presented little barrier because users can log in from anywhere with an internet connection and remotely manage their whole customs process. The platform gained popularity in the US and Canada in the two years since its launch, entering the UK market in 2021. "We plan to keep expanding into 20 more countries, including the Netherlands, Australia and Japan, for example, over the next 3 to 5 years," says Tyagi. "Because the problem is everywhere, we feel we can make a real difference." KlearNow isn't alone in noticing the customs crunch and logistical documentation problem. There are now specialist products for ocean container tracking, track and trace and managing inventory, among other areas. Alternatives to exporting and importing Another solution to the customs crunch is avoiding customs altogether. Gelato is a print-on-demand company with a difference – instead of printing things for your business that get sent to your customer, Gelato connects businesses with participating printers who can print the goods where they're needed. Gelato's CEO Henrik Müller-Hansen explains its value: "Without owning assets, we can empower 92 percent of the world's population with local production and distribution through partnerships with production hubs. It fuels local economies and entrepreneurs, and reduces delivery times, carbon emissions and shipping costs." While Gelato's model should give us pause to consider assumptions about how we do business, print is one industry where its nature means manufacture at destination is often viable. But it seems unlikely we'll see this model reduce volumes of goods traveling across borders soon. A common platform for sharing import and export documentation may seem like a niche digital transformation, but most, if not all, economies rely on international trade. Navigating documents and processes, especially with new and changing requirements, is time-consuming and error-prone. Exporters, importers and clearance facilities the world around will give clever solutions that smooth the customs crunch a warm welcome.
data security supply chain

