After an interesting introductory discussion on data privacy and security, and the conflicting issues surrounding data in the latter part of our class last Thursday, we the class were posed with the question, "Which is more valuable?" Most of us, though confused as our professor often taunted us to see how sure we were on our answers, told that data is more valuable compared to any material property we own, especially money. Some shared their personal reasons on why data is more valuable. But to put it all in one, as I have observed, their assertion implies that data is always the more valuable thing as this is where anything could start to thrive online, whether the intention is of good morality or in the worst insanity.

I did not take the chance of sharing it in the class, but I had a different thought in mind. For me, it was not data that is more valuable. I could argue that the most valuable entity among all things regarding data privacy and data security is you. Your identity itself, you yourself. Consider it this way. If you don't exist, you would not worry in anyway about your data being compromised. This is surely understandably simple, but I would like to tell that you are more important than your data. Simply because you are the source.

Furthermore, I believe this subject is not just circling within the online world but most importantly, and at first, in the actual reality. Even just a single strand of your hair or the shards of your nails after a nail cut possess a bunch of data. Your DNA, which describes your identity as a human being, presents data structures. So data is everywhere, especially where people exists. And it would be of your advantage to give yourself more care and caution in regards of handling and sharing your data.

Your data and especially you yourself are important and shall be considered as more than valuable, if possible, compared to any material thing you possess. Taking this in yourself, you would be expected to do something practical to keep yourself safe. Knowing your data and how it can be used when shared with others is a good start. You would be at your own risk when you don't take heed of this. For in this age of information, ignorance is your choice; to know is your responsibility.

In my last post in this blog series, I have briefly shared the significance of your data and you, especially in this era of digital advancement. I have also shared some of my personal insights after attending our first class in this subject.

At the time of writing this, the entirety of all lectures and discussions on data privacy and security, at least in this subject, is already over. Thanks to our professor, whose name must not be mentioned here, I have learned a lot on the subject, but honestly I’m having a hard time narrowing down what topic I should write about for my next blog posts.

My experience in the class was fun and engaging, especially when a student comes late or comes without wearing his complete uniform, haha. Thanks guys for making a glad atmosphere at the start of the class! Sometimes I had moments when I almost fell asleep totally in the class though. My apology to our professor for the behavior. I did not mean any disrespect or dishonor. No one should sleep in the class while the professor is having his discussion!

Anyway, as I browsed through my notes on the subject, a thought came to me on how this blog series should flow. It may disappoint you, but as you notice in the title, you may imply that this is not part of the major content of this blog. However, this will greatly help me to stay on track with what kind of takes I would share on data privacy and security. Besides, this may also help you get a picture of what you might learn from this blog. Actually, I should have done this in my first blog, haha. But who knows what may come to their mind in the future? This blog still runs on the same subject though.

Too much of this seemingly nonsense talk, the following are the topics I will share in this blog. This may seem like a spoiler, but it’s not. Just let me have the chance to claim it is not, hehe. You may consider this as a teaser blog though.

Generally, one of my next blogs will talk about how you can protect your data without hiring any data privacy expert (because, why not?). I mean, anyone can actually learn (and should really learn) how they can protect themselves [there’s a bunch of useful sources on the internet!] from data privacy issues — identity theft, scam through phishing, or social media being hacked — by simply learning what data they have and how organizations may process them. I would also try to give a point, or more points, if I am not satisfied with one, on how vulnerable your data can become that eventually increases the chance of danger on you, especially within the sphere of social media.

Furthermore, I would also like to share insights concerning legal matters on data privacy and security. Not everyone knows about this but national laws actually include a comprehensive structure on how organizations must treat data, what measures to consider for data security management, and most especially how they should treat the people involved in the process when handling their personal information. These posts will share, for better understanding, what rights everyone has when it comes to their data and how they are used within and among organizations.

I think, that’s it for now. I hope this section gives you a picture of what you may come across through my blogs. It would also be a pleasure to me if you share your own thoughts, insights as you read through here. Be it negative or not, soft or violent reaction, I don’t mind. Just leave them as comments in the comment section for each blog. It would also be a good start in friendship when you let me know who you are, but you may still remain anonymous if that’s what you prefer. Besides, I’m more concerned about Your Data and You.

All I knew was that we have a Data Privacy Act of 2012, but that’s all I knew. Only this short title and only because it is widely used in our university when organizations collect even a bit of our personal data. By the start of the discussion, I didn't even know its complete republic act identification and its definition.

