Privacy Is Power

1. Privacy is power: Protecting personal data safeguards autonomy and democracy

Privacy is like the key that unlocks the aspects of yourself that are most intimate and personal, that most make you you.

Privacy as empowerment. Privacy is not just about hiding information; it's about maintaining control over our personal lives and, by extension, our society. When we protect our privacy, we safeguard our ability to think freely, make autonomous decisions, and participate in democracy without undue influence or coercion.

Defending democracy. Privacy is essential for the functioning of a healthy democracy. It allows citizens to:

• Vote without fear of repercussion
• Engage in political discourse without surveillance
• Protest anonymously
• Access information without being tracked

By preserving privacy, we maintain the conditions necessary for a free and open society, where power remains with the people rather than concentrated in the hands of corporations or authoritarian governments.

2. The data economy exploits personal information for profit and control

The surveillance economy has gone too far. It has abused our personal data in too many ways, too many times.

Surveillance capitalism. The data economy is built on the collection, analysis, and trade of personal data. Companies like Google and Facebook have turned users' personal information into a highly profitable commodity, often without explicit consent or full understanding from the individuals involved.

Exploitation of personal data:

• Targeted advertising based on intimate details of users' lives
• Prediction and manipulation of user behavior
• Sale of personal information to third parties
• Creation of detailed user profiles for various purposes

This business model not only violates individual privacy but also creates significant power imbalances between corporations and users, potentially undermining personal autonomy and societal well-being.

3. Mass surveillance emerged post-9/11, threatening civil liberties

After 9/11, the mandate pronounced by President George W. Bush and echoed in American society for years was 'never again'.

Security vs. privacy. In the aftermath of the September 11 attacks, governments, particularly in the United States, dramatically expanded surveillance powers in the name of national security. This shift prioritized data collection over privacy protections, leading to unprecedented levels of government surveillance.

Consequences of mass surveillance:

• Warrantless collection of citizens' data
• Collaboration between tech companies and intelligence agencies
• Erosion of privacy rights and civil liberties
• Chilling effect on free speech and political dissent

Despite claims of enhanced security, evidence suggests that mass surveillance has been largely ineffective in preventing terrorism while simultaneously posing significant threats to democratic values and individual freedoms.

4. Personal data is toxic: Its misuse can poison lives, institutions, and societies

Personal data is the asbestos of the tech society. Like asbestos, personal data can be mined cheaply. Much of it is the by-product of people interacting with tech. Like asbestos, personal data is useful. It can be sold, exchanged for privileges, and it can help predict the future. And like asbestos, personal data is toxic.

Data as a hazardous material. Personal data, when mishandled or exploited, can cause severe harm to individuals, organizations, and entire societies. Its toxic nature stems from its potential for misuse and the difficulty in controlling its spread once released.

Potential harms of data misuse:

• Identity theft and financial fraud
• Discrimination in employment, insurance, and other areas
• Blackmail and extortion
• Manipulation of political processes
• Erosion of social trust and cohesion

The long-term consequences of widespread data collection and misuse are only beginning to be understood, but they have the potential to fundamentally alter the fabric of our societies and undermine individual freedoms.

5. Tech companies use hard and soft power to influence user behavior

Tech's hard power can sometimes be confused with soft power because it doesn't look as violent as other forms of hard power, such as tanks and brute force. But people doing unto you what you have said 'no' to is hard power.

Hard power tactics. Tech companies often employ coercive methods to collect and use personal data, even when users have explicitly opted out or attempted to protect their privacy. This includes:

• Collecting location data when users have turned off location services
• Changing privacy settings without clear notification
• Making it difficult to opt out of data collection

Soft power influence. Companies also use more subtle methods to shape user behavior and attitudes towards privacy:

• Designing addictive interfaces to maximize engagement and data collection
• Using persuasive language to encourage data sharing
• Normalizing surveillance through product features and marketing

Both forms of power contribute to the erosion of user autonomy and privacy, often without users fully realizing the extent of their influence.

6. Personalized advertising and data brokers pose significant privacy risks

Real-time bidding (RTB) sends your personal data to interested advertisers, often without your permission.

