Public Health England announced that personal identifiable information collected by NHS Test and Trace program to control COVID-19 will be kept for 20 years.
Data Privacy
Technological development has always outpaced privacy concerns, but never more so than in the past decade. Collection and centralization of personally identifiable information (PII), tracking of movements and digital surveillance are all at unprecedented levels. Regulations and laws are only just beginning to catch up to the ability of both governments and private entities to deploy these capabilities.
What exactly is there to worry about? The mass collection and centralization of data by giant multinationals such as Facebook and Google is as good of a place to start as any. Two decades of vacuuming up the personal data of users of various online services has created the most impressive marketing capabilities in history, but these profiles have astounding potential for damage when they are used the wrong way or fall into the wrong hands.
Unauthorized information that is captured in data breaches tends to find its way to massive “combo lists” that are sold and traded on the dark web. Social security numbers are added from this breach, home addresses and phone numbers from that one, personal health information from yet another. Soon, a frighteningly complete profile of millions of individuals is available to anyone willing to pay the asking price.
These are just the established data privacy issues. The emerging ones are even worse. High-quality facial recognition technology is just beginning to roll out across the public places of some countries. Artificial intelligence is not only making mass facial recognition possible, but magnifies the power and reach of any application that involves capturing and sorting information: scanning pictures, analyzing speech, sifting through text and location data. This threatens to not only shatter anonymity and privacy, but allow for highly advanced impersonation and take the concept of “identity theft” to new levels.
Some businesses chafe at the trouble and added expense of new and emerging data privacy regulations, but they are vital to both protecting rights and privacy and instilling confidence in end users. Customers want to be able to submit their payment information without worry about data breaches and identity theft, use services without wondering what is being done with their personal information and use devices without fear of surveillance or having location data tracked. The need for meaningful safeguards only grows greater as technological capabilities increase.
New Clear History Facebook privacy tool launched in Ireland, South Korea and Spain allows user to decide which apps and websites can track their personal information and browsing data.
Pegasus spyware was used to track journalists, lawyers and activists in Jordan from 2019 to late 2021. Some specific incidents occurred on iPhones after Apple had sued NSO Group and removed exploits.
Safeguarding privacy can be achieved through a federal privacy law and privacy-enabling technologies that help people exercise their rights and organizations in using personal data responsibly.
You don’t have to search far to find cybersecurity predictions for 2019, but what about predictions for data privacy? Here are some predictions at a more granular level, which is something that’s been missing in the public discourse.
Change to India's cybersecurity laws has sent VPN providers running from the country ahead of the slated June 27 start date for the new terms.
The development of smart apartments in U.S. has led to more IoT devices and data, providers need to know what it takes to stay compliant to data protection laws like CCPA.
Report from the Internet Society, in partnership with Consumers International, shows continuing concerns with IoT security and privacy, where 53% of consumers distrust connected devices to protect their privacy and handle information in a responsible manner.
Leaders from China, Japan, Germany and South Africa at Davos voiced support for increased government oversight, tech regulation and data governance in their own countries as well as international cooperation on standards.
State DMV offices around U.S. have made tens of millions of dollars in profit since 2014 by selling personal data of drivers which surprisingly is not in violation of state law.










