BBB Tip: Data privacy

While it may seem like there is nothing an individual can do to stop a cyberattack, there are some best practices that consumers and businesses can use to help guard against losing important personal information to cyber thieves.

A lot of personal information is already shared on the internet by cell phones, tablets, laptops or any other device that connects through wifi or an internet provider. These access points make it easier to shop, bank, make travel arrangements, and keep in touch with friends or family.

When online, safeguard your information to help avoid scams, fraud, and identity theft. It’s also a good idea to review periodically who has your information.

The BBB offers the following tips to help secure the privacy of critical information:

• Share with care. Posts on social media last a long time. Consider who will see the post, how readers might perceive it, and what information it might reveal about the individual posting it.
  
  
• Manage privacy settings. Check the privacy and security settings on web services and apps and set them to your comfort level for information sharing. Each device, application, or browser used will have different features to limit how and with whom you share information.
  
  
• Personal info is like money. Value it and protect it. Personal information, such as purchase history, IP address, or location, has tremendous value to businesses – just like money. Make informed decisions about whether or not to share data with certain businesses by considering the amount of personal information they are asking for and weighing it against the benefits you may receive in return. Avoid accessing sensitive accounts (like banking or email) on public Wi-Fi networks, as they are often insecure and vulnerable to hackers. Use a virtual private network (VPN) to secure your connection when using public networks.
  
  
• Make your passwords long and strong. Use long passwords with a combination of upper and lower case letters, numbers, and symbols – eight characters for most accounts and twelve characters for email and financial accounts. Don’t use the same password for multiple accounts, especially email and financial. Keep a paper list of your passwords in a safe place, not on or near your computer. Consider using a password vault application. See BBB's tips for creating a strong password.
  
  
• Keep tabs on apps. Many apps ask for access to personal information, such as geographic location, contacts list, and photo album, before using their services. Be thoughtful about who gets that information, and be wary of apps that require access to information that is not required or relevant to the services they offer. Delete unused apps on your internet-connected devices and keep others secure by performing updates.
  
  
• Lock down your login. For your online accounts, use the strongest authentication tools available. Your usernames and passwords are not enough; consider two-factor authentication for key accounts like email, banking, and social media, especially for access on mobile devices.
  
  
• Don’t click on unfamiliar links. Whether at home or at work, don’t click on links from unfamiliar sources or unexpected correspondence. One false click can infect a whole computer or a whole business. Be vigilant about suspicious emails, messages, or calls asking for personal or financial information. Double-check the sender’s address, avoid downloading unexpected attachments, and never provide sensitive information unless you’re certain of the source.
  
  
• Pay attention to internet-connected devices. Smart thermostats, voice control systems, cars, and even refrigerators are just the beginning of the growing list of devices that watch our homes and track our locations. Read the privacy policy and understand what data is being collected and how it will be used. Read BBB's tips on smart devices and cyber security risks.
  
  
• Know your rights. Familiarize yourself with data privacy laws and regulations, such as GDPR (General Data Protection Regulation) in the EU, PIPEDA (Personal Information Protection and Electronic Documents Act) in Canada, or CCPA (California Consumer Privacy Act), which may apply to you. Understanding your rights can help you better protect your personal information and hold businesses accountable.

Charitable organizations should be aware of data privacy. Donors and others communicate online with charities via their websites, emails, and other online means and need to be informed about what policies are in place to address privacy concerns. BBB Wise Giving Alliance published a blog article containing advice for charities regarding data privacy concerns.