How private is your Gmail, and should you switch?

You might be surprised how much Google’s email service – and others – know about you. Here’s how to set some boundaries

Most people are aware of the cookies that track them across the web, and the privacy-invading practices of Google search, but did you know Google’s email service, Gmail, collects large amounts of data too?

This was recently put into stark focus for iPhone users when Gmail published its app “privacy label” – a self-declared breakdown of the data it collects and shares with advertisers as part of a new stipulation on the Apple App Store.

Continue reading...

Seeing stones: pandemic reveals Palantir’s troubling reach in Europe

Covid has given Peter Thiel’s secretive US tech company new opportunities to operate in Europe in ways some campaigners find worrying

The 24 March, 2020 will be remembered by some for the news that Prince Charles tested positive for Covid and was isolating in Scotland. In Athens it was memorable as the day the traffic went silent. Twenty-four hours into a hard lockdown, Greeks were acclimatising to a new reality in which they had to send an SMS to the government in order to leave the house. As well as millions of text messages, the Greek government faced extraordinary dilemmas. The European Union’s most vulnerable economy, its oldest population along with Italy, and one of its weakest health systems faced the first wave of a pandemic that overwhelmed richer countries with fewer pensioners and stronger health provision. The carnage in Italy loomed large across the Adriatic.

One Greek who did go into the office that day was Kyriakos Pierrakakis, the minister for digital transformation, whose signature was inked in blue on an agreement with the US technology company, Palantir. The deal, which would not be revealed to the public for another nine months, gave one of the world’s most controversial tech companies access to vast amounts of personal data while offering its software to help Greece weather the Covid storm. The zero-cost agreement was not registered on the public procurement system, neither did the Greek government carry out a data impact assessment – the mandated check to see whether an agreement might violate privacy laws.

Continue reading...

Grindr fined £8.6m in Norway over sharing personal information

Fine from by the Norwegian Data Protection Authority is 10% of Grindr’s global annual revenue

Grindr has been fined 100m krone (£8.6m) by the Norwegian Data Protection Authority after an investigation revealed the dating app was sharing deeply personal information with advertisers, including location, sexual orientation and mental health details.

The fine is 10% of Grindr’s global annual revenue and is particularly high because of the personal nature of the information shared.

Continue reading...

Vaccine passports: what are they and do they pose a danger to privacy?

Race to build app for people to demonstrate Covid jab or a negative test, but rights groups worry about ‘identity checks’

Vaccine passports, which would allow people with immunity to Covid to prove they were at low risk of spreading the disease, are being investigated by companies and countries around the world. But the proposals have also raised fears among critics that they could underpin an oppressive digital ID system, and put sensitive medical records in the hands of authorities and employers.

Despite the name, a vaccine passport is not a piece of paper; instead, in the most developed versions of the idea, it is an app or similar system that can prove the bearer has been vaccinated, tested positive for Covid antibodies, or recently received a negative test. There would be no need to build and operate a privacy violating centralised database.

Continue reading...

Poor data protection could put lives at risk, say Somalia aid workers

‘Extremely dangerous’ if personal information needed to process mobile payments is lost or falls into wrong hands, say staff

The rapid upscaling of digital technology use by international groups in Somalia is causing concern about the risk to the people whose data is being collected.

The coronavirus pandemic has accelerated the use of programming by humanitarian organisations to deliver aid, but local staff working with several different NGOs say the organisations are not thinking enough about data protection or obtaining informed consent.

Continue reading...

UN warns of impact of smart borders on refugees: ‘Data collection isn’t apolitical’

Special rapporteur on racism and xenophobia believes there is a misconception that biosurveillance technology is without bias

Robotic lie detector tests at European airports, eye scans for refugees and voice-imprinting software for use in asylum applications are among new technologies flagged as “troubling” in a UN report.

The UN’s special rapporteur on racism, racial discrimination, xenophobia and related intolerance, Prof Tendayi Achiume, said digital technologies can be unfair and regularly breach human rights. In her new report, she has called for a moratorium on the use of certain surveillance technologies.

Continue reading...

Big tech firms may be handing Hong Kong user data to China

Allegation follows new law that lets Hong Kong ask for sensitive data if deemed to threaten national security

Big technology companies may already be complying with secret Chinese requests for user information held in Hong Kong and ought to “come clean” about the vulnerability of the data they hold there, a senior US state department official has said.

The allegation of possible secret cooperation between major companies and Hong Kong authorities follows the implementation of a sweeping and controversial new national security law that allows Hong Kong authorities to demand sensitive user data from companies if it is deemed to threaten national security.

Continue reading...

Dominic Cummings’ data law shake-up a danger to trade, says EU

Exclusive: proposed rewriting of data protection rules said to put vital cooperation in doubt

A radical “pro-tech” plan championed by Dominic Cummings to rewrite Britain’s data protection laws is endangering future cooperation with the EU worth billions to the British economy, Brussels has warned.

The government’s newly published national data strategy, promising a “transformation” long sought by Boris Johnson’s chief adviser and the former Vote Leave director, has sparked concern at a sensitive time with the continued flow of data between the UK and EU member states in question.

Continue reading...

Northern Ireland abuse survivors reject £1,500 compensation for identity leak

Survivors and victims’ group ‘outraged’ by suggested sum per person for email error in May

Survivors of institutional sexual and physical abuse in Northern Ireland have rejected compensation offered to them in response to a damaging leak that exposed more than 500 of their names.

The Survivors and Victims of Institutional Abuse (Savia) group said on Sunday it was “outraged” by the offer of £1,500 per person as recompense for their identities being revealed earlier this year.

