Are We Living in a World Where You Can't Opt Out of Data Sharing? (fivethirtyeight.com)
Long-time Slashdot reader Mr_Blank quotes the senior science writer at FiveThirtyEight on a new type of privacy violation:
It's what happens when one person's voluntary disclosure of personal information exposes the personal information of others who had no say in the matter. Your choices didn't cause the breach. Your choices can't prevent it, either. Welcome to a world where you can't opt out of sharing, even if you didn't opt in... We all saw this in action in the recent Cambridge Analytica scandal. The "privacy of the commons" is how the 270,000 Facebook users who actually downloaded the "thisisyourdigitallife" app turned into as many as 87 million users whose data ended up in the hands of a political marketing firm.
Much of the narrative surrounding that scandal has focused on what individuals should be doing to protect themselves. But that idea that privacy is all about your individual decisions is part of the problem, said Julie Cohen, a technology and law professor at Georgetown University. "There's a lot of burden being put on individuals to have an understanding and mastery of something that's so complex that it would be impossible for them to do what they need to do," she said...
[E]xperts say these examples show that we need to think about online privacy less as a personal issue and more as a systemic one. Our digital commons is set up to encourage companies and governments to violate your privacy. If you live in a swamp and an alligator attacks you, do you blame yourself for being a slow swimmer? Or do you blame the swamp for forcing you to hang out with alligators? There isn't yet a clear answer for what the U.S. should do. Almost all of our privacy law and policy is framed around the idea of privacy as a personal choice, Cohen said. The result: very little regulation addressing what data can be collected, how it should be protected, or what can be done with it.
Much of the narrative surrounding that scandal has focused on what individuals should be doing to protect themselves. But that idea that privacy is all about your individual decisions is part of the problem, said Julie Cohen, a technology and law professor at Georgetown University. "There's a lot of burden being put on individuals to have an understanding and mastery of something that's so complex that it would be impossible for them to do what they need to do," she said...
[E]xperts say these examples show that we need to think about online privacy less as a personal issue and more as a systemic one. Our digital commons is set up to encourage companies and governments to violate your privacy. If you live in a swamp and an alligator attacks you, do you blame yourself for being a slow swimmer? Or do you blame the swamp for forcing you to hang out with alligators? There isn't yet a clear answer for what the U.S. should do. Almost all of our privacy law and policy is framed around the idea of privacy as a personal choice, Cohen said. The result: very little regulation addressing what data can be collected, how it should be protected, or what can be done with it.
That's all I have to say. Anonymous
All you have to do is not use your real life information when signing up for services. Same goes for utilities.
Sure, if I can't opt out, I can corrupt the data and make it meaning less.
Facebook Status Update: Urinated
Facebook Status Update: Defecated
Facebook Status Update: Masticated
Facebook Status Update: Fornicated / M**sterbated
Facebook Status Update: Cooperated
Facebook Status Update: Deliberated
All my photos are tagged with fake EXIF data, they are taken with a "Cannon" Camera, with a "Hubble" lens. My location is somewhere in the ocean.
My phone number is google voice, routed to a full mailbox.
My default email address is "billg@msft.com"
My Address is somwhere in Redmond WA.
I love giving out data and having it shared.
Say we gave everyone by default the copyright to their own personal information, as an intrinsic human right. Then nobody can copy your data without your permission, or else you can sue them. We've already established that personal data is worth money. Well, I don't want people copying that shit and making money off it without showing me any of the profit.
If you want real protection, you're gonna have to change the way records are made and kept public. FB is an easy target (and Slashdot stories in the past few months show how obsessed people are with FB, but not anyone else), but it's not as big of a deal as large aggregating data companies like LexisNexis. And where do they get the bulk of their data? Public records.
Mortgage records, public housing data, court records, public directories, etc. They've got other stuff, of course, but the public stuff are all the things that can really screw with you (compared to your advertising preferences, which is the bulk of what FB, Twitter and others deal in). But anyone interested can do the same as those companies do, with just a visit to the local courthouse or library.
