# data[].attributes.body
These text sets all connect back to the surveillance and technology aspect of 1984. Articles speaking on the present privacy of persons throughout the world are shared throughout this text set which include a variety of; articles, songs, poems, essays and artwork.

By: Jason, Jayden, Jacob, and Kenton

# data[].attributes.body
Why does our online privacy matter?

# data[].attributes.body
How do powers of the world use technology to abuse peoples personal privacy?

# data[].attributes.body
How can a sovereignty affect the way we use technology?

# data[].attributes.attachment_caption
"At least they're not micromanaging you anymore."

# data[].attributes.body
This piece of artwork can be considered as a political cartoon on the reason of how surveillance affects the way people work. The irony of the comic is to show both, the boss, and all the cameras watching the employee as he works to ensure he is doing everything correctly. There will only need to be one or the other surveying him, whether it's the boss watching him at all times or it's the cameras constantly aiming down on him. As well the quote "At least they're not micromanaging you anymore" is ironic because even though it may seem like a boss or manager isn't constantly watching you, they can still see everything you're doing because of the cameras.

# data[].attributes.body
The short answer is yes, everyone's phone is listening to them whether they know it or not. This article explains why and what features on your phone are allowing this to occur, for example; siri being one of the biggest virtual microphones for companies to use on you for advertisement purposes. It gives a step-by-step tutorial on how to ensure that your devices are safe whether you have an iPhone or an Android.

# data[].attributes.attachment_link.readable_text
Written by Clare Stouffer, a NortonLifeLock employee

Yes, your phone is listening to you - to an extent and namely through virtual assistant apps, that is.

First came Siri in 2011, then came Google Assistant, and then Alexa and Cortana all followed. Each with the intent to serve users by listening to their demands, whether it's making phone calls, sending texts, or adding items to a to-do list.

To this end, the question shouldn't just be "is my phone listening to me?" Rather, you should also be asking yourself, "How much does my phone listen to me?" and "What does it do with the conversations it collects?"

Here, we're addressing these queries and then some to get to the bottom of the are-our-phones-listening-to-us dilemma.

Why is my phone listening to me?

Foremost, our phones listen to us to virtually assist us. That's through voice assistant apps, like Siri and "Hey Google," but also through personalized advertisements that follow conversations had on them. See, it's no coincidence that you're sometimes served advertisements that directly relate to a phone conversation you just had.

It's similar to how search engines track our activity to ensure we're delivered the most relevant results and advertisements. In this respect, you might think of your smartphone as a verbal search engine. These devices and the applications on them are capable of internet tracking, too.

So, the next time you beckon "Hey Google" or Siri, know that it's just like opening a browser window. And your data can be collected, oftentimes for advertising or marketing purposes.

Is my phone listening to me legally?

Yes, it is legal for phones to listen to you. That's because we often give consent for phones to listen to us when we accept terms and conditions of software updates or app downloads. Those conditions are usually that we'll allow our data to be collected so that we can harness all the wonders and conveniences of voice-assisted programs and services.

Worth mentioning is that phones can also listen to us illegally. That's when users do not consent to be listened to and it's often by way of spyware or other malware infecting smartphones. For this reason, it's always wise to limit the permissions you provide to applications and review the terms and conditions of new programs that ask for microphone access.

Should I be concerned my phone is listening to me?

Generally, you shouldn't be too concerned about your phone listening to you. Hey, you might even appreciate the personalized advertisements that result from it. Of course, if you're uncomfortable with your data being collected - it's your data, after all - there are some ways to stop your phone from listening.

How to stop my phone from listening to me

Sure, just as you might cover your webcam, you can also cover your microphone with a piece of tape or purchase a special phone case to stop your phone from listening to you. But a more surefire approach is to review the microphone permissions granted across applications and also disable virtual assistants.

In short, turn off your microphone to stop your phone from listening to you.

How to turn off your microphone on iPhone

If you're questioning "is my iPhone recording me" or "is Siri always listening," you're best to at least know how to turn off your microphone on an iPhone.

1. Navigate to Settings > Siri & Search

2. Toggle off the following items:
○ "Listen for 'Hey Siri'"
○ "Press Side button for Siri"
○ "Allow Siri When Locked"

3. "Allow Siri When Locked"Finally, when a pop-up window appears, tap "Turn Off Siri"

And that's how you disable Siri.

How to turn off your microphone on Android

To turn off "Hey Google" or to stop "OK Google," follow these steps:

1. Navigate to Settings Select

2. Google > Account Services > Search, Assistant & Voice > Voice

3. Select Voice Match and, finally, toggle off "Hey Google"

And that's how to turn off "Hey Google" and disable "Hey Google."

How to disable microphone access across applications

In addition to turning off virtual assistant apps like Siri and "Hey Google," you might want to stop other applications like social media platforms from accessing your microphone, too.

To disable microphone access on iOS devices, navigate to Settings > [a specific application] > Settings, and then toggle off Microphone.

To disable microphone access on Android devices, navigate to Settings > Applications > Applications Manager > [a specific application] > Permissions, and then select "Turn Off the mic."

5 privacy tips for smartphones

Some might consider phones listening to them as a breach of privacy, while others might consider it convenient. No matter your stance, consider the following smartphone privacy protection tips.

