Exactly what’s been done with our personal data has always been a discussion for another time—and that time is now.
This might be the end of the end of privacy. By releasing one warrant, four slides, and a few minutes of video about his motivation for doing so, Edward Snowden has opened up a firestorm of debate about what personal data is out there—and who’s looking at it.
We confess our most private thoughts to search engines, broadcast our location for free drinks, let our cars be tracked for an insurance discount, and snap sexts trusting they’ll be deleted, yet now we find ourselves suddenly howling with outrage over our privacy.
The fact that two major entities—government and multinational corporations—are interested in data comes as no surprise. What has been a jolt is just how much data is shared between them. Documents from Snowden detailed of a secret court order compelling Verizon to give the National Security Agency (NSA) its call records, and a still shadowy program called PRISM, in which gatekeepers of private communication—Google, Microsoft, Apple, Facebook, Yahoo, and Skype among them—have been handing over vast quantities of data to the NSA.
Two of a Kind
Despite these past ties, many companies named in the PRISM leak have challenged Snowden’s assertions. First was their near-universal, carefully worded (and extremely similar) denials that the NSA has direct access to their servers, as depicted in the slides used for training NSA analysts. Then Facebook, Apple, Microsoft, and Yahoo disclosed the number of customer data requests they’ve received overall (without NSA requests broken out, which are classified). Google is petitioning the NSA for the right to reveal the specific number of requests it’s received. In a Congressional hearing the White House, several Congressmen, and the NSA stressed that the Verizon data does not include the content of calls, which is true as far as it goes, but omits how much about you can be determined by metadata, including your relationships and habits.
Snowden, in an open-forum Q&A on the Guardian site, held firm to his initial charges that the collaboration between tech companies and the NSA is more extensive than either have admitted. But while the extent to which they collude is in contention, the public is pushing back.
It’s not just government that’s feeling the heat. Some of Google’s traffic has gone to privacy-protecting search engine DuckDuckGo. Founder Gabriel Weinberg told PCMag in an email that traffic has grown 73 percent since the NSA story broke. That’s with minimal advertising on Reddit and 4chan. “We find privacy protection spreads best by word of mouth when people can talk to each other more at length about issues/alternatives,” Weinberg said.
Earlier this year, Douglas Rushkoff, media theorist and author of Present Shock: When Everything Happens Now, declared his reasons for leaving Facebook—data mining chief among them. “We Facebook users have been building a treasure lode of big data that government and corporate researchers have been mining to predict and influence what we buy and for whom we vote,” Rushkoff wrote. “We have been handing over to them vast quantities of information about ourselves and our friends, loved ones and acquaintances. With this information, Facebook and the ‘big data’ research firms purchasing their data predict still more things about us—from our future product purchases or sexual orientation to our likelihood for civil disobedience or even terrorism.”
The point about friends, loved ones, and acquaintances is especially salient after a recent data glitch exposed phone numbers and email addresses uploaded by six million Facebook members, which included information on non-members (or, as Facebook thinks of them, potential members). With Facebook, it’s basically All Your Data Are Belong to Us, whether or not you belong to the site.
Some people are not bothered by government using their data if they feel it’s to keep them safe. A Washington Post/Pew poll conducted soon after the NSA revelations found 62 percent said the investigation of terrorist threats trumps personal privacy.
Data Data Everywhere
How much these consumers have to spend is also for sale. Earlier this year in an NBC News investigation, Equifax, one of the big three credit-reporting agencies, was found to sell to “debt collectors, financial service companies, and other entities” human-resources information such as paystub data and “other kinds of human resources-related information” including health care provider and insurance details.
The sale of data of an even more personal nature was made public last year in two civil lawsuits which revealed that CVS and Walgreens sold prescription information (patients’ and doctors’ names, contact information, and prescription details) to drug companies. Consumers began to suspect the indiscretion when they received pitches from the drug companies.
Even when consumer privacy is protected by law, it takes just one person with access to sensitive data to make it public—as the NSA found out. Where companies are concerned all that needs be offered is a price. The Federal Trade Commission (FTC) set up a sting this year and found that data brokers were willing to illegally sell information to those who provide insurance and employment. Ten out of 45 of the brokers targeted by the FTC violated the law and were only sent warning letters. Last year, Spokeo, which is the subject of many a paranoid forward from older family members, paid the FTC a fine of $800,000. It was found to have invited potential employers to “explore beyond the resume,” but did not properly notify consumers about their rights with regard to their data, and failed to ensure the information would be used within legal purposes, or was accurate.
Now that we are becoming explicitly aware of how government is intruding on personal privacy—and not stepping up when corporations do the same, our rights and the limits of our rights are coming into focus. What we do about it remains to be seen.
(article by C.Steele)