A shift from data protection as a burdensome obligation to a framework of privacy by design delivers three big results: less costs to adapt to new legislation, growth in consumer confidence and trust, and it runs less risks for a business in case of inevitable mishaps.
Data Privacy
Technological development has always outpaced privacy concerns, but never more so than in the past decade. Collection and centralization of personally identifiable information (PII), tracking of movements and digital surveillance are all at unprecedented levels. Regulations and laws are only just beginning to catch up to the ability of both governments and private entities to deploy these capabilities.
What exactly is there to worry about? The mass collection and centralization of data by giant multinationals such as Facebook and Google is as good of a place to start as any. Two decades of vacuuming up the personal data of users of various online services has created the most impressive marketing capabilities in history, but these profiles have astounding potential for damage when they are used the wrong way or fall into the wrong hands.
Unauthorized information that is captured in data breaches tends to find its way to massive “combo lists” that are sold and traded on the dark web. Social security numbers are added from this breach, home addresses and phone numbers from that one, personal health information from yet another. Soon, a frighteningly complete profile of millions of individuals is available to anyone willing to pay the asking price.
These are just the established data privacy issues. The emerging ones are even worse. High-quality facial recognition technology is just beginning to roll out across the public places of some countries. Artificial intelligence is not only making mass facial recognition possible, but magnifies the power and reach of any application that involves capturing and sorting information: scanning pictures, analyzing speech, sifting through text and location data. This threatens to not only shatter anonymity and privacy, but allow for highly advanced impersonation and take the concept of “identity theft” to new levels.
Some businesses chafe at the trouble and added expense of new and emerging data privacy regulations, but they are vital to both protecting rights and privacy and instilling confidence in end users. Customers want to be able to submit their payment information without worry about data breaches and identity theft, use services without wondering what is being done with their personal information and use devices without fear of surveillance or having location data tracked. The need for meaningful safeguards only grows greater as technological capabilities increase.
New papers reveal the National Security Agency (NSA) regularly purchases internet data about Americans from private data brokers, including categories that could normally only be obtained via a court order.
New smart home devices like the Amazon Echo and Google Home are raising numerous legal and privacy issues, primarily because they are recording conversations that you have in your daily life. If you wouldn’t want your friend recording one of your conversations, would you want a digital device doing the same? In this month's lead article, we examine the privacy issues with connected devices and look towards a future with artificial intelligence thrown into the mix.
A class action lawsuit accuses Oracle of creating “global surveillance” profiles for five billion people worldwide, attaching things like purchase records and GPS locations to their name and contact information.
Russian software company presented itself as being US-based and provides code that assists app developers in tracking user online activity. About 8,000 Android and iOS apps, available through the official app stores, make use of it.
It’s a fine line between “good policing” and a “police state” as San Francisco bans facial recognition technology city departments due to growing privacy concerns.
Elon Musk is asking a US District Court to put an end to the FTC privacy settlement the company has been subject to since May of last year, claiming biased investigations and misconduct.
PrivacyOps is an emerging framework that reimagines how to efficiently implement and operationalize privacy management throughout an organization in an agile manner.
Nearly every tech company with some sort of social platform is rushing to get their own AI chatbot in place. Snap users are expressing concern about how it interacts with children, the level of access it has to personal information, and overbearing chat interactions.
Restoration of simple EU-US data transfers hinges on assurances from the US that these communications will not be subject to government surveillance. A new research paper looks to untangle this problem and provide some sort of a path forward.