Where you should tighten the privacy links in your data supply chain

  • min read
    • A chain is only as strong as its weakest link. Your business is responsible not just for upholding your customers' data privacy inside your organization. Everyone who uses the data on your behalf must be as privacy-conscious as you. Those data-handling partners may include accountancy, telecommunications and cloud storage, even office security and maintenance contractors. Personal data regulation takes privacy very seriously There's a legal reason strong privacy links in your supply chain matter, as well as a moral one. Privacy is at the core of the European Union's stringent General Data Protection Regulation (GDPR.) It applies to personal data processed by organizations in the European Economic Area (EEA) and those outside that offer goods or services to those within. GDPR is the gold standard for data protection. Many other legislative frameworks have used it as a model, like California Consumer Privacy Act (CCPA,) Brazil's Lei Geral de Proteção de Dados (LGPD) and the proposed strengthening of Australia's Privacy Act 1988. Complying with GDPR won't always mean you're complying with other jurisdictions' regulations, so if you're sending personal data across borders, get local advice. GDPR is built around defining what it means to be a data controller or data processor, and what each must do. A controller decides what personal data to collect, gathers it and decides how to use it. A processor receives personal data from another party and processes it as directed, but doesn't decide how it's used. The law says controllers must use only processors with technical and organizational structures that ensure data privacy. Data breaches mean business disruption and reputational damage. Then there's the money. Under GDPR, controller and processor may face huge fines: 20 million euro or up to four percent of the previous year's turnover – whichever is greater. In 2019, British Airways faced a record-breaking 183 million British pounds for a breach. Privacy holes affect businesses of all sizes Although GDPR came into force in 2018, many companies still aren't paying attention, says Jamel Ahmed of UK data privacy consultants Kazient Privacy Experts. "It's true for large enterprises to small- to medium-sized businesses. I often find bigger companies have excellent internal data security processes. The compliance people will ask the right questions and demand evidence. But along the supply chain, there's a massive gap relating to personal data. It's to do with a lack of understanding, and limited awareness and expertise." Peter Wright agrees. He's Managing Director of UK's Digital Law, specializing in online, data and cyber issues. "It's been overlooked in the past. And while there's more awareness now, that doesn't mean it's enough." How to tighten the links 1.    Ask data-processing suppliers the right questions Do your due diligence when you start a relationship with a supplier that involves passing data. Ahmed says, "As a minimum, check new suppliers are registered with UK's Information Commissioner's Office (ICO,) or your country's equivalent. Check they have good policy and practice. Check they understand their data privacy obligations and responsibilities. "Do they have a dedicated data protection officer (DPO,) and what are their qualifications and experience? I'd also want to see evidence they've spent time developing good practices rather than just complying with a checklist they've downloaded from somewhere." 2.    Have a contract that goes above and beyond The GDPR says there must be a written contract between data controller and processor, and what the contract terms must be, including type of data, how long it may be kept for and the nature and purpose of data processing. Data privacy experts think agreements between controller and processor should go further, drilling down to detail, showing the controller is giving enough oversight. 3.    Have a plan in place for what the controller does when there's a breach Under GDPR, all businesses handling data must keep a breach log, recording details of security incidents. Controllers should expect to be able to see anything in the processor's log that relates to its data. Ahmed thinks businesses should go further again, having a detailed plan for what the processor must do if a data breach happens. Ahmed goes on to say, "The GDPR obliges the processor to tell the data controller as soon as they become aware of a breach. But the contract needs to explain what constitutes a breach and what "as soon as you become aware" means." 4.    Bake risk management into your operations Having a watertight supplier contract is just the first step. Wright and Ahmed stress data controllers should manage risk along the supply chain in a proactive and ongoing way. That means regular risk audits and going back to check data policies with clients and suppliers when circumstances change. Wright advises, "Regulators look at how businesses show compliance. They don't want you to hold up a contract audit that says, "Oh yes, we looked at this two years ago and it was fine." They want to see continuous updates. If the worst happens and there is a breach of personal data, they want to see evidence the business did all it could to comply with legislation. "You need to show you've looked regularly at your risk register and updated it after meetings. If a supplier changes its terms, show you investigated, asked questions and reviewed their answers. Regulators want to see the regular auditing, questioning and managing of risk baked into your operations." 5.    Be wary of how behavior changes may impact privacy Our changing ways of life and work mean we need to be vigilant about what's happening with our data. Wright says, "Homeworking has been adopted in ways never envisaged when IT systems were set up. You may have signed up to terms in 2017 and reviewed them during your 2018 GDPR due diligence, but the supplier may have since changed systems. "Say your teleconferencing provider, because of increased demand, says, "We're revising our terms because our servers are no longer in the EU. We have a new web services provider, but we can't confirm where your data is processed. Hope that's OK."" Businesses should insist on full disclosure of what's changed and whether there are knock-on effects on privacy. "Big questions need answering," says Wright. "Where's your data going? Is it following GDPR? Are they transferring business call recordings to servers outside the EEA? What security is in place? Is the data encrypted end to end?" 6.    Consider everyone in your supply chain One of the greatest pitfalls is not realizing your data is passed along the supply chain at all. The golden rule is to assume every business you work with is a data processor. Otherwise, lapses can happen, even with the most sensitive personal information – material classified as "special-category data" under the GDPR. That's anything that could be used for unlawful discrimination such as ethnic origin, sexual orientation, health records or biometric data. Ahmed has a cautionary tale. "One of my clients looked for third-party software to do psychometric testing for graduate recruitment. Throughout the procurement, they didn't realize this involved special-category data under GDPR. There was potential for serious repercussions in failing to assess the data protection impact." In the age of big data, ignorance is never a defense. If personal data is in your possession, you must stay up-to-date with legislation, but also ethics and best practice. Raise awareness of risks and responsibilities, inside and outside your organization. Doing so will reduce the chance of a data breach and ensure your customers know you're looking after their interests.
by Innovating leaders.
Innovative tech.
About Secure Futures

Secure Futures magazine is your go-to business guide for opinions, trends and insight into the world of technology and cybersecurity. We help your business to bring on the future. Brought to you by Kaspersky, the global cybersecurity experts.

  • For all other countries