The problem here, however, is that public records are important for everyone. It's good and important to know who owns property. It's good to know who's involved in a court case, who's been sued, and who owns a business. So do we limit this information? Or somehow limit how it's collected? Are there free speech issues involved if individuals are allowed to access public information, but companies can't? Does the answer to that question change when it's the private companies that make the data useful to the public (because otherwise, it's hard to get at, all in one place)?
There are a lot of questions, and the answers are never as easy as "just stop sharing things" or "Make Facebook stop". Living in a large society necessitates having public records easily available, for the sake of all of us. And feeling high and mighty because you don't use Facebook is just fooling yourself. This is a complex issue, and we'll need to decide what we want to give up for the sake of the privacy we think we need/deserve.
Especially personal information. I agree with the post and think that everyone should be aware of data sharing.
WilliamReview.com
"There's a lot of burden being put on individuals to have an understanding and mastery...
There's no choice. It is the only solution.
You cannot depend on governments to guard your privacy. Snowden's disclosures showed the 5 eyes / 11 eyes / whatever group wants to harvest your data just as much as FB and G.
And even you could trust Norway or whatever, what about all the people who don't live in a nice friendly western democracy? What about those living in repressive regimes?
No, we have to protect ourselves, and take back our digital privacy.
And why shouldn't people be expected to understand what they are doing with all of their data? We expect drivers to understand the rules of the road. We expect pilots to understand how to safely operate airplanes. We expect HAM radio operates to abide certain rules to avoid destroying the common medium. Why shouldn't we also expect internet users to act responsibly toward the internet, and stop supporting the worst ideas?
We let anyone flood not the net in the 90's without a shred of comprehension or willingness to learn. We sat by while they made terrible choices, while they made companies like Facebook into international surveillance behemoths, while they spied on we who made better choices by acting as proxies of FB after installing spyware on their own devices.
No... it's long past time to expect better, and for there to be real consequences for those who act poorly, just as we remove driver's licences from people who abuse the public road network and endanger others.
No law can solve this. The solution can only be cultural.
Next question.
Go on, citizen, stamp the vote card. R or D, your choice.
Where did the idea come from that it is okay for an application/web page to ask a user to upload the personal information of other humans? This is my space (real space) you are moving in on. We all know how cool the cell phone invention is. A cell would be an example of something personal, belonging to another human. So your application/web page could be considered and kinda aligns akin to a cancer of sorts.
Thank god all your browsing data isn't up for sale too.
A few years back they were pushing 'mandatory e-file' if you had certain kinds of tax filings. The interesting part? eFile was only available through third party companies, not the IRS itself.
They will just find some other way to violate our privacy by outsourcing it to a third party then legally mandating it. Americans are screwed without a major shift in our legislative priorities.
See also: Equifax
For a long time I've been saying it: Average Joe forfeited their digital privacy years ago, without realizing it, let alone consenting. Furthermore, "digital privacy" is a contradiction of terms. As soon as your data, any data whatsoever, is posted anywhere online, you lost control over it. Someone being able to read it means someone being able to share it, period.
You can corrupt or falsify your data, but all it takes is one slip.
Have you inadvertently given your phone number to anyone? They might upload it to the cloud (contacts backup), where it can be read and cross-referenced with other data sources, leading to you. Bah, merely getting a phone subscription means your data is not online and WILL be used to make money off it, legally or not.
Have you ordered anything online? Bad idea: your data can now be shared with unknown third parties.
Do you have a static IP address provided by your ISP? Or is your IP address part of a limited pool? Not good: it's saved in logs on ALL websites you visit and can be used to build a comprehensive map of everything you do online.
The moment you connect tot he Internet is the moment you're screwed. Your digital data can be exhumed years after being generated. There are methods which can mitigate the issue but then again, all it takes is ONE slip, e.g. forgetting to start VPN or clicking a malformed URL by mistake, etc.
...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
We've been in 1984 for many many decades. The police state isn't coming... it's a well established institution.
Good luck to us all.