1. Verify the apps you download and only download apps from official stores. This helps you avoid third-party applications that can contain malware.

2. Review app permissions to determine whether or not specific applications really need access to your microphone and, in turn, access to your conversations.

3. Delete your voice request history on Google Assistant to ensure that this no memory bank of your conversation and to ensure your potentially sensitive information is not at risk in the event of a cyberattack.

4. Consider using a VPN to encrypt your manual browsing activity, including your IP address, as an added layer of privacy protection.

5. Keep your software up to date to stay ahead of cybercriminals seeking to exploit security vulnerabilities, as software updates patch these holes.

Knowing how to take control of your devices also means you know how to take control of your data. At the end of the day, it's up to you whether you want your phone to listen to you or not.

Cyber threats have evolved, and so have we.

Norton 360™ with LifeLock™, all-in-one, comprehensive protection against viruses, malware, identity theft, online tracking and much, much more.

Try Norton 360 with Lifelock.

Editorial note: Our articles provide educational information for you. NortonLifeLock offerings may not cover or protect against every type of crime, fraud, or threat we write about. Our goal is to increase awareness about cyber safety. Please review complete Terms during enrollment or setup. Remember that no one can prevent all identity theft or cybercrime, and that LifeLock does not monitor all transactions at all businesses.

Copyright © 2022 NortonLifeLock Inc. All rights reserved. NortonLifeLock, the NortonLifeLock Logo, the Checkmark Logo, Norton, LifeLock, and the LockMan Logo are trademarks or registered trademarks of NortonLifeLock Inc. or its affiliates in the United States and other countries. Firefox is a trademark of Mozilla Foundation. Android, Google Chrome, Google Play and the Google Play logo are trademarks of Google, LLC. Mac, iPhone, iPad, Apple and the Apple logo are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc. Alexa and all related logos are trademarks of Amazon.com, Inc. or its affiliates. Microsoft and the Window logo are trademarks of Microsoft Corporation in the U.S. and other countries. The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. Other names may be trademarks of their respective owners.

# data[].attributes.attachment_link.title
Is my phone listening to me? Yes, here's why and how to stop it

# data[].attributes.attachment_link.description
Written by Clare Stouffer, a NortonLifeLock employee Yes, your phone is listening to you - to an extent and namely through virtual assistant apps, that is. First came Siri in 2011, then came Google Assistant, and then Alexa and Cortana all followed.

# data[].attributes.headline
47 Countries Ranked by Privacy Laws: EQ3

# data[].attributes.subject
47 Countries Ranked by Privacy Laws: EQ3

# data[].attributes.body
This article speaks on 47 countries and the ways they surveillance their citizens. The article eventually ranks them out of three points and every country has a separate explanation on how their technology and surveillance is being kept safe. It goes in detail about the EU, UK, and the US with the EU having the highest rating.

# data[].attributes.attachment_link.readable_text
Comparitech has assessed privacy protection and the state of surveillance in 47 countries to see where governments are failing to protect privacy and/or are creating surveillance states.

To do this we looked at a number of categories, from the use of biometrics and CCTV to data sharing and retention laws.

What did we find?

Not one country is consistent in protecting the privacy of its citizens, most are actively surveilling their citizens, and only five could be deemed to have "adequate safeguards."

Are things improving or getting worse?

In the EU, the General Data Protection Regulation (GDPR) is helping improve privacy laws, on the whole. However, it doesn't prevent some countries from entering into agreements that encroach on residents' privacy through data sharing with other countries, e.g. the Treaty of Prüm. It doesn't stop some countries from increasing their use of biometric surveillance, either.

Outside of the EU, several countries are creating what can only be described as surveillance states, with privacy rights seemingly taking a serious back seat. Perhaps unsurprisingly, China and Russia are the biggest culprits.

How do countries like the UK and US fare?

We'll find out below.

Key findings

Here are some notable findings from the study:

China's government not only fails to protect citizens' privacy, but actively invades it

Collection and retention of biometric data-fingerprints and faces-is ramping up worldwide

EU countries tend to share a large amount of their citizens' data with fellow member states

Immigrants are often most impacted by government surveillance, particularly when they enter or leave a country

Only five countries have adequate privacy safeguards according to our scoring system, and all of them are in Europe. The GDPR plays a large role in this, but does not account for everything

No countries earned a perfect score, or even a near-perfect score

Enforcement varies widely even among those countries with good privacy laws

Scoring system (for each category and overall)

4.1-5.0 = Upholding privacy standards on a consistent basis

3.6-4.0 = Significant safeguards and protections

3.1-3.5 = Adequate safeguards against abuse

2.6-3.0 = Some safeguards but weakened protections

2.1-2.5 = Systemic failure to maintain safeguards

1.6-2.0 = Extensive surveillance

1.1-1.5 = Endemic surveillance

Total

Score Card

Constitutional Protection

Statutory Protection

Privacy Enforcement

Identity Cards and Biometrics

Data-sharing

Visual Surveillance

Communication Interception

Workplace Monitoring

Government Access to Data

Communication Data Retention

Surveillance of Medical, Financial and Movement

Border and Trans-Border Issues

Leadership

Democratic Safeguards

Bottom 5 non-EU countries

1. China - 1.8 - Extensive surveillance

2. Russia - 2.1 - Systemic failure to maintain safeguards

3. India - 2.4 - Systemic failure to maintain safeguards

4. Thailand - 2.6 - Some safeguards but weakened protections

5. Malaysia - 2.6 - Some safeguards but weakened protections

China

China's ranking isn't much of a surprise but where does its extensive surveillance arise from?

