{"id":20773,"date":"2019-08-12T12:29:58","date_gmt":"2019-08-12T10:29:58","guid":{"rendered":"http:\/\/praag.org\/?p=20773"},"modified":"2019-08-12T12:29:58","modified_gmt":"2019-08-12T10:29:58","slug":"heres-how-tech-giants-profit-from-invading-our-privacy-and-how-we-can-start-taking-it-back","status":"publish","type":"post","link":"https:\/\/praag.org\/?p=20773","title":{"rendered":"Here&#8217;s how tech giants profit from invading our privacy, and how we can start taking it back"},"content":{"rendered":"<p><a href=\"https:\/\/theconversation.com\/profiles\/katharine-kemp-402096\">Katharine Kemp<\/a>, <em><a href=\"http:\/\/theconversation.com\/institutions\/unsw-1414\">UNSW<\/a><\/em><\/p>\n<p>Australia\u2019s consumer watchdog has <a href=\"https:\/\/theconversation.com\/consumer-watchdog-calls-for-new-measures-to-combat-facebook-and-googles-digital-dominance-120077\">recommended major changes<\/a> to our consumer protection and privacy laws. If these reforms are adopted, consumers will have much more say about how we deal with Google, Facebook, and other businesses.<\/p>\n<p>The proposals include a right to request erasure of our information; choices about whether we are tracked online and offline; potential penalties of A$10 million or more for companies that misuse our information or impose unfair privacy terms; and default settings that favour privacy.<\/p>\n<hr \/>\n<p><em><br \/>\n<strong><br \/>\nRead more:<br \/>\n<a href=\"http:\/\/theconversation.com\/consumer-watchdog-calls-for-new-measures-to-combat-facebook-and-googles-digital-dominance-120077\">Consumer watchdog calls for new measures to combat Facebook and Google&#8217;s digital dominance<\/a><br \/>\n<\/strong><br \/>\n<\/em><\/p>\n<hr \/>\n<p>The <a href=\"https:\/\/www.accc.gov.au\/publications\/digital-platforms-inquiry-final-report\">report<\/a> from the Australian Competition and Consumer Commission (ACCC) says consumers have growing concerns about the often invisible ways companies track us and disclose our information to third parties. At the same time, many consumers find privacy policies almost impossible to understand and feel they have no choice but to accept.<\/p>\n<p>My <a href=\"https:\/\/papers.ssrn.com\/sol3\/papers.cfm?abstract_id=3432769\">latest research paper<\/a> details how companies that trade in our personal data have incentives to conceal their true practices, so they can use vast quantities of data about us for profit without pushback from consumers. This can preserve companies\u2019 market power, cause harm to consumers, and make it harder for other companies to compete on improved privacy.<\/p>\n<figure class=\"align-center zoomable\"><a href=\"https:\/\/images.theconversation.com\/files\/286788\/original\/file-20190803-117910-ulvvr6.jpg?ixlib=rb-1.1.0&amp;q=45&amp;auto=format&amp;w=1000&amp;fit=clip\"><img decoding=\"async\" src=\"https:\/\/images.theconversation.com\/files\/286788\/original\/file-20190803-117910-ulvvr6.jpg?ixlib=rb-1.1.0&amp;q=45&amp;auto=format&amp;w=754&amp;fit=clip\" sizes=\"(min-width: 1466px) 754px, (max-width: 599px) 100vw, (min-width: 600px) 600px, 237px\" srcset=\"https:\/\/images.theconversation.com\/files\/286788\/original\/file-20190803-117910-ulvvr6.jpg?ixlib=rb-1.1.0&amp;q=45&amp;auto=format&amp;w=600&amp;h=473&amp;fit=crop&amp;dpr=1 600w, https:\/\/images.theconversation.com\/files\/286788\/original\/file-20190803-117910-ulvvr6.jpg?ixlib=rb-1.1.0&amp;q=30&amp;auto=format&amp;w=600&amp;h=473&amp;fit=crop&amp;dpr=2 1200w, https:\/\/images.theconversation.com\/files\/286788\/original\/file-20190803-117910-ulvvr6.jpg?ixlib=rb-1.1.0&amp;q=15&amp;auto=format&amp;w=600&amp;h=473&amp;fit=crop&amp;dpr=3 1800w, https:\/\/images.theconversation.com\/files\/286788\/original\/file-20190803-117910-ulvvr6.jpg?ixlib=rb-1.1.0&amp;q=45&amp;auto=format&amp;w=754&amp;h=594&amp;fit=crop&amp;dpr=1 754w, https:\/\/images.theconversation.com\/files\/286788\/original\/file-20190803-117910-ulvvr6.jpg?ixlib=rb-1.1.0&amp;q=30&amp;auto=format&amp;w=754&amp;h=594&amp;fit=crop&amp;dpr=2 1508w, https:\/\/images.theconversation.com\/files\/286788\/original\/file-20190803-117910-ulvvr6.jpg?ixlib=rb-1.1.0&amp;q=15&amp;auto=format&amp;w=754&amp;h=594&amp;fit=crop&amp;dpr=3 2262w\" alt=\"\" \/><\/a><figcaption><span class=\"caption\">The vicious cycle of privacy abuse.