We've lived in this world since we learned to speak. People could always tell other about you, spreading gossip and rumours — some accurate, some libellous. Government agencies, private detectives, and organizations like the Inquisition have also kept files on people.
The "new" thing here is that computers are used, which provides for actual accuracy of the information and vastly expands the scale...
In Soviet Washington the swamp drains you.
Its my data, they want it, they need to pay for it! Why should they get it for free?
One of the foundations of contract law has always been that a valid agreement requires a "meeting of the minds" - that both parties essentially agree upon and desire the outcomes specified in the contract. Somehow this got thrown out the window with the "click agree to continue" mode of doing business. I'm not going to knock long lists of terms and conditions - from a technical, legal standpoint they are often necessary to protect both sides and allow business to be conducted in a reasonable manner, and there are plenty of instances they are honest and straightforward parts of the bargain.
That being said, there are also many instances companies are sneaking in stuff that has nothing to do with the other party's conception of the agreement. Courts have been upholding this bullshit, and they should not. Virtually every case where privacy issues become problematic involve these situations.
My suggestion would be to have three or four "standard forms" for Internet agreements that are reasonably easy to understand (the idea modeled very loosely on the Creative Commons concept - straightforward options, with icons indicating what is included / excluded). I would start with "free as in beer," "pay with money," "pay with ad viewing," and "pay with your life data." These can contain the overwhelming majority of the "boilerplate" and be explained fairly easily. This leaves the exceptions, which in most cases should be short enough for a person to deal with. If you can't start with this and have a humanly manageable agreement, then your product or service is probably sketchy as fuck and people should stay away.
Help save the critically endangered Blue Iguana
What? You mean I have to live a good clean life?
People may have read it, but did not learn from it. Now you pay the price.
If you live in a swamp and an alligator attacks you, do you blame yourself for being a slow swimmer? Or do you blame the swamp for forcing you to hang out with alligators?
Yes, I often ponder this as I'm being attacked by alligators in the swamp I live in. /sarcasm
General writing protip: the whole point of an analogy is to relate a situation that's difficult to understand to a more COMMON scenario. I'm more confused by this bizarre analogy, while I understand the actual issue of digital privacy just fine.
Irony: Agile development has too much intertia to be abandoned now.
There are people working toward systems that works properly, it just takes more effort and it doesn't make money for a centralized company. See Hubzilla. Another problem is that there is not a billion-dollar promotional campaign behind things that don't allow exploitation of the users. They have to be developed from the edges in basically by definition. The federated identity-aware web is slowly and steadily coming together, but it is happening in projects like hubzilla, ostatus, mastodon, owncloud, etc that the main stream media just ignores because they aren't being pushed by those trying to create get-rich-quick schemes by cheating people.
They included language in an agreement that had anyone who agreed to use their email service grant permission to contact their friends with ads. Unlawful in Canada, and now withdrawn... in Canada.
davecb@spamcop.net
Remember when the term "Global Village" was all the rage? With all the talk about the benefits that a global village would bring, people forgot that there are parts of living in a village that suck. One of those is that there is no place to hide. Everyone knows your business.
So, welcome to the global village.
Keep in mind almost every App in the market place is designed for 1 reason and 1 reason only. To provide a perceived value so that you use it and get more and more tied in. Facebook, Google, Bing, Twitter, Instagram and the rest of the social media/search sitesApps in the ecosystem are the same.
;)
The reason they provide these apps/tools and sites is to collect as much of your personal information as they can so they can sell it and market ads at you for the highest bidder.
That is how capitalism works,.also keep in mind these are businesses, they do not care about you, except in the value of selling your personal information/making money on you. If something happens, their goal is not to help make you whole, it is not to get sued.
Welcome to the real world.
Just my 2 cents
It's hopeless now, humans lost the first encryption war and we lost the first privacy war, that the article doesn't even talk about restricting what sort of information can be collected but falls back on the axiomatic "they made their choice I say let em crash" nonsense, tech, and financial companies have been propagandizing since day one, restricting collection is not even on the agenda the California prop a couple stories down is a good example, restrict what the can sell not what they can collect, 20 years of very well funded propaganda and state intervention has muddled peoples brains so badly they can't think.