Continue reading...

Revealed: Dominic Cummings firm paid Vote Leave’s AI firm £260,000

Boris Johnson’s chief adviser declines to explain reason for payments to Faculty

A private company owned and controlled by Dominic Cummings paid more than a quarter of a million pounds to the artificial intelligence firm that worked on the Vote Leave campaign.

The prime minister’s chief adviser is declining to explain the reason for the payments to Faculty, which were made in instalments over two years. Faculty also declined to say what they were for.

Continue reading...

Google says it will no longer save a complete record of every search

The firm will now delete its saved records of a new user’s activity after 18 months

Google will no longer save a complete record of every search made by new users, the company says, as it launches a push to promote its privacy credentials against concerted competition from arch-rival Apple.

The company will now automatically delete its saved records of a new user’s activity on the web and in its apps after 18 months, chief executive Sundar Pichai announced on Wednesday. Previously, such information had been kept indefinitely by default, which the company argued was necessary to personalise its services for individual users.

Continue reading...

Pacific data cable not safe from China if Hong Kong included, says US

Justice department says ‘recent actions’ by China towards its territory indicate landing station could expose US communications to spying

The US government wants a high-capacity undersea data cable system proposed by Google and Facebook to bypass Hong Kong, citing potential national security concerns following China’s moves to exert greater control in the territory.

The Pacific Light Cable Network, pending approval by the federal communications commission (FCC), should connect the US, Taiwan and the Philippines but not go through Hong Kong as planned, a US Justice Department committee has recommended.

Continue reading...

Indonesia investigates leak of more than two million voters’ personal information

Data breach included names, home addresses and national identification numbers

Indonesia is investigating how 2.3 million voters’ personal information was leaked online, the election commission said.

The data breach, which included names, home addresses and national identification numbers, appeared to be from the 2014 election voter list, the General Election Commission revealed on Friday.

Continue reading...

Apple whistleblower goes public over ‘lack of action’

Thomas le Bonniec says firm violating rights and continues massive collection of data

A former Apple contractor who helped blow the whistle on the company’s programme to listen to users’ Siri recordings has decided to go public, in protest at the lack of action taken as a result of the disclosures.

In a letter announcing his decision, sent to all European data protection regulators, Thomas le Bonniec said: “It is worrying that Apple (and undoubtedly not just Apple) keeps ignoring and violating fundamental rights and continues their massive collection of data.

Continue reading...

Home affairs data breach may have exposed personal details of 700,000 migrants

Exclusive: Privacy experts say the breach in the SkillsSelect platform, which affects data going back to 2014, was ‘very serious’

Privacy experts have blasted the home affairs department for a data breach revealing the personal details of 774,000 migrants and people aspiring to migrate to Australia, including partial names and the outcome of applications.

At a time the federal government is asking Australians to trust the security of data collected by its Covid-Safe contact tracing app, privacy experts are appalled by the breach, which they say is just the latest in a long line of cybersecurity blunders.

Continue reading...

Melbourne professor quits after health department pressures her over data breach

Vanessa Teague reported on a dataset of Medicare and PBS payments that was supposed to be anonymous but wasn’t

A prominent university professor has quit after the health department pressured her university to stop her speaking out about the Medicare and PBS history of over 2.5 million Australians being re-identifiable online due to a government bungle.

In 2016, Vanessa Teague, a cryptographer from the University of Melbourne, and two of her colleagues reported on a dataset, published on an open government data website by the federal government, of 2.5m Australians’ Medicare and PBS payment history dating back to 1984 that had supposedly been de-identified so people were anonymous.

Continue reading...

Met removes hundreds from gangs matrix after breaking data laws

How list is compiled also to be reviewed amid claims it blights life chances and is discriminatory

Hundreds of young people have been removed from a controversial police list of alleged gang members after claims that it is discriminatory and blighted their life chances, the Guardian has learned.

The Metropolitan police’s gangs matrix, which the force says is a vital tool in tackling violence in London, has been found to be breaking data laws.

Continue reading...

UK accused of ‘behaving like cowboys’ over EU database copying

Dutch Liberal MEP Sophie in ’t Veld says leaked report revealed ‘violations and abuse’

The British government has been accused of “behaving like a bunch of cowboys” after a confidential report revealed it had allowed illegal copying of an EU database.

The issue, discussed publicly for the first time on Thursday, threatens to sour talks on the post-Brexit relationship between the UK and the EU, despite hopes on both sides for close ties in fighting crime and terrorism.

Continue reading...

Tired of Google following you? It is now easier to clear location data

New functionality automatically deletes history of places users have visited

It is now slightly easier to opt out of Google’s panopticon, with the introduction of new controls from the search engine to automatically clear your data after a set period of time.

By default, Google saves a permanent history of everything a user has searched for, every website they have visited, activity from any other app, site or device that uses Google services, and a record of their physical movements gleaned from using Google Maps or an Android device.

Continue reading...

Apple and WhatsApp condemn GCHQ plans to eavesdrop on encrypted chats

GCHQ ‘ghost protocol’ would seriously undermine user security and trust, says letter

A GCHQ proposal that would enable eavesdropping on encrypted chat services has been condemned as a “serious threat” to digital security and human rights.

In an open letter signed by more than 50 companies, civil society organisations and security experts – including Apple, WhatsApp, Liberty and Privacy International – GCHQ was called on to abandon its so-called “ghost protocol”, and instead focus on “protecting privacy rights, cybersecurity, public confidence, and transparency”.

Continue reading...