<\/span><br \/>\n<span class=\"attribution\"><span class=\"source\">Helen J. Robinson<\/span>, <span class=\"license\">Author provided<\/span><\/span><\/figcaption><\/figure>\n<h2>Privacy policies are broken<\/h2>\n<p>The ACCC report points out that privacy policies tend to be long, complex, hard to navigate, and often create obstacles to opting out of intrusive practices. Many of them are not informing consumers about what actually happens to their information or providing real choices.<\/p>\n<p>Many consumers are unaware, for example, that Facebook can track their activity online when they are logged out, or even if they are <a href=\"https:\/\/theconversation.com\/shadow-profiles-facebook-knows-about-you-even-if-youre-not-on-facebook-94804\">not a Facebook user<\/a>.<\/p>\n<hr \/>\n<p><em><br \/>\n<strong><br \/>\nRead more:<br \/>\n<a href=\"http:\/\/theconversation.com\/shadow-profiles-facebook-knows-about-you-even-if-youre-not-on-facebook-94804\">Shadow profiles &#8211; Facebook knows about you, even if you&#8217;re not on Facebook<\/a><br \/>\n<\/strong><br \/>\n<\/em><\/p>\n<hr \/>\n<p>Some privacy policies are outright misleading. Last month, the US Federal Trade Commission settled with Facebook on a <a href=\"https:\/\/www.ftc.gov\/news-events\/blogs\/business-blog\/2019\/07\/ftcs-5-billion-facebook-settlement-record-breaking-history\">US$5 billion fine<\/a> as a penalty for repeatedly misleading users about the fact that personal information could be accessed by third-party apps without the user\u2019s consent, if a user\u2019s Facebook \u201cfriend\u201d gave consent.<\/p>\n<p>If this fine sounds large, bear in mind that <a href=\"https:\/\/www.marketwatch.com\/story\/facebook-stock-hits-highest-price-in-nearly-a-year-after-reports-of-5-billion-ftc-fine-2019-07-12\">Facebook\u2019s share price went <em>up<\/em><\/a> after the FTC approved the settlement.<\/p>\n<p>The ACCC is now investigating privacy representations by Google and Facebook under the Australian Consumer Law, and has <a href=\"https:\/\/www.accc.gov.au\/media-release\/healthengine-in-court-for-allegedly-misusing-patient-data-and-manipulating-reviews\">taken action<\/a> against the medical appointment booking app Health Engine for allegedly misleading patients while it was selling their information to insurance brokers.<\/p>\n<h2>Nothing to hide\u2026?<\/h2>\n<p>Consumers generally have very little idea about what information about them is actually collected online or disclosed to other companies, and how that can work to their disadvantage.<\/p>\n<p>A <a href=\"https:\/\/cprc.org.au\/publication\/research-report-a-day-in-the-life-of-data\/\">recent report<\/a> by the Consumer Policy Research Centre explained how companies most of us have never heard of \u2013 data aggregators, data brokers, data analysts, and so on \u2013 are trading in our personal information. These companies often collect thousands of data points on individuals from various companies we deal with, and use them to provide information about us to companies and political parties.<\/p>\n<p>Data companies have sorted consumers into lists on the basis of sensitive details about their lifestyles, personal politics and even medical conditions, as revealed by reports by the ACCC and the <a href=\"https:\/\/www.ftc.gov\/system\/files\/documents\/reports\/data-brokers-call-transparency-accountability-report-federal-trade-commission-may-2014\/140527databrokerreport.pdf\">US Federal Trade Commission<\/a>. Say you\u2019re a keen jogger, worried about your cholesterol, with broadly progressive political views and a particular interest in climate change \u2013 data companies know all this about you and much more besides.<\/p>\n<p>So what, you might ask. If you\u2019ve nothing to hide, you\u2019ve nothing to lose, right? Not so. The more our personal information is collected, stored and disclosed to new parties, the more our risk of harm increases.