It's to late, it's turn off the internet or surveillance capitalism from now until it all comes apart there are no other options
Probably best to know what your signing up for before you do. Read the privacy and EULA and see exactly what you giving up. If it doesn't cost you it probably does just not in money but probably privacy and security.
Maybe.
It's simply impossible. What we have to do is make sure we know what others know about us. We have to break into the database to make it accessible to everybody, not just the collectors. We can no longer allow anybody to have the advantage. So let's do what we can to pry open the system by whatever means necessary. We can start by obsoleting the ISP.
... back when LinkedIn started up, when people created accounts they were asked to grant LinkedIn access to their address book.
If you said yes, aside from stealing all your contacts' info, LinkedIn would send spam email to all your contacts (in your name) asking you to sign up.
I might be very good at managing my digital privacy, but I can't prevent other people from adding my phone number, contact info, etc. to their phones (which will then get stolen/taken by other apps).
If you can't control the distribution of data once it's collected, you outlaw the collection of data to begin with. If anyone gets caught holding the data they get fined. If a company gets hacked, its data exposed, and it turns out that they were collecting data they shouldn't have collected ... they get double-fined. Once for collection, and once for distribution. This will give companies double incentive to do not collect the wrong data or (if they do) to make sure no one exposes it.
I think we could figure out a way to state that a piece of data that describes a person (can be tied back to an individual) is the property of that person. And each piece of data is worth a minimum of $1. This is property -- not copyright so there is no "fair use".
The one exception would be public records such as titles, etc. The authorized body would be allowed to store that data with no payment to the owner. e.g. the county court house can record the deeds, mortgage, etc about your house. But they can not give it away.
Possession of data that has not been paid for is treated the same as possession of stolen property.
Aggregate data that can be tied back to a person is still considered personal data even if each single piece of data can not be tied back to a particular person.
"tied back" is if it is possible for a piece of data to be deduced to be about a particular individual. The argument of "possible" would be done by the court system.
Personal data would be treated much like a material item when it comes to such things are guardianship, etc.
The ownership would start at conception and would survive death.
This is more or less off the cuff. The point is that if personal data was taken to be the same as personal property and viewed in that light, with laws set so each piece of personal data has a minimum value, then the way it is handled would suddenly change completely.
Another thing I would add is some way to make it that unnamed third parties can never receive any personal data. I don't want to allow something like a license where part of the license is for me to "willingly" give the other party permission to sell or distribute my personal data to third parties.
Anyhow, the point here is to not figure out all the precise language but I'd like to see people start thinking along those lines -- that the data about me is my personal property. There are a lot of details to work out.
Cambribdge is just the tip of the iceberg. How many others were and still are sharing our data without any consent. So the problem it's us users and the government that loves to get $$$ from lobby and do whatever those companies want. Next time any of you go to vote, think well and dont vote for those that are support those bills/laws.
Yes, we have always lived in a shared world where any asshole who sees you on the street can learn stuff about you and tell his friends.
Shitty, huh?
Big companies have been slurpng up your data for decades. You have not always agreed to it or even been aware of it. Credit bureaus sound familiar?
Or are you saying you read it but completely missed the point?
Twitter, Facebook.
That removes a lot of the tracking.
Use a browser that can stop the ad, social media and malware requests.
Domestic spying is now "Benign Information Gathering"
from collecting data. Rather it's to put out a lot of data about yourself that is false. Then when the system becomes gummed up with false data, it will have no value and companies will stop collecting it.
As already by others, we are already in hell and people without brains prefers to getting busy decorate (I suppose some nice pink wallpaper would cover that lava wall just about perfectly) the burning inferno they got us into instead of dragging us out of it.
"We need laws to stop this data being collected in the first place"
- R. Stallman
The consumer finance industry is absurdly rife with pervasive data transparency contrary to the knowledge and wishes of the people that generate the data.