So today, in this blog I would like to explore, through the National Privacy Commission (NPC), which was formed by the said RA, what acts the Philippine government does about Your Data and You.

Privy to Privacy History

Let me start this exploration with a bit of its history (because everything starts from its own origin, right?).

Privacy was actually an uncommon term, an alien even to the US constitutional laws. Although they have rules concerning a person’s right to some sort of privacy just like the right to be let alone (it’s the first meaning for “the right to privacy”), the right of a person’s security, and the right to remain silent, it was not used in their Supreme Court until the 1960s.

The development of the term and its elements in the US Supreme Court was also just a derivative and is greatly based on some previous work done by Louis Brandeis and Samuel Warren in the late 19th century. From there, the notion of privacy evolved, but there wasn’t an absolute definition to describe the term due to its inconceivable extent or limit. Even now, privacy has a variety of connotations across different regions and cultures around the world. Various communities describe it differently from one another depending on the context of how it is being used.

If I continue to talk about how it became the way it is now, my privacy would be compromised for too much sharing of my private thoughts on this matter. So let’s move on to how privacy was then and now in the Philippines.

Privacy in the Philippines

Privacy in the Philippines was also quite unknown to most folks, then. I mean, how we perceive it now is not the same as how people might have known it before. To demonstrate it, one need only observe some of the small gatherings in the barrio or in the purok, where the Marites, the resident gossipers, eagerly exchanged the latest stories and affairs of known neighbors, unconcerned about the implications of sharing personal details in such a public setting. It was a time when boundaries between public and private spheres were blurred, and the concept of personal data protection was not yet a priority for many.

In today’s Philippine society, awareness on privacy might have increased and the concept for better understanding have been improved, however, the influence of the Marites still becomes widespread and dangerous. Who else there could not agree more that even though a republic act on data privacy is in effect in the country more than a decade now, these resident gossipers seem to be undaunted and unstoppable in their dare to spread destructive rumors and often not factual information, which ruin identity of their victims.

Funny, yes, but that is not my point here. Haha.

NPC: The National Privacy Commission

Let’s jump on the National Privacy Commission (NPC) of the Philippines.

NPC was created for the purpose of the republic act — RA 10173 or the Data Privacy Act of 2012, which in Section 7 of the act states that the commission shall monitor and ensure compliance of the country with international standards set for data protection, in addition to its function to administer and implement the provisions of the said Act. In layman’s terms, the commission must make sure that the Philippines follows the same rules as other countries when it comes to protecting data.

By the virtue of the republic act, the NPC shall also fulfill its role in rule making by developing, reviewing, and also amending rules and regulations to effectively implement the Act. It also has the main role in advisory in regards to personal data protection issues. Other responsibilities of the commission include conducting initiatives to educate the public about data protection, ensuring the compliance of various organizations that use and process data, handling complaints and managing investigations, as well as the responsibility to enforce the rules and regulations of the law.

As I learned during our class lectures, one of the important roles of the National Privacy Commission is to educate the public all about data and how people can protect it. In the class, I learned about the data subjects and their rights, as well as the offices and personnel who would take responsibility in protecting and securing the data of the data subjects.

There is so much to learn about this independent body created by virtue of the Data Privacy Act that I cannot include them here in detail. But even more there is to know about your data and you.

References

• https://core.ac.uk/reader/80769180

• https://privacy.gov.ph/

As what was tackled in one of our first lectures, your data is the most valuable thing you can have in the digital world. It is what the online world runs with. Without data, the internet would not function the way it does.

Data fuels the systems and processes that power search engines, social media platforms, and e-commerce sites, shaping how users experience the online platform better. In essence, data is the lifeblood of the digital economy, driving innovation, powering decision-making, and driving business growth.

Think about how when you search for something online, the results seem to know exactly what you're looking for. That's because data from your past searches helps tailor those results to you.

It's like when your favorite store remembers your preferences and suggests items you might like – that's all based on data. And it's not just for shopping; everything from social media feeds to streaming services uses data to give you a better experience.

So, in short, data is what keeps the internet running smoothly and makes it feel personalized to you. Without it, the online world would grind to a halt, and the digital landscape as we know it would cease to exist.

However, it also faces various challenges in terms of its protection and security. One major concern is privacy – how companies collect, store, and use our personal information. There's always a risk of data breaches, where hackers break into systems and steal sensitive data like credit card numbers or passwords. Plus, with so much data being collected, there's the potential for misuse or abuse.