<\/p>\n<p>Potential harms include fraud and <a href=\"https:\/\/papers.ssrn.com\/sol3\/papers.cfm?abstract_id=3432769\">identity theft<\/a> (suffered by 1 in 10 Australians); being charged higher <a href=\"https:\/\/papers.ssrn.com\/sol3\/papers.cfm?abstract_id=3048688\">retail prices<\/a>, insurance premiums or interest rates on the basis of our online behaviour; and having our information combined with information from other sources to reveal intimate details about our health, financial status, relationships, political views, and even sexual activity.<\/p>\n<hr \/>\n<p><em><br \/>\n<strong><br \/>\nRead more:<br \/>\n<a href=\"http:\/\/theconversation.com\/why-you-might-be-paying-more-for-your-airfare-than-the-person-seated-next-to-you-100959\">Why you might be paying more for your airfare than the person seated next to you<\/a><br \/>\n<\/strong><br \/>\n<\/em><\/p>\n<hr \/>\n<p>In <a href=\"https:\/\/docs.house.gov\/meetings\/IF\/IF17\/20171129\/106659\/HHRG-115-IF17-Wstate-PasqualeF-20171129.pdf\">written testimony to the US House of Representatives<\/a>, legal scholar Frank Pasquale explained that data brokers have created lists of sexual assault victims, people with sexually transmitted diseases, Alzheimer\u2019s, dementia, AIDS, sexual impotence or depression. There are also lists of \u201cimpulse buyers\u201d, and lists of people who are known to be susceptible to particular types of advertising.<\/p>\n<h2>Major upgrades to Australian privacy laws<\/h2>\n<p>According to the ACCC, Australia\u2019s privacy law is not protecting us from these harms, and falls well behind privacy protections consumers enjoy in comparable countries in the European Union, for example. This is bad for business too, because weak privacy protection undermines consumer trust.<\/p>\n<p>Importantly, the ACCC\u2019s proposed changes wouldn\u2019t just apply to Google and Facebook, but to all companies governed by the Privacy Act, including retail and airline loyalty rewards schemes, media companies, and online marketplaces such as Amazon and eBay.<\/p>\n<p>Australia\u2019s privacy legislation (and most privacy policies) only protect our \u201cpersonal information\u201d. The ACCC says the definition of \u201cpersonal information\u201d needs to be clarified to include technical data like our IP addresses and device identifiers, which can be far more accurate in identifying us than our names or contact details.<\/p>\n<hr \/>\n<p><em><br \/>\n<strong><br \/>\nRead more:<br \/>\n<a href=\"http:\/\/theconversation.com\/explainer-what-is-surveillance-capitalism-and-how-does-it-shape-our-economy-119158\">Explainer: what is surveillance capitalism and how does it shape our economy?<\/a><br \/>\n<\/strong><br \/>\n<\/em><\/p>\n<hr \/>\n<p>Whereas some companies currently keep our information for long periods, the ACCC says we should have a right to request erasure to limit the risks of harm, including from major data breaches and <a href=\"https:\/\/www.ncbi.nlm.nih.gov\/pmc\/articles\/PMC6650473\/\">reidentification of anonymised data<\/a>.<\/p>\n<p>Companies should stop pre-ticking boxes in favour of intrusive practices such as location tracking and profiling. Default settings should favour privacy.<\/p>\n<p>Currently, there is no law against \u201c<a href=\"https:\/\/www.alrc.gov.au\/publications\/serious-invasions-privacy-digital-era-alrc-report-123\">serious invasions of privacy<\/a>\u201d in Australia, and the Privacy Act gives individuals no direct right of action. According to the ACCC, this should change. It also supports plans to <a href=\"https:\/\/www.minister.communications.gov.au\/minister\/mitch-fifield\/news\/tougher-penalties-keep-australians-safe-online\">increase maximum corporate penalties<\/a> under the Privacy Act from A$2.1 million to A$10 million (or 10% of turnover or three times the benefit, whichever is larger).<\/p>\n<h2>Increased deterrence from consumer protection laws<\/h2>\n<p>Our unfair contract terms law could be used to attack unfair terms imposed by privacy policies. The problem is, currently, this only means we can draw a line through unfair terms. The law should be amended to make unfair terms illegal and impose potential fines of A$10 million or more.<\/p>\n<p>The ACCC also recommends Australia adopt a new law against \u201cunfair trading practices\u201d, similar to those used in other countries to tackle corporate wrongdoing including inadequate data security and exploitative terms of use.