Privacy laws lack clear guidelines, which makes them difficult to enforce

ID cards are mandatory in China for anyone over the age of 16

China is heavily reliant on biometrics and artificial intelligence (AI). For example, facial recognition cameras are now catching jaywalkers, triggering a text message, and sending their image to large screens to publicly shame them. China also uses these types of cameras to track and monitor Uighurs, the country's Muslim minority

Data is frequently shared among agencies and state intelligence has a green light to request data from any organization or citizen

Surveillance cameras with facial recognition are now the "norm" in China and there are few limitations in place on CCTV as a whole

Intelligence services and law enforcement can intercept communications without a court order - and how they perform these interceptions is still largely unknown

Employees aren't protected when it comes to their communications, despite the data subject needing to give their consent for data collection. Courts have been known to rule in favor of the employer (where an employee didn't give their consent for email monitoring) and employees' brainwaves have even been monitored to "aid productivity"

There are no time limits on data retention but there are specific requirements on what data needs retaining. For example, text message service providers have to store various information for a minimum of five months

Medical data is frequently used for research or as "public interest records"

All financial transactions over a certain amount have to be reported to a government agency

Extreme surveillance is being implemented at China's borders with apps being installed on people's phones (without consent) to scan for "inappropriate content"

China is a member of Interpol but many countries are wary of sharing data with China due to how it may use it

The government controls most media sources

It is difficult to draw any positives from China's privacy rights. Even if they are mentioned in law, the reality is often very different.

Russia

Closely following China is Russia, with its poor score coming from:

Its regulatory body, the Federal Service for Supervision of Communications, Information Technologies and Mass Media (Roskomnadzor), is incredibly active but often in cases of censorship rather than privacy

It is in the process of creating an eGovernment framework which will allow for inter-agency data sharing but will also grant the general public access to government-held information

Companies are often required to hand over data to the government with the most recent example being Tinder. If they fail to comply, they are blocked

Started to build its own "sovereign internet" with fears that this will remove its need for the world wide web and will create a highly-censored internet that's used for surveillance

Facial recognition is already being used in cameras to track down debtors

Despite clear safeguards to protect against communication interception (i.e. a court order is required in most cases), there were 540,000 approved interceptions in 2012, showing little limitation on what is and isn't granted

Intercept capability need not be offered by service providers as the System of Operative-Search Measures (SORM) enables the Federal Security Service (FSB) to eavesdrop on communications via a direct line from internet service providers. In most cases, operators and ISPs aren't even aware this is happening

Telecom service providers have to store call and message records for a minimum of six months

All transactions over the value of 600,000 roubles have to be reported to the relevant agency

AI technology is being implemented at Russia's borders to collect data

Member of Interpol and various tax agreements that involve the sharing of data

Laws against "fake news" were recently passed but many believe this is just a bid to aid censorship. Furthermore, independent media outlets are being squeezed out or "brought under control" and TV channels are known for showing propaganda, highlighting some of the reasons why Russia is ranked 149th in the world in the World Press Freedom Index

Again, it's hard to find anything constructive within Russia's "privacy policies." On the same day that the European Court of Human Rights (ECHR) ruled against Russia, Russia introduced a new law that allows it to overrule decisions made by the ECHR. And although Russia has fined Facebook because it failed to comply with its local data privacy law (which requires all foreign and domestic companies that are processing, storing, or accumulating data of Russian citizens to store this data on a server within Russia), it is questionable as to how much this relates to privacy and how much this relates to control over data.

We have marked Russia relatively well for workplace monitoring because there are safeguards in place and Russia should, in theory, apply the case of Barbulescu v. Romania (employees should always be notified of monitoring) because it's a member of the ECHR. However, as noted above, there are no guarantees this will happen.

India

A number of concerning aspects of India's laws and regulations threaten citizens' privacy, including:

Its Data Protection Bill is yet to take effect and there isn't a data protection authority in place, meaning privacy protections are weak at present

The Aadhaar Identification Scheme gives citizens a unique ID number and is also home to the largest biometric database, which contains 1.23 billion people

This database also contains information such as purchases, bank accounts, and insurance

Trying to get WhatsApp to make messages traceable by adding a digital fingerprint to every message sent

CCTV isn't regulated and any privacy laws relating to it are very vague and open to interpretation

10 government agencies have recently been given the authorization to decrypt, monitor, and intercept data on any computer (but this must be approved by the Home Secretary)

Should service providers fail to offer intercept capabilities, they could face prison for up to seven years

Looking to install hi-tech border surveillance at certain borders

Frequently shares information with the US and has multiple Mutual Legal Assistance Treaties with different countries

Ranks 140th in the world for the Press Freedom Index with 6 journalists (at least) being killed in 2018

What is clear is that the laws and courts of India are starting to protect data privacy. For example, the courts changed the law so private companies did not have the right to request ID numbers, and government agencies' access to the Aadhaar database has been recently withdrawn. Covert surveillance will also be banned when the new data protection law comes into power. However, with surveillance tactics and biometrics already going incredibly far, it's questionable as to how much a law will change things.

