France’s data protection watchdog CNIL has published a set of guidelines to provide GDPR guidance on web scraping for direct marketing and recommended actions to businesses.
Data Privacy
Technological development has always outpaced privacy concerns, but never more so than in the past decade. Collection and centralization of personally identifiable information (PII), tracking of movements and digital surveillance are all at unprecedented levels. Regulations and laws are only just beginning to catch up to the ability of both governments and private entities to deploy these capabilities.
What exactly is there to worry about? The mass collection and centralization of data by giant multinationals such as Facebook and Google is as good of a place to start as any. Two decades of vacuuming up the personal data of users of various online services has created the most impressive marketing capabilities in history, but these profiles have astounding potential for damage when they are used the wrong way or fall into the wrong hands.
Unauthorized information that is captured in data breaches tends to find its way to massive “combo lists” that are sold and traded on the dark web. Social security numbers are added from this breach, home addresses and phone numbers from that one, personal health information from yet another. Soon, a frighteningly complete profile of millions of individuals is available to anyone willing to pay the asking price.
These are just the established data privacy issues. The emerging ones are even worse. High-quality facial recognition technology is just beginning to roll out across the public places of some countries. Artificial intelligence is not only making mass facial recognition possible, but magnifies the power and reach of any application that involves capturing and sorting information: scanning pictures, analyzing speech, sifting through text and location data. This threatens to not only shatter anonymity and privacy, but allow for highly advanced impersonation and take the concept of “identity theft” to new levels.
Some businesses chafe at the trouble and added expense of new and emerging data privacy regulations, but they are vital to both protecting rights and privacy and instilling confidence in end users. Customers want to be able to submit their payment information without worry about data breaches and identity theft, use services without wondering what is being done with their personal information and use devices without fear of surveillance or having location data tracked. The need for meaningful safeguards only grows greater as technological capabilities increase.
New exposed credentials are growing steadily with an increase of 16.6% from last year while previously exposed information continues to recirculate within underground communities.
Google is potentially facing a $5 billion fine for privacy violations by collecting data without consent when users are in "private browsing" mode.
Developing a data strategy that is both defensive and offensive may seem overwhelming but it can deliver the expectations from stakeholders while staying in compliance with privacy laws.
The lack of compatibility between the first contact tracing apps from France and Italy highlights a fragmented EU landscape that has yet to have an answer for cross-border movement issues.
Recent U.S. protests are exposing the surveillance technology used by government to monitor demonstrations, raising concerns that these tools will be here to stay.
Zoom claimed that end-to-end encryption will only be available as a premium paid feature so that law enforcement can have access to people who are using the platform for bad purposes.
Securing digital identity on immunity passport will require a trusted guardian that has significant checks and balances in its design and always put our privacy first.
In a letter to the European Commission, Bluetooth accessory maker Tile accused Apple of trying to disadvantage their location tracking app by defaulting ‘always allow’ function to ‘off’.
Focusing on data quality rather than quantity means companies can drive better business outcomes, remain in compliance with privacy regulations, and prove to consumers that they respect their privacy.