Finance industry in general is pretty bad with this... they're trying to do the same thing to medical data... just enter everything into a big database somewhere that you opted to share your data through in some giant EULA or whatever and if you say no then you're basically treated like you're Amish.
Its everywhere.
Its the state of things at the moment. If you think your data isn't out there then you're confused.
The best we can do is fill in false information where practical and use anonymizing tech. But that doesn't make you invisible to the government or the banks... and they share with everyone and know more information about you then most people would guess.
I've decided to stop wasting my time responding to AC trolls/sockpuppets... so if you want a response from me... login.
None of my social media accounts link to my real life. None of them. I tell my friends that theirs should not either and I do not accept "friend requests" and I tell them why not to do that either.
really public.
If they were, they would be provided free of charge on a public server in a way EVERYONE could access and not in any way restricted for the security of specific individuals (beyond 'burned' records for witness protection and such, which wouldn't help if older copies had been spidered.)
The modern information age simple doesn't allow for the genie to go back in the bottle. What needs to happen is the data needs to become available to all so that the guys at the top show respect for it knowing that the guys at the bottom have the same access to it as they do, the only thing holding both sides back being societal norms which make it a taboo. If more people took this attitude then far fewer laws would be needed and bringing someone to heel would only require social pressure rather than costly and ineffective legal battles that result in a slap on the wrist for anyone with money or power, and ruination for anyone without either or a devious and in depth understanding of the system.
Until you answer that question clearly, you aren't going to solve the problem. I think most people have no real answer to that question. There is virtually no real consequence to companies collecting all this information about them. Its not that there won't be some real consequence for some people, its that for most people the real consequences are mostly benign and the negative consequences are mostly speculative.
Worrying about whether someone else's disclosure exposes you is a waste of time. There is no privacy left, and the only way to safely live in peace is to never disclose anything to anyone. Once it is out of your mouth, it will be scraped up into the great data bank in the sky, where it will live forever. Historians and researchers in 300 years will be able to determine the precise day when you had a hemorrhoid operation, a tooth filled, or you purchased a new coffee pot. We will never need to speculate about things like George Washington's false teeth with our contemporaries, because we will be able to retrieve the precise model, the date they were fitted, and the amount of sales tax paid when they were purchased. Fortunately, we have a benevolent government that will only use this information to help us.
Scott said this 10-15 years ago? He said we have no privacy. Get over it.
The first amendment gives me the right to speak about what I know. If I interact with you, in general, I can babble about annything I learn from that interaction.
This is why "consent" is so important, the only thing that matters under US law is whether I have legally obtained (collected) the information in the first place. Alternatively, my contract could say that I have to keep the information private.
Privacy regulations that don't allow you to consent to have the information disclosed would be challenged on first amendment grounds and struck down by the courts. Something like GDPR can't happen in the United States.
If I can't even get permission to disclose some information then it's a speech ban, even if you frame it as a "privacy" regulation. US Courts wont fall for that kind of logic.
Genuine privacy regulations are based on collection of information, not disclosure of information already collected. They aren't needed because the real problem is that there are too many monopolies/douoplies/triopolies/etc. We need a minimum of 10 service providers in each area to ensure adequate competition in the modern day markets.
The problem is that we've spent too long, especially in North America, forgetting that abuses don't just stop if you ask nicely. They get worse, and worse, and worse, until someone stands up and decides that even though stopping the abuses the *only* way that *ever* ends up stopping them is quite illegal, it needs to be done.
The Egyptians were breaking the law when they ousted Mubarak. The LURD broke the law against Taylor. The French broke the law against Louis XVI. Abusers only stop once enough people are willing to put their abusive a-hole heads on pikes.
I suppose that I could join, request that my data be removed then terminate my account
All that will do is get you put on the "confirmed alive and well" list. Just like answering a telemarketing call in order to stop them from calling, all it will do is get you put on the "answers calls from unknown numbers" list, ready to be sold off to the highest bidder.
You are dealing with some of the least trustworthy people on this planet.