With National Data Privacy Week just days away (Jan. 27-31, 2025), this year’s theme of “You have the power to take charge of your data” does a terrific job of focusing attention where it is warranted.
So, how exactly do we ‘take charge’?
A great place to start is to use Jan. 27-31 as that time to educate yourself, clean up where your online private data lives, and develop a plan to regularly keep providers from unnecessary access.
You are typically the customer of online tools (email accounts, online services, social media accounts, web browsers, mobile apps, online gaming, etc.), and it is time to wield that authority. Your private data is worth a fortune to some of these providers, but you do not need to be a computer whiz or a cybersecurity expert to reign in those who covet your data. Accepting and acting on that empowerment is the key concept.
An early step is to review the proliferation of tools you have accumulated that you no longer need and get rid of them. This will narrow the risk immediately. A few of us (and we know who we are!) have been piling these up dating back more than 25 years. Anyone remember when the predecessor of AOL burst onto the scene in 1985 to provide Commodore 64 users the ability to connect online? That’s 40 years ago as of this writing if you are keeping track.
It is long past time to sweep away those old tools and even newer ones that are neither enriching nor simplifying your life. Private data is often collected by these tools and is possibly shared even if not actively used. Our contacts, photos, and where we live could be among these items.
Set the bar high and wipe out the rest. With the online trash moved to the dustbin of our histories, it is time to look at the big players in our lives.
Deep dives into privacy settings for some 150 tools can be found at the terrific National Cybersecurity Alliance ‘Manage Your Privacy Settings’ site (https://www.staysafeonline.org/articles/manage-your-privacy-settings). The May 2024 edition splits privacy settings links across 17 categories for quick review - everything from mobile banking to dating sites. Reviewing the list is also a great way to jog your memory of that mobile app you signed up for 10 years ago but have long forgotten about.
This is where the value judgment with your most important tools is critical. “How much convenience do I want vs. how much privacy do I require?” is the defining question, but it likely will not result in a common answer across all the tools we access. For example, not providing your zip code may mean you have to entire it manually upon every visit to that site. How important is the time and hassle of typing in your zip code each time? It all depends on the value added.
When in doubt, there is typically no harm in locking down your privacy settings to the strictest level possible. If the provider’s options are either too limited or the tool becomes lousy when you tighten the settings, replacing it with a competitor offering more privacy options should be on the table. A provider failing to protect your private data by now may never improve until a new law forces their hand.
Fortunately, elected leaders are increasingly forcing those who possess our data to ensure privacy of that data is respected. Besides the traditional federal level laws executed via HIPAA, GLBA, and FERPA, various states have taken it further by authoring their own data privacy laws.
According to the International Associate of Privacy Professionals (https://iapp.org), similar laws had been signed in 19 states by early 2025 and several others were in the law-making process. The most well-known and first of these is the California Privacy Rights Act (CRPA) (https://oag.ca.gov/privacy/ccpa).
Taking control of your private data will likely be time consuming, it may degrade the value of some tools, and it might even result in changing providers – such as switching web browsers or email clients. However, making data privacy a regular part a safe computing commitment is time well spent!
Bill Balint is the owner of Haven Hill Services LLC, contracted as TriVigil’s Advisory CIO for Education.