Thailand

National ID card with fingerprints

Biometrics are heavily used and are a requirement for many day-to-day things. For example, a biometric check must be performed to buy a SIM card

CCTV is widely used and accepted in Thailand. But a new law does require a data owner to be informed that they're being monitored

Although the Special Case Investigation Act states a chief judge must grant permission for communication interception to occur, a military coup in 2014 enabled the military to intercept any messages under Martial Law

The Computer Crimes Act allows officers of the Ministry of Digital Economy and Society (MDES) to request documents and computer data from service providers. This is all done without a warrant. With a warrant, they are able to request much more information

Thai police have a technology that can gain access to chat room messages, emails, and text messages - but this should be conducted under a court order

Fingerprints are collected when people enter the country

Part of numerous international data-sharing agreements

New laws and the Junta do impose restrictions on the freedom of speech in Thailand, with many believing that the new cybersecurity law will be used by the government to silence critics

Thailand recently implemented the Personal Data Protection Act (PDPA) on May 28 2019. It is hoped this will create Thailand's very first consolidated data protection act but people are being given a one-year grace period to adjust to these new laws. Workplace monitoring and data retention policies should improve. A recent development (which happened post-study) also means Thai cafes are being forced to create a log of customers' browsing data for 90 days - at least. The government has suggested that this is to help identify users who are violating Thai law and are creating "fake news."

Malaysia

Calls for a more in-depth privacy law that covers all matters. At present, there is only the Personal Data Protection Act 2010 (PDPA) which protects the personal data of a data subject

However, the courts have been quite proactive in enforcing this law, and the data protection agency frequently inspects businesses and offers recommendations on their data practices

A national ID card (MyKad) is compulsory from the age of 12 and contains biometrics (thumbprints). It also stores bank details, certain health information, can be used to make purchases, and stores data for up to 20 years (the card's only valid for 10, though)

For children up to the age of 12, MyKid carries parents' religion details, birth data, health information, and education data

Face recognition technology is also on the rise with Grab Malaysia teaming up with the Ministry of Transport to improve driver safety and provide safeguards against crimes

Few laws surrounding the use of face recognition technology

Data sharing does require written consent in most cases, but the government does have a platform (MyGDX) which facilitates intergovernmental agency data sharing

CCTV is prevalent in Malaysia and there are few safeguards in place. However, a "CCTV Guide" that is yet to come into law will enforce a few more protections, e.g. notifying people of CCTV monitoring

Several large data breaches involve financial and medical details

Founder of the ASEAN Treaty on Mutual Legal Assistance in Criminal Matters

The introduction of the data protection law in 2010 did make some improvements to Malaysia's data privacy - but, as technology advances and times change, these need updating to better protect all types of data, including biometrics.

Bottom 5 EU countries

1. Italy - 2.7 - Some Safeguards/Weakened Protection

2. Hungary - 2.7 - Some Safeguards/Weakened Protection

3. Slovenia - 2.7 - Some Safeguards/Weakened Protection

4. Germany - 2.8 - Some Safeguards/Weakened Protection

5. Spain - 2.9 - Some Safeguards/Weakened Protection

Italy

Italy fails to uphold privacy protections in a number of areas. This includes:

An ID card that contains biometrics

Extensive use of biometrics, including facial recognition in airports, is causing concern among citizens

Data-sharing agreements as part of the Treaty of Prüm and Schengen Agreement

Extensive CCTV use (including with facial recognition)

Lengthy data retention periods (six years for internet and telephone traffic data)

It lacks freedom of the press

The Italian regulatory body in charge of enforcing the GDPR, Garante, hasn't been very active. This could be due to there being a lack of data breaches or it may indicate a lack of implementation. However, Italy has made efforts to prohibit workplace monitoring.

Hungary

Hasn't always protected its people's right to privacy, even ruling that police officers were not entitled to their right to privacy because their roles as agents of public power outweighed it

ID card contains owner's fingerprint

Employers are also allowed to use biometrics in certain situations, i.e. to prevent unauthorized access to information

Building a facial recognition database from the identification photos of its citizens and tourists

Government agencies are able to take data from telecommunication companies without a warrant

Part of the Treaty of Prüm and the Schengen Agreement

GDPR is helping to make some improvements in Hungary, for example, helping enforce people's rights when it comes to CCTV footage and protecting data as a whole through fines given by The Hungarian National Authority for Data Protection and Freedom of Information.

Slovenia

With the highest record of human rights violations per capita in Europe, Slovenia is constantly being monitored to see if and how it is improving the protection of its citizens. We've found:

Although the GDPR should, in theory, improve things in Slovenia, there are reports to suggest that it isn't being properly implemented in many EU countries. And with Slovenia's lack of laws, this is likely the case. Equally, the draft bill proposed by Slovenia has been criticized by many as "overstepping" the boundaries put in place by GDPR.

