NATIONAL DATA PRIVACY DAY
January 28, 2023
NATIONAL DATA PRIVACY DAY
Companies collect personal information from users each time they visit a website, set up an online account, or use internet connected devices; however, most people do not know what kind of personal data is collected. According to Pew Research Center, 79% of Americans believe that have no control over what personal data is collected by companies. While it may seem that way, companies are obligated to explain how they collect and use people's data within their Privacy Policy. Additionally, account privacy and security settings often allow users to choose how their data is collected and used.
For example, when you talk to Amazon's Alexa from your phone, Amazon Echo, or any other smart device, your voice is recorded and saved on Amazon's Cloud until manually deleted and the stored recordings are available for Amazon employees to listen to. Fortunately, Amazon's account privacy settings allow users to delete voice recordings automatically, after a set time period, and prohibit Amazon employees from listening to the saved recordings. All the user has to do is login to their account and change the settings to what they are comfortable with.
Unfortunately, there are online accounts and mobile applications that require certain personal information in order to access their services. For those companies, the personal information collected is of tremendous value; however, it is up to each individual to decide whether the service they are getting in return is worth the data they must hand over, even when the service is free.
DATA PRIVACY DAY
Data Privacy Day began in the US in 2008, commemorating the signing of Convention 108 - the first legally binding treaty dealing with privacy and data protection. In 2014, the US Congress adopted S. Res. 337, a non-binding resolution expressing support for designating January 28 "National Data Privacy Day."
The National Cyber Security Alliance (NCSA) encourages everyone to learn about and understand how to protect their online data. They advise everyone to check the privacy and security settings on every app, account or device and adjust the settings to a level of privacy and security they are comfortable with. It doesn't have to be all at once. They advise starting with the accounts that are used the most frequently, then make a habit of updating one account per week until all of your accounts are updated with the privacy settings of your choice. On the NCSA website there is an in-depth list of common websites and apps with direct links to the account privacy and security settings or to read the company's privacy policy.
The NCSA also recommends reading a company's Privacy Policy before signing up for an account to get a better understanding of what data is collected and what they will do with that data. While many people are worried about their privacy online, few will actually read the privacy policies to learn how companies are using their personal information. A survey performed by Deloitte revealed that 90% of consumers accept legal terms and conditions without reading them. The survey also found that more than 81% of consumers feel they have lost control over the way their personal data are collected and used; however, only 13% of consumers said they never share personal information online. In order for users to understand and control how their data is being collected and used, they must learn what they can do to protect their personal information.
Privacy Awareness for Small Businesses
For businesses that collect consumer's data, trust is crucial to the consumer relationship. Consumers trust that the personal information they share is protected. While businesses may never knowingly put their consumer's data at risk, lax security practices can jeopardize a company's sensitive data and expose them to threats. Any company that has a website, communicates electronically via email, or stores customer information in an electronic database has a potential risk of getting hacked if the right precautions are not in place.
Data Privacy Day is an excellent reminder to create, what the NCSA calls a, "Culture of Privacy" at work by teaching all employees what privacy means to your company and the role each person plays in making sure that client and customer's privacy is achieved and maintained.
The NCSA's website provides a list of resources for small businesses, including:
- A list of Free Online Security Checkups and Tools that will scan company devices for known malware and identify if any devices are vulnerable to cyber-attacks
- Tips for protecting Consumer Information
- Informative videos and workshops to advise Small Business Owners how they can implement cybersecurity into their business using the frameworks and standards from the Cybersecurity and Infrastructure Security Agency (CISA), National Institute of Standards and Technology (NIST), Center for Internet Security (CIS), Federal Communications Commission (FCC), Federal Trade Commission (FTC), Payment Card Industry Security Standards Council and more.
Privacy Awareness for Parents:
Today, kids are growing up in a world that is completely different from the world their parents grew up in. Not only is it important to teach kids to be safe by looking both ways before crossing the street and not talking to strangers, in today's world kids should also learn online safety and privacy. While there are parental controls that can be implemented on kid's devices and online accounts to protect them online, it is also important for them to learn about data privacy and security and the consequences of not making their personal information private.
A great way to introduce kids to online safety is by using the "Stop. Think. Connect." awareness campaign. Stop. Think. Connect. is an online initiative led by the NCSA that encourages all internet users to be more vigilant about practicing safe online habits. Stop. Think. Connect. is also the rule that can be taught to kids to ensure their using the internet safely and securely.
- Stop, before accessing the internet, and make sure safety and security measures are in place
- Think about the potential consequences of your online actions; and
- Connect to the internet knowing you are protecting yourself and personal data.
Additional lessons for kids in security and privacy include the importance of protecting personal information, checking privacy settings on all online accounts, learning to identify safe and trusted websites or mobile applications, and understanding that what happens on social media can stay online forever.
Stop. Think. Connect.
The Stop. Think. Connect. website is a great source that provides tips and advice for protecting personal information, accessing secure websites, maintaining device security and more. There are also resources available which are great references when having a "tech talk" with kids and teenagers. Resources are even available for adults regarding cybercrimes, cyber safety, digital decluttering, event specific privacy tips (such as when planning a wedding, vacation, or when holiday shopping), and more.
While Data Privacy Day may only come once a year, the ultimate goal is to spread awareness so everyone can live a privacy-aware lifestyle. Feel free to contact us and let us know how you are taking control of your online privacy at home and creating a Privacy-Aware environment in the workplace.