Showing posts with label EU Privacy Law. Show all posts
Showing posts with label EU Privacy Law. Show all posts

Tuesday, February 18, 2014

Mind Your (Online) Privacy !!

Introduction to Online Privacy
Online privacy is a very much debated topic in today's digital world. You cannot work in 
the web industry without thinking about who will be tracking your details every time 
you key in your sensitive information.

A couple of years ago, we witnessed EU laws came out strict regarding cookies. Even 
now, EU countries are thinking about taking action against Google, who is considered by 
them as high risk to people's privacy, even though useful in many ways. 
     
Google's Eric Schmidt on the other hand, although had emphasized the importance of 
privacy, had also indicated that definitions of privacy are changing as a result of so much 
information being willingly surrendered to the internet. In a 2009 statement, he 
suggested that if a person wanted to keep something private, it was probably because 
they shouldn't be doing it in the first place !! Sounds right sometimes, but not always !! 
Again creepy for the years to come, to all who plans to continue using Google !!

2011 statistics says, almost 140 views for every human being alive at that time !!
Facebook founder Mark Zuckerberg said three years back that in the age of social 

Is Facebook Privacy Policy Good Enough ?
So let's go back a little and think about what is privacy and how different it is when it 
comes to online privacy..

A Brief History Of Privacy        
Privacy as we know it - a term that we understand and define based on the culture in 
which we are raised - is a relatively modern concept. Prior to the rise of democracy 
privacy merely referred to a man's right to be left alone, free from physical harm.

If each man's thoughts and opinions were valuable and important, then protecting an 
individual's personal space, ideas and feelings became suddenly more important.

No longer could the State simply invade people's homes to billet soldiers, conduct 
searches - registering births, deaths and marriages became a topic for debate as did 
taxation and the State's invasion into people's financial affairs.

Even so, it was not until the age of technology that privacy became a real concern for the 
average individual, in the form of online privacy.

Online Privacy in today's world of Emerging Technologies
Contrary to the previous times, in the last 10-15 years, however, we have willingly tossed 
aside our own right to a private life, not just through our obsession with the lives of 
celebrities, but through our desperate need to emulate fame through reality TV shows, 
blogging, live streaming our lives onto the internet.

Most of us have embraced Facebook, Twitter,  MySpace, Flickr and LinkedIn as an easy 
means of keeping in touch with friends and family and of making business contacts and 
finding others with shared interests. What we fail to consider is how our willingness to 
make our private lives public reverses those hard-won rights to decide what to make 
public and what to keep private, as the more we happily put into full public view the less 
we inherently reserve the right to keep private. 

Auto-complete features in web already have your data !!

With the emerging trends of tracking website activity in place, people have started to 
discuss about online privacy ever than before.

Yearly mentions about "Online Privacy" (from NYTimes)
It is very important that not just those of us working within the internet industry,
encouraging increased use of social networks and using technology to gather increasingly 
large amounts of information about people's lives, their likes and dislikes, their habits and 
their buying patterns, understand the wider implications of changing our definition of 
privacy, but that members of wider society understand how this will affect their lives as 
individuals, and that we analyze the good and the bad aspects of this cultural shift. 

The future of Online Privacy
Let us just say that you will be tracked wherever you go in all aspects. You can watch the 
below video for a better understanding of this.

          
So, who all should we be aware of ? 
Well, even a school kid can take a guess at this and get it right.

Most importantly, Google and Facebook, because of the simple and alarming fact that we
are giving them tons of information every single day about ourselves !! NSA is an another
agency who keeps track of people through their cellphones (almost 5 billion cellphones
tracked by NSA everyday !!).

Below is a short video which shows how much Google already knows each of us !!


Which technologies/methods are used to collect your data ? 
For example, Google openly admits that they collect and track 6 different kinds of your 
personal information !!

1) Device information:   
    Your android smartphone talks back to Google and sends back information such as your
device ID, model, network details etc.
2) Log information:   
    Whenever your android phone uses Google' services it logs your call activity, such as
the other caller's number, duration of conversation.
3) Location information:  
    When you use a location-enabled Google service, the company may collect and process
information about your actual location, like GPS signals sent by a mobile device.
4) Unique application numbers:  
   Information about the apps you install may be sent to Google when you install or
 uninstall that service or when that service contacts the company’s servers for automatic
 updates and other unspecified reasons.
5) Local storage:  
        Google may collect and store information, including “personal information,” on your
device using browser web storage such as HTML5 and application data caches.
6) Cookies and anonymous identifiers:  
       The company says it uses unspecified technologies to collect and store information
when you visit a Google service, possibly including sending one or two cookies or
anonymous identifiers to your device, even when you interact with services the company
offers to thier partners.

Google is storing all your passwords (Chrome Keychain) and  also storing your financial
details - account numbers and card information - in your Google Wallet. Pretty much
everything about us !!! They have also admitted to scanning emails of non-Gmail users -
who wouldn't have likely agreed to Google’s terms - sending email to Gmail users. 

Again, if you think Google still has not breached your privacy, you should probably take
a closer look at what Google aims for with the acquisition of Nest for $3.2billion
purchase. 

Google can now start tracking how you move around your house and what you do when
you are not online !! A very serious privacy breach, again hoping will not turn disastrous.

Facebook, on the other hand aims to track your online social behavior, your interests and
website activity more and learns more about you and start recognizing your friends using 
state-of-the art facial recognition algorithms acquired from Face.com and also starts 
showing marketing campaigns and recommendations for you. This had caused a lot of  
privacy concerns a while ago. They seem to have subdued at the moment, while we hope
these will not be used against us in the future !