Germany

Despite privacy enforcement in a number of areas (sensitive data and the implementation of the data protection law, Bundesdatenschutzgesetz) and the active role of its Data Protection Conference, Germany is failing its citizens in a number of areas. These include:

Its extensive use of biometrics, including in a national ID card

Being a founding member of the Treaty of Prüm and Schengen Agreement

Its allowance of CCTV cameras with facial recognition

Controversial data retention directives

Lack of privacy protection for journalists

Heavy censorship of social media posts through "hate speech" laws

Spain

Again, Spain's data protection authority, the Agencia Española de Protección de Datos (AEPD), has been effective in implementing the GDPR laws, fining La Liga €250,000 for privacy violations. However, the privacy rights of its citizens are significantly reduced due to:

Top 5 non-EU countries

Norway

As the only non-EU country to be found to have "adequate safeguards," Norway is succeeding at:

Biometrics do let Norway down. It is looking to introduce them into ID cards in 2020 and law enforcement does have access to biometric data. Norway is also a member of the Schengen Agreement and parts of the Treaty of Prüm.

South Africa

South Africa is in the process of introducing an Information Regulator and the Protection of Personal Information Act (POPIA) which will help to further enforce privacy rights. But as these aren't yet fully in place, it does create some gray areas. Biometrics are also on the rise and the newly introduced South African ID card contains fingerprints.

Switzerland

Despite Switzerland being a "tax haven" for many years, it is now clamping down on this by sharing tax details with other countries. It is also part of the Schengen Agreement and has signed an agreement with member states of the Prüm Decision so they can share data. Switzerland also allows workplace monitoring without permission, so long as an employee is informed.

Argentina

Argentina's mandatory ID card does contain biometrics. Biometrics are widely implemented and accepted on the whole. The Data Protection Act is in need of an update, particularly when it comes to data retention laws (there are no clear guidelines as such, leaving it very open to interpretation). Argentina also actively shares personal information with other countries

Canada

Canada's regulatory body, the Office of the Privacy Commissioner of Canada, is criticized as being lackluster in its authority but there are talks to improve its powers so it can levy fines. Biometrics are on the rise with fingerprints now being a requirement for people applying for certain kinds of visas. Data sharing is also an issue due to the agreements Canada has with other nations (approximately 17). And Canada recently ruled against a journalist, requiring him to disclose a source.

Top 5 EU countries

Due to the recent implementation of the GDPR laws, there isn't much difference in the scores of EU countries. What tends to differentiate them is their data-sharing agreements with other countries, their freedom of speech, their use of biometrics, and other country-specific rules and regulations.

1. Ireland - 3.2 - Adequate Safeguards

2. France - 3.1 - Adequate Safeguards

3. Portugal - 3.1 - Adequate Safeguards

4. Denmark - 3.1 - Adequate Safeguards

5. Malta - 3.0 - Some Safeguards/Weakened Protection

Ireland

Ireland tops the list when it comes to privacy and surveillance protection due to:

The categories that let Ireland down were its weakened protections for sensitive data (i.e. several data breaches in the medical industry), the subsidization of CCTV, and a threat to press freedom due to the concentrated ownership of media outlets.

France

Just behind Ireland is France, which scored reasonably well because of:

Its data regulator, the Commission Nationale de l'Informatique et des Libertés (CNIL), successfully enforcing GDPR laws by fining Google €50 million because it didn't get proper consent from users for its ad personalization (it used pre-ticked boxes)

The CNIL being proactive before the implementation of GDPR, fining Uber €400,000 for its data breach

No biometrics required for the mandatory French ID card

The CNIL actively debating and preventing the use of biometrics in other areas, e.g. in the workplace

The requirement for a Data Protection Impact Assessment (DIPA) before surveillance is installed for large-scale public monitoring

However, France is a member of the Treaty of Prüm and the Schengen Agreement. There is active data sharing occurring within France, too. For example, suspicious transactions must be reported as part of anti-money laundering laws. Communication data is retained for one year.

Portugal

Portugal also makes the top three due to:

Portugal was one of the last European countries to implement the GDPR law (one year and three months after it was enforced). It is also a member of the Treaty of Prüm but, due to its lacking DNA database (less than 0.1% of its citizens are on it), it doesn't share much information and only shares data with select countries. That said, it is also a member of the Schengen Agreement and data is regularly shared internally, too, i.e. for anti-money laundering laws.

Denmark

Denmark receives its score of "adequate safeguards" because of:

Yet, there is a worrying acceptance of both biometrics and CCTV cameras within Denmark which may allow privacy controls to slip. The sharing of data, both within Denmark and with other countries (part of the Schengen Agreement) also lowers the score, as do the queries over data retention (location data from mobile phones).

Malta

Although Malta does make the top 5, it does also fall into a lower category than the other four EU countries. It received a "some safeguards but weakened protections" score due to:

Malta is, however, a member of the Treaty of Prüm and the Schengen Agreement and does have weakened protections when it comes to communication interception and sensitive data. It also has a systemic failure to uphold safeguards when it comes to democratic issues like freedom of the press (the majority of media sources are owned by politicians).

Where do the US and UK rank?