<\/p>\n<p>So far, the government has acknowledged that reforms are needed but has not committed to making the recommended changes. The government\u2019s 12-week consultation period on the recommendations ends on October 24, with <a href=\"https:\/\/consult.treasury.gov.au\/structural-reform-division\/digital-platforms-inquiry\/\">submissions due by September 12<\/a>.<!-- Below is The Conversation's page counter tag. Please DO NOT REMOVE. --><img loading=\"lazy\" decoding=\"async\" style=\"border: none !important; box-shadow: none !important; margin: 0 !important; max-height: 1px !important; max-width: 1px !important; min-height: 1px !important; min-width: 1px !important; opacity: 0 !important; outline: none !important; padding: 0 !important; text-shadow: none !important;\" src=\"https:\/\/counter.theconversation.com\/content\/120078\/count.gif?distributor=republish-lightbox-basic\" alt=\"The Conversation\" width=\"1\" height=\"1\" \/><!-- End of code. If you don't see any code above, please get new code from the Advanced tab after you click the republish button. The page counter does not collect any personal data. More info: http:\/\/theconversation.com\/republishing-guidelines --><\/p>\n<p><a href=\"https:\/\/theconversation.com\/profiles\/katharine-kemp-402096\">Katharine Kemp<\/a>, Senior Lecturer, Faculty of Law, UNSW, and Co-Leader, &#8216;Data as a Source of Market Power&#8217; Research Stream of The Allens Hub for Technology, Law and Innovation, <em><a href=\"http:\/\/theconversation.com\/institutions\/unsw-1414\">UNSW<\/a><\/em><\/p>\n<p>This article is republished from <a href=\"http:\/\/theconversation.com\">The Conversation<\/a> under a Creative Commons license. Read the <a href=\"https:\/\/theconversation.com\/heres-how-tech-giants-profit-from-invading-our-privacy-and-how-we-can-start-taking-it-back-120078\">original article<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Katharine Kemp, UNSW Australia\u2019s consumer watchdog has recommended major changes to our consumer protection and privacy laws. If these reforms are adopted, consumers will have much more say about how we deal with Google, Facebook, and other businesses. The proposals include a right to request erasure of our information; choices about whether we are tracked &hellip; <a href=\"https:\/\/praag.org\/?p=20773\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Here&#8217;s how tech giants profit from invading our privacy, and how we can start taking it back&#8221;<\/span><\/a><\/p>\n","protected":false},"author":2961,"featured_media":20774,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[782,1295,86],"tags":[258,12487,2515,12488,429],"class_list":["post-20773","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-features","category-in-depth-coverage","category-technology","tag-facebook","tag-online","tag-privacy","tag-tech-companies","tag-twitter"],"cc_featured_image_caption":{"caption_text":"","source_text":"","source_url":""},"jetpack_featured_media_url":"https:\/\/praag.org\/wp-content\/uploads\/2019\/08\/invasion_of_privacy.jpg","_links":{"self":[{"href":"https:\/\/praag.org\/index.php?rest_route=\/wp\/v2\/posts\/20773","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/praag.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/praag.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/praag.org\/index.php?rest_route=\/wp\/v2\/users\/2961"}],"replies":[{"embeddable":true,"href":"https:\/\/praag.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=20773"}],"version-history":[{"count":1,"href":"https:\/\/praag.org\/index.php?rest_route=\/wp\/v2\/posts\/20773\/revisions"}],"predecessor-version":[{"id":20775,"href":"https:\/\/praag.org\/index.php?rest_route=\/wp\/v2\/posts\/20773\/revisions\/20775"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/praag.org\/index.php?rest_route=\/wp\/v2\/media\/20774"}],"wp:attachment":[{"href":"https:\/\/praag.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=20773"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/praag.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=20773"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/praag.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=20773"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}