Organizations protecting Online Privacy
The Electronic Frontier Foundation (EFF), the Center for Democracy and Technology
(CDT), the American Civil Liberties Union (ACLU) and Fight for the Future are the main 
organizations against Online Privacy. Two years back, they collectively conducted a
campaign against Cyber Intelligence Sharing and Protection Act (CISPA), which actually
was not clearly defined such that it may dismantle existing protections provided by the
Federal Wiretap Act and the Electronic Communications Privacy Act and other laws.

                  Tactics/Workarounds to protect online privacy
                  1) Creating multiple identities: Interestingly, Google itself had come up with an 
                   interesting workaround to protect online privacy. The central idea is to create multiple
                   identities (accounts) for the same person, so that your personal and demographic data  
                   will not be tracked along with your official identity. This is just a way to provide 
                   abstraction, both accounts can be still be identified and grouped together. 
                  2) Clearing cookies : Clearing cookies will help protect online privacy temparorily
                  3) Using different Web Browsers : Using different Web Browsers for personal and
                       business use will help provide an extra layer of abstraction.
                  4) Using PrivateBrowsing feature in Web Browsers
                  5) Using BrowserExtensions that help protect privacy
     
                  In addition to the above, there are some tips provided by EFF and TRUSTe .


7) Big Data: The End of Privacy or a New Beginning? - Research paper by Ira S. Rubinstein 

8) A Theory of Creepy: Technology, Privacy and Shifting Social Norms- Research paper by Omer Tene and Jules Polonetsky




Wednesday, February 13, 2013

Online Privacy Laws for Countries

Now that I have done some thinking and writing about privacy concerns posed by Web Analytics (Oh and I need to make sure I use the right word, read article to see why), I was prompted to research on the privacy laws of different countries[1]. This was an interesting research, considering the various stages different countries are in the current web world. US, an obvious choice, EU & China are some that I have tried to research on for their internet privacy laws and provided some snippets here. 

Before jumping into the privacy laws, an interesting image I found online triggered an equally interesting thought. Does anyone associate themselves with this image based on the country he/she lives in? I don't, rather I cannot! Almost every country in the current web analytics world has most of their internet users tracked some way or the other. So, there is no way for us to think that we are the only ones in there. There is always someone "watching".

Picture Courtesy [2]: How many people do you think will ever feel this way in the current digital world?








While researching on privacy, I found an interesting analogy and thought to quote that as well[3]. This is an analogy of Google Analytics to privacy.


"A parent standing on a street corner counts the number of cars that drive pass a school gate. They are interested in safety and traffic flow. Hence they count the number of cars passing per minute, note their type e.g. car, SUV, buss, lorry etc., take a note of their speed and any other factors, such as weather and amount of day-light. All users of this particular section of road are effected by such data – the local commune, parents, children, teachers, commuters, shops and business, and delivery companies.

The observer has a legitimate reason to observe and measure traffic conditions and there are no privacy issues with this. No personal identifiable information (PII) is collected and traffic is reported in aggregate. That is, individuals are not tracked. This is how Google Analytics works."


Now looking at the bigger picture, privacy is split up as; 1. Personally Identifiable Information (PII) or 2. Non PII [4]. The non PII is used to track the trends or person's behavior on the website, which can help companies with several of their studies. Most countries have concerns with companies collecting the PII from customers without being transparent of not informing them about this data collection.

Let's start with one of the most intriguing growth stories of the past decade, CHINA. It is a different story when it comes to internet privacy here. It is not just the eCommerce or web analytics companies that track customer data, but it is the government [4] that wants to track online journey of its citizens. The Chinese government intends to control all or most of the web content usage and flow to ensure nothing against it is mentioned anywhere in the web world. An example of this would be the Chinese journalist, sentenced to 10 years of prison for having sent a "private email" with some of his views on Chinese government. Knowing this, I would probably think twice to browse internet if and when I go to China. 

Coming to the other union of nations, EU, the recent EU privacy law does require companies to make its tracking more transparent by taking consent from the customer if they agree to have their data tracked/shared. How many of you would read through the entire terms of service when you download a software, make an online transaction or are even asked to sign/acknowledge before agreeing to them? Would we then even consider to read through the long terms of service detailing how our privacy is at stake if we agree to them?

http://us.i1.yimg.com/us.yimg.com/i/us/smbiz/gr/help/bm_accepttos.gif

Though a welcome sign by the EU to direct companies in taking customer consent before collecting their PII, how much of this new law would really reduce privacy intrusions will need to be seen... 

One would consider US to be a more "free" nation when compared to China. But, as I write this post, here is a latest update on the internet privacy law in the US. CISPA is being reintroduced by some leaders which would give access, to companies and government alike, to collect private customer data in the name of national security. To what extent would this bill be hampering the privacy of customers in the US? Do we need to be worried as to how our data will be used? One could argue that with the growing knowledge and concern of cyber security threats, it is in the best interest of the nation to have active tracking of individuals' online activities. But, where is the line that would define what level of tracking is actually needed for the purpose of identifying and controlling such threats? Has China, with its vast control of internet traffic, been able to control cyber threats/attacks? With the kind of technological advancements that we have achieved, is there any other way to keep track of online activities without needing to have private data.

References:
[1] Digital Analytics Association - http://www.digitalanalyticsassociation.org/?page=privacy
[2] http://glassboard.com/blog/2012/07/18/recent-privacy-policy-gains-hellooo-mobile/
[3] Advanced Web Metrics:Measuring success - http://www.advanced-web-metrics.com/blog/2012/10/04/privacy-web-analytics-google-and-ketchup/
[4] Wikipedia.org - http://en.wikipedia.org/wiki/Internet_privacy