Invasive advertising practices. Personalized advertising relies on the extensive collection and analysis of user data, often in ways that users don't fully understand or consent to. Real-time bidding systems expose sensitive personal information to numerous third parties in milliseconds, all to serve targeted ads.

Data broker industry. Data brokers collect, aggregate, and sell personal information on a massive scale:

• They create detailed profiles of individuals without their knowledge
• This data can be used for various purposes, including targeted marketing, credit decisions, and even surveillance
• The industry operates with little oversight or regulation

The combination of personalized advertising and data brokers creates a vast ecosystem of personal data trade that poses significant risks to individual privacy and autonomy.

7. Privacy is collective: Individual choices affect others' data security

Privacy is collective in at least two ways. It's not only that your privacy slips can facilitate violations of the right to privacy of other people. It's also that the consequences of losses of privacy are experienced collectively.

Interconnected privacy. Our personal data is often intertwined with that of others, making privacy a shared concern rather than a purely individual one. Actions that compromise our own privacy can have ripple effects on friends, family, and even strangers.

Collective privacy impacts:

• Genetic data reveals information about relatives
• Social media activity can expose others' personal information
• Location data can reveal social connections and activities
• Data breaches affect entire communities or user bases

Recognizing the collective nature of privacy underscores the need for societal-level protections and a shift in how we think about data ownership and control.

8. Governments and businesses must regulate the personal data trade

Pulling the plug on the torrent of personal data will hamper innovation. The most alarmist version of this claim argues that if we regulate the data economy, foreign, possibly adversarial, powers will develop AI faster than we will, and we will be left behind.

Necessity of regulation. Despite claims that regulating the data economy will stifle innovation, strong privacy protections are essential for maintaining a fair and democratic society. Regulations should aim to:

• Ban or severely restrict the trade in personal data
• Implement strict data protection standards
• Enforce fiduciary duties for companies handling personal data
• Improve cybersecurity requirements

Balancing innovation and privacy. It's possible to advance technology and AI without relying on the exploitation of personal data. Examples like differential privacy show that innovation in data use and privacy protection can go hand in hand.

9. Individuals can take steps to protect their privacy in the digital age

You are one of the biggest risks to your own privacy.

Personal privacy practices. While systemic change is necessary, individuals can take steps to better protect their personal data:

• Be mindful of what you share online
• Use privacy-focused tools and services (e.g., encrypted messaging apps, VPNs)
• Adjust privacy settings on devices and accounts
• Limit data sharing with apps and websites
• Use strong, unique passwords and two-factor authentication

Collective action. Individual choices can contribute to broader change:

• Demand privacy from businesses and governments
• Support privacy-focused products and services
• Educate others about privacy issues
• Participate in advocacy efforts for stronger privacy protections

By taking control of our own data and advocating for better practices, we can contribute to a culture that values and protects privacy.

10. Crises like pandemics can lead to increased surveillance and data collection

Crises are dangerous for civil liberties.

Crisis exploitation. Emergencies, such as the COVID-19 pandemic, are often used to justify increased surveillance and data collection. These measures, implemented in the name of public safety, can have long-lasting effects on privacy and civil liberties.

Risks of crisis-driven surveillance:

• Normalization of invasive data collection practices
• Implementation of technologies without adequate privacy safeguards
• Difficulty in rolling back emergency measures once the crisis has passed
• Potential for data misuse or mission creep

It's crucial to critically evaluate proposed surveillance measures during crises, ensuring that they are necessary, proportionate, and time-limited.

11. The future of privacy depends on our choices and actions today

We are not witnessing the death of privacy. Even though privacy is in distress, we are in a better place now to defend it than we have been for the past decade.

Privacy at a crossroads. The decisions we make now about personal data and privacy will shape the future of our societies. We have the opportunity to reclaim privacy and build a digital world that respects individual rights and democratic values.

Steps toward a privacy-respecting future:

• Implement strong data protection laws and regulations
• Develop privacy-enhancing technologies
• Foster a culture that values privacy as a fundamental right
• Hold companies and governments accountable for privacy violations
• Educate the public about privacy issues and protection strategies

By taking action now, we can create a future where privacy is respected, personal data is protected, and individuals have control over their digital lives.

Last updated: September 26, 2024