"Global Privacy Control" looks to refresh the “Do Not Track” concept by focusing on sale of personal data, along with emerging state and national privacy legislation.
Data Privacy
Technological development has always outpaced privacy concerns, but never more so than in the past decade. Collection and centralization of personally identifiable information (PII), tracking of movements and digital surveillance are all at unprecedented levels. Regulations and laws are only just beginning to catch up to the ability of both governments and private entities to deploy these capabilities.
What exactly is there to worry about? The mass collection and centralization of data by giant multinationals such as Facebook and Google is as good of a place to start as any. Two decades of vacuuming up the personal data of users of various online services has created the most impressive marketing capabilities in history, but these profiles have astounding potential for damage when they are used the wrong way or fall into the wrong hands.
Unauthorized information that is captured in data breaches tends to find its way to massive “combo lists” that are sold and traded on the dark web. Social security numbers are added from this breach, home addresses and phone numbers from that one, personal health information from yet another. Soon, a frighteningly complete profile of millions of individuals is available to anyone willing to pay the asking price.
These are just the established data privacy issues. The emerging ones are even worse. High-quality facial recognition technology is just beginning to roll out across the public places of some countries. Artificial intelligence is not only making mass facial recognition possible, but magnifies the power and reach of any application that involves capturing and sorting information: scanning pictures, analyzing speech, sifting through text and location data. This threatens to not only shatter anonymity and privacy, but allow for highly advanced impersonation and take the concept of “identity theft” to new levels.
Some businesses chafe at the trouble and added expense of new and emerging data privacy regulations, but they are vital to both protecting rights and privacy and instilling confidence in end users. Customers want to be able to submit their payment information without worry about data breaches and identity theft, use services without wondering what is being done with their personal information and use devices without fear of surveillance or having location data tracked. The need for meaningful safeguards only grows greater as technological capabilities increase.
GoodRX admits no wrongdoing in the settlement, claiming that the health data it shared could not identify an individual user's health condition. The company was found to be sharing data with 20 marketing firms.
Surveillance capitalism as a revenue model through the observation and recording of as much personal data as possible to create highly effective targeted advertisements is growing unchecked. Can regulation level the playing field?
According to a recent New York Times investigative report, your precise location can be tracked up to 14,000 times per day. And location data is being traded on an increasingly robust secondary market, often without your knowledge.
Regulatory bodies around the world will continue to implement rules and penalties related to maintaining privacy. The NIST Privacy Framework offers some valuable guidelines for continuous compliance.
Popular cloud-based word processor app WPS, one of the most widely used of its type in China, may be facilitating state censorship of user’s private documents. User complained million-word document was locked due to "sensitive content."
The first CCPA enforcement action has just been handed down, resulting in $1.2 million in penalties and a mandatory compliance program for Sephora’s privacy violation.
Seventy percent of security pros want governments to impose social media regulation for the collection of personal data by social media companies. Yet, expectations are hazy and 72% also indicated that they have little to no faith that government officials have an understanding of the threats to digital privacy.
New FTC rules governing consumer data processing and handling, with a focus on the "commercial surveillance" conducted by data brokers, have entered a public comment period.
Companies are implementing vaccine mandates or regular testing, with social distancing and mask wearing in the office, and more employers are requiring full vaccination as a criterion to being hired. Now many organizations are struggling to determine how they will collect and manage this information.










