Concerning Data Privacy Issues in 2019

When some of the more prevalent technologies of today started picking up speed there were a few ramblings about data security and privacy, but one could argue that — as a society — we just weren’t ready. No one was really sure how to handle or tackle the data privacy issues presented by this new wave of devices and platforms.

Today, these issues are on everyone’s mind. It seems like every day there’s another major data breach or cybersecurity attack. On the days there aren’t any news, we hear about privacy breaches and the official mishandling of data, Facebook and Cambridge Analytica serving as a perfect example.

The decision makers of the world have started to understand the true extent of damage these issues can cause, sparking a slew of new regulations and laws. GDPR was just the first of many to come. The CCPA or California Consumer Privacy Act is yet another.

Unfortunately, while these new enforcements are warranted and will certainly help, there are still a lot of things happening in the digital world, some more concerning than others. It begs the question, what are the most prominent issues we face today? What privacy and security problems should everyone be aware of?

1. Character Assassination Opportunities

Several events have merged to create a perfect storm of destruction if you will, capable of ruining the lives of many. There’s outrage culture, where groups of people react negatively en masse. Then, there’s the theft of private and sensitive information, as well as its sale in the open black market.

This presents a unique possibility where identity thieves and hackers can use personal information against us. Holding information at ransom is just one example of how this might play out. Ransomware is a common type of attack that locks down a system or device in exchange for monetary compensation. The same can be done with sensitive information, particularly data that could cause a stir if released to the public.

But the problem is that there’s really no telling how sensitive information can and will be used. Swatting, for example, is a dastardly attack carried out — often by younger attackers — where an address is provided to law enforcement and presented as a threat. The necessary authorities storm the property or home in question expecting to find weapons or worse, which is both dangerous and senseless. To carry out the act, one only need a home address which can be gleaned through a reverse IP search.

2. Social Engineering Attacks

A particularly effective hack combines digital attacks and social engagement for nefarious means. These kinds of attacks have always been common, but the problem is that in today’s society they have grown incredibly sophisticated.

Someone might reach out posing as an official company rep, for instance, with the intent to gather passwords, account info and even payment details. They validate their authority by providing sensitive details that, by all rights, only a business should technically have.

Except the information was gathered through various means, sometimes even during a data breach of a compromised system.

It’s more about social interactions — hence why it’s referred to as social engineering — but still relies on sensitive details, many of which are stored in a digital form.

In the years ahead, this type of attack and the events powering them will become incredibly effective. It will be difficult to discern legitimate contact with that of unscrupulous parties, especially for the common person. This is not just concerning, it’s also frightening. In addition, it will propel by the vulnerability, accessibility and compromise of various personal databases.

3. No Business Can Be Trusted

Regulations like GDPR and CCPA should, by all rights, ensure that organizations handle sensitive customer data and information appropriately. They even put measures in place to punish offenders who are not in compliance.

It’s a welcome change in the current landscape and helps to force companies to pay more attention to the information on data privacy issues they have, and how it’s handled.

Unfortunately, however, there are still instances where companies are going to look out for their own best interests, damning everyone else. A 2016 attack that was carried out on Uber, for instance, resulted in the breach of over 57 million user profiles including information about email addresses, mobile numbers, names and more. The names and driver’s license numbers of over half a million Uber drivers were also compromised.

Rather than publicly disclose the breach and take action to protect those affected, Uber paid the hackers $100,000 to delete the data. Even worse, the company didn’t even share that it was attacked until over a year later. They were fined $148 million as a result.

Uber isn’t the first, and it won’t be the last. The key takeaway is that we cannot trust any organization to protect our sensitive data, no matter how many regulations are in place.

4. More Devices, More Channels, More Data

With the emergence of technologies such as IoT, mobile computing, cloud computing and much more it means that the total amount of data is also growing, exponentially. One could argue that the amount of information surrounding an individual is routinely growing as well, allowing for a near-total picture when compiled.

IoT devices such as smart home cameras, smart doorbells, and smart assistants can provide hackers with plenty of extraneous information. One could discern, for instance, someone’s daily routine such as when they leave for work or when they arrive home.

This could also apply to when they go to sleep at night, what places they might visit, and what purchases they might make or stores they might enter. It doesn’t seem like it up front, but all of this information can be combined to build an accurate profile of the said person, at the least to carry out more targeted attacks.

What if a hacker could see when you aren’t home, gain entry to your house, — unbeknownst to you or any of your family — to steal belongings and valuables or plant something, like a hidden device. It’s a scary thought, but it’s something that could happen.

As more devices come online and collectively we — as a society — begin to use them, it generates more robust data, which in and of itself is more information to use against us.

Understanding Data Privacy Issues and Security

Sadly, one of the best ways to protect ourselves is to simply not use the devices and platforms in question. The result is that sensitive and private information is not created, collected or passed on, therefore mitigating the risks. That’s not always possible, however, which means that understanding data privacy, in general, is necessary to thrive in today’s landscape.

Avoiding sites like Facebook or Amazon won’t necessarily keep you safe either. Sometimes these companies collect data regardless through a series of channels or may acquire and store data sold to them through other providers.

Again, the best defense is to stay informed on data privacy issues. Make sure you and your family understand the types of attacks and events that are happening, like social engineering attacks, and how to protect yourself.

In addition, keep an eye on those regulations and policies and how they might affect you and your data. GDPR, for example, forces all companies doing business with European citizens to offer a “right to forget” system that allows people to request and purge any and all data collected about them.

Doing this routinely can help prevent sensitive information from falling into the wrong hands.