United States

The US is seventh from bottom in our non-EU rankings. This is due to:

Biometrics growing in use with the Biometric Exit Program predicted to be in place within four years, processing 97% of people who leave the US

Courts rule in different ways when it comes to biometrics. There are several debates over topics like whether the police could ask you to unlock your phone with your fingerprint

Building a database of biometric information containing digital facial images and the 10 fingerprints of over 200 million people who have tried to enter, have entered, or have exited the US

Private companies are able to set their own guidelines when it comes to processing personal data

There are no federal laws regarding the use of CCTV, meaning usage varies drastically on a state-by-state basis. For example, some states include a safeguard that prohibits CCTV use in areas where people expect privacy, e.g. changing rooms, but some do not

Only two states require companies to inform their employees of workplace monitoring

Numerous data breaches across all sectors

Part of numerous international data-sharing agreements

Recently created the Clarifying Lawful Overseas Use of Data (CLOUD) Act which allows law enforcement of cooperating countries to request data directly from service providers rather than having to go through the government

Data protection in the US is governed by multiple sectoral laws and laws also differ by state. This can cause some confusion and inconsistency, and it can leave some huge gaps in certain areas/states. Nevertheless, some of the governing bodies actively pursue data privacy. For example, the Federal Trade Commission (FTC) recently fined Facebook $5 billion for privacy violations.

United Kingdom

At present, the UK is governed by GDPR laws but has also implemented its own Data Protection Act, which will remain in place post-Brexit.

Despite some of these safeguards, the UK is moving toward more biometrics, more CCTV, and could involve itself in further international treaties post-Brexit. It has recently joined the Prüm DNA framework, which allows law enforcement agencies to share DNA profiles and fingerprints, giving member states access to the UK's database of over 5 million people. Workplace monitoring is also accepted (if employers can justify their reasons for doing so) and there have been cases of employees being fired for things they have said on social media.

How things look overall

If we merged the rankings of both the EU and non-EU countries, the leaderboard wouldn't look much different to the EU one. All that would change is Norway taking second place, pushing Malta out of the top five.

What is interesting about these top five (the only ones to receive an "adequate" score) is that they are all governed by the GDPR laws. So, while there is still huge room for improvement in all countries, the GDPR laws do seem to be encouraging them to move in the right direction.

Constitutional Protection

Statutory Protection

Privacy Enforcement

Identity Cards and Biometrics

Data-sharing

Visual Surveillance

Communication Interception

Workplace Monitoring

Government Access to Data

Communication Data Retention

Surveillance of Medical, Financial and Movement

Border and Trans-Border Issues

Leadership

Democratic Safeguards

Methodology

Each country was given a score per category based on a number of criteria (listed below). Then, to gain an overall score, we added up the total of these scores before dividing by 14 (the number of categories in total).
Constitutional Protection Statutory Protection Privacy Enforcement

Is there a regulatory body, e.g. a Data Protection Authority, that has the power to investigate privacy cases?

Are they proactive at doing this? Are there any cases that have been taken through the courts/legal systems?

Identity Cards and Biometrics Data Sharing Visual Surveillance Communication Interception Workplace Monitoring Government Access to Data Communications Data Retention

Do telecommunication providers have to retain data for a specific period of time? If so, how long?

Are there considerations for different types of data and how the retention periods may differ?

Surveillance of Movement, Finances, and Medical Data Border Issues

Does the country have biometrics at its borders?

Is the country cooperating with other countries when it comes to law enforcement and surveillance?

Leadership

Is the government part of any anti-privacy treaties? E.g., Five Eyes or the Treaty of Prüm?

What data is the government sharing with other countries?

Democratic Safeguards

Is there freedom of speech in the country?

Are there protections in place for journalists?

Sources

For each country's report, sources, and scores, please see this spreadsheet: https://docs.google.com/spreadsheets/d/1uPCfyzwT2b47oX0kcYg3kn3V4H6IWUikp4jMOVUWmJA/edit?usp=sharing

# data[].attributes.attachment_link.title
Data Privacy Laws & Government Surveillance by Country

# data[].attributes.attachment_link.description
Comparitech has assessed privacy protection and the state of surveillance in 47 countries to see where governments are failing to protect privacy and/or are creating surveillance states. To do this we looked at a number of categories, from the use of biometrics and CCTV to data sharing and retention laws.

# data[].attributes.body
Ten reasons why privacy is important to people.  Everyone has the right to their privacy and should know when someone or something is invading that privacy. Learn different reasons why privacy is important by reading this article.

# data[].attributes.attachment_link.readable_text
The right to privacy is a enshrined in article 12 of the Universal Declaration of Human Rights (UDHR), article 17 in the legally binding International Covenant on Civil and Political Rights (ICCPR) and in article 16 of the Convention of the Rights of the Child (CRC). Many national constitutions and human rights documents mention the right to privacy. In the US Constitution, it isn't explicitly stated, but experts infer it from several amendments, including the Fourth Amendment. It outlines that people have the right "to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures." In many cases, the US Supreme Court has upheld the right to privacy. There are also many privacy laws designed to protect personal data from the government and corporations. The rise of the internet has complicated privacy laws and many believe that the law has fallen behind. In the United States, there is no central federal privacy law. The right to privacy also intersects with many other human rights such as freedom of expression, the right to seek, receive and impart information and freedom of association and assembly.

