There is a constant annoying hum of how Big Tech and online services are committed to keeping your privacy safe and secure. Before you use their website, they have you agree to their Terms of Service, Privacy Policy and their Cookie Policy. Cookie Policy? Sounds half baked to me!
Most people really don’t understand what this all means so you click, AGREE and proceed to use the service. I still can’t believe government agencies think agreeing to a pop up on a website makes the world a secure and private place.
The intended purpose of a privacy policy is to inform individuals about how an organization collects/steals, uses/misuses, stores forever, and protects/shares their personal information. Its suppose to be transparent but is shrouded in so much legal jargon that hardly anyone reads or understands it.
Here are the sections of many popular privacy policies. Instead of describing how they protect your privacy in their wonderfully big legal terms, I am going explain how they will misuse and share your private information.
Transparency and Disclosure
A privacy policy provides clear and accessible information to individuals regarding the collection, processing, and sharing of their personal data. It informs users about the types of data collected, the purposes for which it is used, and whether it is shared with third parties. By disclosing these practices, organizations demonstrate transparency and accountability.
Commentary: Instead of keeping your information private they blatantly tell you that once they have your data, they can use it as they please. I thought a privacy policy was to tell you how they would protect your privacy not how they are going to sell your online activity for profit. When they give your private information to third parties, who are those third parties and what are their privacy policy, these are never stated.
Informed Consent
A privacy policy helps individuals make informed decisions about sharing their personal information. It informs users about their rights, such as the right to opt-out, access their data, or request its deletion. By understanding the privacy policy, users can give their informed consent to the collection and processing of their data or choose not to engage with the service.
Commentary: Did you read that right? --- “By understanding the privacy policy” --- . Well they make sure you don’t understand a thing so they can trick you into agreeing to it so they can do what they please with your data. If you don’t like it, they tell you not to bother with their service. Comply or be denied.
Compliance with Legal Requirements
Privacy policies are often required by law, such as the General Data Protection Regulation (GDPR) in the European Union or the California Consumer Privacy Act (CCPA) in the United States. Organizations must adhere to these legal obligations and provide individuals with information about their data practices.
Commentary: This one makes me actually laugh out loud. So it’s a legal requirement for companies to tell you how they are going to misuse your information and that makes it all legal.
Trust Building
A privacy policy plays a crucial role in establishing trust between the organization and its users. When users see that an organization has a clear and comprehensive privacy policy, it enhances their confidence that their personal information will be handled responsibly and in line with their expectations. Trust is essential for user engagement and long-term relationships.
Commentary: By just having a privacy policy (which is a legal requirement) makes me trust you? I would trust you if the policy was written in plain language and short. The longer and more complex the document, the less I trust them. Does a lawyer writing a privacy policy instill trust?
Risk Mitigation
Privacy policies help organizations mitigate legal and reputational risks associated with mishandling personal data. By clearly stating the privacy practices, organizations can demonstrate their commitment to privacy compliance and reduce the likelihood of data breaches, legal disputes, or regulatory penalties.
Commentary: WTF! Did I read that right again! --- “mitigate legal and reputational risks associated with mishandling”. So if they screw up they are not liable and your privacy is violated.
Communication and Customer Support
A privacy policy serves as a communication tool between the organization and its users. It provides a channel for users to understand how their data is handled and to contact the organization if they have questions, concerns, or requests regarding their privacy. It demonstrates the organization's commitment to addressing privacy-related inquiries and building a customer-centric approach.
Commentary: The one thing people do not do enough of is ask questions to those that are shepherds of their private data. More questions should be asked and unacceptable answers should be posted for all to see.
In Closing
Society in all of its complexity and diverseness needs true privacy to thrive. Individuals with a variety of ideas and lifestyles need to be protected online and offline. Privacy is paramount and the keeper of our data needs to not state how they will misuse our data but how they truly will protect it.
Until privacy policies are written to truly protect it users, not corporations, beware of the illusion of protection by privacy polices.