Privacy Risks in Data Collection and Storage

Many websites in the world collect data. Even if it seems like it’s not, it actually could be collecting data in the forms of cookies and data caches. Not all data collected is private information, it could include simple things like what you like to search up, what genre of movies you like, and what your favorite color is. Now the problem is, many websites store the data they collect without acknowledgement from the other side. This could be a positive thing, maybe you accidentally closed your shopping tab and don’t want to spend hours searching for your items again. The website will just access the data it stored from you and pick up where you left off. However, there is almost no telling what the website will do with the information. Many websites will take the information it learned about you and will sell it to other websites. This is called third party tracking, and usually ends up with a whole secret ‘profile’ of you online, containing every single information websites were able to gather. Now here comes the privacy risks. Some companies may exchange this information with non-trusted companies. Or the company holding a bunch of your stored information may experience a data leak. This could lead to private information being spread online.

An example of privacy risks in data collection is a recent thing that has been added to popular applications, namely Discord and Roblox. Both of these sites decided to implement a facial recognition system via a third party software called Persona. Their goal with this was to encourage child safety online, checking to see who is a child, and who is not to prevent age inappropriate interactions. People would do this by scanning their face, or even scanning their government issued ID. This is a very big privacy risk, as a data leak of that company could result in thousands of people’s identities being released, especially when children are often using these sites as well as adults handing in their ID.

Source(s):

https://consumer.ftc.gov/articles/how-websites-apps-collect-use-your-information
https://www.microsoft.com/en-us/security/business/security-101/what-is-a-data-leak

Unauthorized Access to Information

When storing large amounts of data, especially important information or widespread information, it is very important to keep this data secure from potential hackers that may try to take it for malicious purposes. Hackers could try to gain access by tricking you into thinking they are trusted via scam emails or fake identities. Hackers could also gain access just by a small mistake someone in the company made, maybe an employee misplaced a note that had the company’s password on it. This could be a significant problem. You could prevent these unwanted hackers by putting digital security measures in place. Maybe try setting up a firewall, or a VPN. A firewall will monitor devices coming in and out of your network, and a VPN will disguise your device when using a public network. You could also try installing an antivirus software, which will scan your device for potential threats. You can also try other things that don't involve downloading or setting up digital protection, like maybe changing your password often, not joining public networks, not clicking suspicious links, or using a very long and secure password. These are all ways you can protect against hackers.

A real world example of unauthorized access is actually something that happened somewhat recently at my junior high school. A trusted staff member was hacked by a hacker, and that hacker proceeded to post a google form that was disguised as a ‘volunteer opportunity’, but was actually a way for the hackers to gain access to things like the student’s bank account number, which was a question on the form. The hacker used a method of appearing like a trusted person so that the students would be more likely to fall for the trap. However, there were some flaws in the hacker’s plan. For example, the hackers used an account that almost never posted things out to the students, and the form that they uploaded contained questions that asked for personal information like your bank account number or your house address which is something a volunteering opportunity doesn’t usually need. In conclusion, always be sensible online as even a trusted person could actually be somebody else.

Source(s):

https://support.microsoft.com/en-us/office/what-is-a-firewall-6870c88d-69b6-4db4-9cb1-0e4afa7a8603
https://www.cisa.gov/news-events/news/understanding-anti-virus-software
https://www.totalcareit.net/blog/7-unexpected-ways-hackers-can-access-your-accounts