Recently, at an international conference about digital identities at Karlstad University, scientists have presented research about methods digital services use to collect personal data about users that may encroach their privacy.
The research showed that digital services that require users to log in with a personal account often collect more than users are aware of and more than is in reality needed. “We have for instance seen that some service providers ask for information that they do not need for the main purpose of the service they offer,” said Lothar Fritsch, a researcher in IT-security at Karlstad University.
Fritsch explains that such services often ask for details while assuring the user that they will not be shown publicly or that they are protected by a user policy. However, these services then use personal data to find out as much as possible about users so that they can enhance their business opportunities. This is something that the users are not made aware of.
Besides websites, apps are also used to access personal information about users. Once installed, apps require access to certain information, and many studies have shown that it’s difficult for users to understand what they agree to.
Nurul Momen, a doctoral student in Computer Science at Karlstad University, says that the researchers are now working on finding ways to make users more aware of what it means when services ask for their information.
Source:
Karlstad University via ScienceDaily (https://www.sciencedaily.com/releases/2017/10/171009092926.htm)
Chanwoo's Weekly Tech 