Category: Privacy

What’s with All the Privacy Policy Updates?

If you have a lot of online accounts, you have likely received many notices over the last few weeks regarding privacy policy updates. There is a simple reason for this. It’s called the GDPR or the General Data Protection Regulation. If you don’t live in the European Union, you might not be familiar with it. It is an EU law that goes into effect tomorrow (May 25, 2018) “to give control to citizens and residents over their personal data.” Because so many Internet-based companies do business worldwide, it is easier for many of them to simply adopt the practices necessary to meet the GDPR for all of their users. That’s why you are getting all those emails asking you to review new privacy policies.

So how does the GDPR affect citizens of the EU and the users of companies that adopt the GDPR in general? Here are some highlights.

  • Companies who collect any personal information from you must
    • clearly disclose what data is being collected and how
    • why it is being processed
    • how long it is being retained
    • if it is being shared with any third-parties
  • You have the right to request a portable version of the data collected and stored about you in a common format that would be easy for you to read; in other words, they can’t send it to you in a file format that you would need to purchase expensive software to read
  • You have the right to have your data erased in certain circumstances
  • Any breach of data must be reported within 72 hours
  • And any business who primarily processes personal data must appoint a Data Protection Officer (DPO) who is responsible for managing all this

Keep in mind that these regulations only legally apply to those individuals within the EU and companies who do business within the EU. However, since so many companies do business around the world and collect personal information to do so, there is a high likelihood that you will have many more ways to control how your data is stored and shared.

Be sure to not simply ignore all those updates to those privacy policies. It is worth taking a little time to review them. They should be much easier and clearer now in many cases due to the new GDPR regulations that take affect tomorrow in the EU.

Informed Convenience

The GAFA companies (Google, Apple, Facebook, and Amazon) were on Capitol Hill earlier this month facing Congress. The questions asked of them boiled down to, “Do you realize how your services can be used to subvert our democracy? Are you taking this as seriously as your bottom line?” The not so subtle threat behind this is the possibility of government regulation. And Congress wasn’t impressed by who they sent, either. Instead of their CEOs, they all sent lawyers. It seems that maybe they aren’t taking this as seriously as they should. This got me to wondering, “How did we get here?”

When these now giant companies started in the 90s, they were just startups. Amazon’s business plan didn’t show it making a profit for ten years. Facebook was the way college students (only) connected with each other. Google was a new search engine that was only starting to replace Yahoo! as people’s first choice to find things on the internet. And Apple was a niche computer maker with a very small part of the market. Each of these companies worked like crazy to attract users. They focused on serving those users and a big part of that was making a space to meet a particular need and then getting out of the user’s way. In many ways, they were legitimately creating a (largely) free and unfettered online community. You could say and do whatever you wanted. What you saw on Facebook was all the updates of all your friends, no matter how overwhelming. But as the internet grew and mobile computing came along in 2007, this changed.

Those funding these startups began to pressure them to be profitable and go public. Advertising began to be more and more a part of the experience. And, with the overwhelming amount of information that became available, they all began to curate their user experience in some way. And we all welcomed this help sorting through the sea of information that the internet became. But we never evolved our understanding of these companies along with that change. They stopped being simple meeting places and tools. They started to become filters of our online experiences. Again, not bad — just a fact. Instead of using their products, we became the product.

How can we keep the services we like and use everyday without being taken advantage of? I think the key is transparency. I don’t mean that Facebook and Google should publish their algorithms. I do mean that they should explain broadly what their algorithms do. For example, it was sometime after they changed their feed policy before I learned that I was no longer simply seeing an unfiltered list of my Facebook friends’ feeds. Facebook now only shows you some of the feeds of your friends. If you look at your friend’s page itself you will see it all, but they show you only the best and what they think will keep you on Facebook. And they insert promoted content, too. They weren’t transparent about this. They should be.

These companies continue to claim that they should not be responsible for the content published on their platforms as they have no control over what users post. At the same time, they manipulate what their users see without clearly telling them that’s what they are doing. They can’t have it both ways. They need to go back to being completely unfiltered, or be transparent about the way they are curating the user experience. And if they choose neither, Congress is likely to begin regulating them.

In the meantime, what is the average user to do? All this change behind the scenes is frustrating and makes us feel used. Indeed, many say we are being used, that we are the product being sold rather than being the customer. For me the answer is what I call informed convenience. The internet and mobile are such a part of our everyday lives that there is no going back. Short of not having a mobile phone at all or never using the internet, we will encounter these companies and their products. So, we need to become better digital citizens. How do we do that without becoming paralegals in order to understand those Terms of Service we all have to agree to but never read?

Today there are many tools and websites to help you figure out in plain English what the terms of service are for a site or service. Here are three I found on a quick search:

  1. Terms of Service; Didn’t Read
  2. Clickwrapped
  3. Terms & Conditions Checker

Also, many of these companies have started to provide or use alternative services. Encrypt your computer hard drive and smartphone (both Android and iPhone have this capability). Make sure you know what rights you are giving up by using Facebook, Twitter, and Instagram. Use DuckDuckGo for search instead of Google because DuckDuckGo doesn’t track you. Pay for private email instead of using free email that it selling information about you. Buy books at your local bookstore instead from Amazon.

And if you are okay with what all of these companies are doing, don’t do anything differently. I am not trying to tell you what services you should or shouldn’t use. I am suggesting that you decide knowing what you are agreeing to. After doing a little research you may find that you have to give up a little convenience to live closer to the digital life you want to live. That’s okay. And rather than unknowingly being used, you will be practicing informed convenience.

 

Share your thoughts on this post in the comments below or contact me directly. Be sure to sign up in the sidebar to the right to receive a notification when new content is posted.