Why do privacy rights matter so much? Here are 10 reasons why:

#1. Privacy rights prevent the government from spying on people (without cause)

The government has a responsibility to protect its citizens, but it often crosses the line when it comes to surveillance. In 2013, Edward Snowden blew the whistle on the NSA's spying program, bringing the issue of privacy into the spotlight. The balancing act between national security, freedom of expression, surveillance and privacy rights is tricky. It's generally agreed upon that if the government doesn't have a reason to spy on someone, it shouldn't. No one wants to live in a Big Brother state.

#2. Privacy rights keep groups from using personal data for their own goals

When in the wrong hands, personal information can be wielded as a powerful tool. The Cambridge Analytica scandal is a perfect example of this. This organization used data taken from Facebook (without user consent) to influence voters with political ads. Privacy rights mean that groups can't take your data without your knowledge/consent and use it for their own goals. In a time where technology companies like Facebook, Amazon, Google, and others collect and store personal information, privacy rights preventing them from using the data how they please are very important.

#3. Privacy rights help ensure those who steal or misuse data are held accountable

When privacy is recognized as a basic human right, there are consequences for those who disrespect it. While there are many "soft" examples of personal data use, like targeted ads, established privacy rights draw a line in the sand. Without these restrictions, corporations and governments are more likely to steal and misuse data without consequence. Privacy laws are necessary for the protection of privacy rights.

#4. Privacy rights help maintain social boundaries

Everyone has things they don't want certain people to know. Having the right to establish boundaries is important for healthy relationships and careers. In the past, putting up boundaries simply meant choosing to not talk about specific topics. Today, the amount of personal information kept online makes the process more complicated. Social media can reveal a lot of information we don't want certain people (or strangers) to know. Media platforms are obligated to offer security features. Having control over who knows what gives us peace of mind.

#5. Privacy rights help build trust

In all relationships, trust is essential. When it comes to the personal data given to a doctor or a bank, people need to feel confident that the information is safe. Respecting privacy rights builds up that confidence. Privacy rights also give a person confidence that if the other party breaks that trust, there will be consequences.

#6. Privacy rights ensure we have control over our data

If it's your data, you should have control over it. Privacy rights dictate that your data can only be used in ways you agree to and that you can access any information about yourself. If you didn't have this control, you would feel helpless. It would also make you very vulnerable to more powerful forces in society. Privacy rights put you in the driver's seat of your own life.

#7. Privacy rights protect freedom of speech and thought

If privacy rights weren't established, everything you do could be monitored. That means certain thoughts and expressions could be given a negative label. You could be tracked based on your personal opinions about anything. If privacy rights didn't let you keep your work and home life separate, "thought crimes" or what you say off the clock could get you in trouble. Privacy rights protect your ability to think and say what you want without fear of an all-seeing eye.

#8. Privacy rights let you engage freely in politics

There's a reason that casting your vote is done confidentially. You are also not required to tell anyone who you voted for. Privacy rights let you follow your own opinion on politics without anyone else seeing. This is important in families with differing worldviews. It also protects you from losing your job because of your political leanings. While you can't control what people think about you because of your views, you do have the right to not share more than you're comfortable with.

#9. Privacy rights protect reputations

We've all posted something online that we regret or done something foolish. It can come back to haunt us and ruin our reputations. Privacy rights help protect us and can give us the power to get certain information removed. The EU specifically addresses this with the " right to be forgotten" law. This lets people remove private information from internet searches under some circumstances by filing a request. Revenge porn, which is a violation of privacy, is a big example of personal data that can destroy a person's reputation.

#10. Privacy rights protect your finances

Companies that store personal data should protect that information because of privacy rights. When companies fail to make security a priority, it can have devastating consequences. You can have your identity stolen, credit card numbers revealed, and so on. When you give your financial information to a specific entity, you are trusting them to respect your privacy rights.

Take a free course on privacy rights by top universities!

# data[].attributes.attachment_link.title
10 Reasons Why Privacy Rights are Important

# data[].attributes.attachment_link.description
The right to privacy is a enshrined in article 12 of the Universal Declaration of Human Rights (UDHR), article 17 in the legally binding International Covenant on Civil and Political Rights (ICCPR) and in article 16 of the Convention of the Rights of the Child (CRC).

# data[].attributes.body
North Korea is developing technology to digitally spy on its citizens, as more citizens are using mobile devices. North Korea is allowing its citizens to use mobile phones mainly as a way to gain information. North Korea takes the data from the devises and uses the information to their advantage. As well North Korea can censor anything they want from the internet and observe everything the citizens are doing. The censoring makes sure the citizens only see what the government wants them to see. North Korea is using these new devises against their own citizens even though it may seem like the government is giving back to the citizens. They can take their information and see everything they do. North Korea has mandatory software updates to mobile devices on its network that actively find and delete illegal foreign media files.North Korea’s “Red Star” computer operating system is a software that scans text documents for specific words or phrases deemed unfavorable by the regime and deletes them.

# data[].attributes.body
This poem is about data security on social media for younger people. It talks about how they view privacy and what control they have for it.

# data[].attributes.headline
Artists explore the drawn-out privacy policies of your favorite websites and social networks—as well as what the consequences may be.

# data[].attributes.subject
Artists explore the drawn-out privacy policies of your favorite websites and social networks—as well as what the consequences may be.

# data[].attributes.body
This article speaks on the simplicity of social media and how surveillance reacts with it. Six pieces of artwork examine how different platforms ensure their way of security. The most appealing one would probably be the 'fbFaces' which shows a wall of every public profile on facebook and how everyone is shown as just one pixel.

# data[].attributes.attachment_link.title
6 Art Projects Prying The Lid Off Online Privacy

# data[].attributes.attachment_link.description
Artists explore the drawn-out privacy policies of your favorite websites and social networks—as well as what the consequences may be.

# data[].attributes.body
This poem is about how the internet is impacting people through social media and invading privacy.

# data[].attributes.attachment_link.readable_text
You take my name,
You take my card
but soon you'll own me.
Though respect my privacy
I'll tell you a little something
Which may seem like a lot
Though unfortunately it's not.

My information is everywhere
Internet, notes and documents
But either way I'm still screwed.
As I'm like an open book
That you can just type my name,
I'll be caught on your hook.

With social media growing so fast
Filling the Internet like dash
My life, I live is losing privacy
For what secrets have now been told.
Privacy is no longer private
But respect my privacy
For which that will be appreciated,
As social media... forever holds.

Topic(s) of this poem: privacy

# data[].attributes.attachment_link.description
You take my name, You take my card but soon you'll own me. Though respect my privacy I'll tell you a little something Which may seem like a lot Though unfortunately it's not. My information is everywhere Internet, notes and documents But either way I'm still screwed.

# data[].attributes.headline
Ted Talk: How advancements in technology are creating problems with the privacy of users

# data[].attributes.subject
Ted Talk: How advancements in technology are creating problems with the privacy of users

# data[].attributes.body
This Ted Talk is about how privacy is becoming a challenge with the internet as there have been many advancements. We don't think of our privacy every day and how our actions impact this. Some things can be like shredding bank statements before you throw them away or covering your keypad when putting codes in. One example of technology looking into what you do is with Google. Instead of Google charing you a monthly fee or charging you for every search, there are advertisements. These advertisements are able to collect data on how you interact with them. This makes it so that Google makes money without charging people who use it. Mark Zuckerberg said that he does not consider privacy to be a social norm. This means that privacy on the internet can never be assumed as our devices become connected to more and more things. Every time you use the internet you leave behind a digital trail of data. One example is that Uber tracks their passengers even after their trip is over.

# data[].attributes.attachment_link.title
Alasdair Allan: The coming privacy crisis on the Internet of Things

# data[].attributes.attachment_link.description
Mark Zuckerberg may have declared that privacy is no longer a social norm, but Alasdair Allan believes a backlash is coming. In this talk, he explores how the internet has changed the concept of ownership and explains why the Internet of Things - combined with the EU's General Data Protection Regulation - could soon determine whether we have any privacy at all.

# data[].attributes.attachment_caption
Phishing and Hacking -- A CTI Song Parody.

# data[].attributes.headline
Phishing and Hacking -- A CTI Song Parody

# data[].attributes.subject
Phishing and Hacking -- A CTI Song Parody

# data[].attributes.body
Data loss is undoubtably a serious problem for not only businesses but everyday computer users whether they are playing games or doing work, their data can also become compromised. This video shows that this is very possible for anyone, anywhere, and it gives people the incentive to protect their which can be having a hard drive, or backing up all important work to an iCloud or secure file.

# data[].attributes.attachment_link.title
Phishing and Hacking -- A CTI Song Parody

# data[].attributes.attachment_caption
The Digital Vigilantes Who Hack Back - This is a art piece and an article 

# data[].attributes.body
This is an art piece that shows how hackers can easily reach into the technology you are using. There is an article underneath that depicts a story of a business being hacked and they needed to get revenge. Their original plan was to hack the hackers back, but obviously that's illegal. They took the smarter route and trapped the hackers who breached their companies data. A heart-wrenching statistic shows that 90% of American companies get hacked.

# data[].attributes.attachment_link.description
American companies that fall victim to data breaches want to retaliate against the culprits. But can they do so without breaking the law?

# data[].attributes.headline
Ted Talk: Your Phone Company is Watching 

# data[].attributes.subject
Ted Talk: Your Phone Company is Watching 

# data[].attributes.body
This Ted Talk is about how your phone company collects information without you even knowing. Mobile phones allow you do do so many different things. Everyone today has mobile phones. Every internet company or phone company must store information about each user. Companies store this information and people protest against it. Man in the video gets all the information that his phone company has collected from his. 35,830 lines of information on a cd that they gave him. It was a file of 6 months of his life. On this cd you can see where he walks and where he travels to as well as when he is using his phone during this time. This happens to everyone who owns a phone or uses the internet in any way.

# data[].attributes.attachment_link.title
Malte Spitz: Your phone company is watching

# data[].attributes.attachment_link.description
What kind of data is your cell phone company collecting? Malte Spitz wasn't too worried when he asked his operator in Germany to share information stored about him. Multiple unanswered requests and a lawsuit later, Spitz received 35,830 lines of code -- a detailed, nearly minute-by-minute account of half a year of his life.