Governments around the world are trying to address these concerns with regulations like GDPR in Europe. In the Philippines, the regulations are stated in the RA 10173 or the Data Privacy Act of 2012, enforced by the National Privacy Commission. But it is still an ongoing challenge to balance the benefits of data with the need to protect people's privacy and security.

Your Rights in Data Usage

To address the issues that would compromise the balance in using your data while protecting and securing your identity, rules and regulations were made and they serve as our guideline on how we treat our data. Though I’m not going to detail here the rules and regulations, I would highlight only the principles from which these rules were designed to adhere. This set of concepts are termed as the Data Privacy Principles namely transparency, legitimate purpose, and proportionality.

The first thing you must consider before you share your data with other parties is transparency. It is simply defined as the giving of consent or asking for your approval upon sharing your data. This principle may also cover that you, as the data subject, shall be informed of how your data will be used, processed, and disposed. You can tell if a party asking to share your data with them gives you a notice or a consent form before they actually proceed to collect your data.

Remind yourself to be noticed first, for you have the right to be informed.

The second in line to determine when you are sharing your data with others is the purpose for collection of your data. Unless you give your data to anybody for free, you will surely ask for what purpose anybody is getting your data. The purpose must also be verified before giving your data. It surely can be a tedious task but hey, for the sake of protection and security, have time to verify sources! You can’t just believe anybody so easily. One way to verify the legitimacy of purpose for collecting your data is looking for the organization the party is doing the data collection for. You may also ask any information you think that might affect in any way your identity as a person. This is not being anxious! It's just that you don’t afford to be a victim of any crime.

Have time to verify the purpose, for you have the right to know and access the truth.

The last thing you shall also see when sharing your data is proportionality. This means that you, as the data subject, must give just enough and related information to the collecting party. And that the party collecting your data must also ask for data that are just necessary for their use. Like you don’t need to tell them everything!

Just share what is necessary, for you have the right to object.

These are just three simple things you must take into account when sharing your data with others–transparency, legitimate purpose, and proportionality. You don’t need to think a lot or you may be accused of having an anxiety attack. But I say that it would be better to look like having anxiety for safety than to look confident but already in danger.

The bottomline here is that you should be a responsible person for yourself in terms of handling your data by being informed, knowing what purpose your data will be used for, and by knowing that you don’t need to give your everything. In a simple way, this is how you can protect and secure your data and you.

Moreover, social media serves as a powerful tool for spreading awareness about social issues and promoting initiatives or programs to drive change on those issues. From fundraising for charitable causes to organizing movements by common people, social media amplifies voices and catalyzes action like never before.

However, the pervasive use of social media also brings about notable disadvantages. One prominent concern is the erosion of privacy, as users willingly share personal information that can be exploited by third parties for targeted advertising or even malicious purposes.

Wondering how your Google searches, especially on sellable items, become ads in your Facebook feed even though you did not explicitly connect your Google account to your Facebook account? This happens because businesses now, including those that run the social media platforms, implement a technique known as data mining.

Data Mining

Generally, data mining is just a process that implements a number of different algorithms to reveal patterns and useful information from large data sets. It can be used to find anomalies or extract correlations between different data sets to produce outcomes.

One interesting reason that pushed and encouraged organizations to widely implement data mining is the fast growth of big data. With enormous data across the internet, it could be hard to analyze and obtain insights from it to be used for better outcomes. But with data mining, raw data can be sorted, filtered, and classified for better analysis and understanding.

It is widely used by businesses because the results produced through data mining can be valuable inputs to learn more about customers and their behavior within the internet, sales, and profits to strategize future business plans in terms of increasing revenues, cutting costs, improving customer relationships, reducing risks and many more.

This will explain how your Google searches somehow appear in your social media feeds even though you did not opt to connect your accounts explicitly. Through data mining, your data is accessed, processed, and analyzed beneath the surface of the internet without you knowing it. And this implies a risk in your privacy.

However, you can’t stop businesses from doing the data mining thing just because you’re concerned about your data and you. I mean this technique actually is helping cyberspace become better, though with business involved. So, to keep yourself safe from the possible risks it entails on you, you should follow a few practices for caution.

Social Media Privacy Guidelines

As a responsible netizen you should know how you can protect your privacy when browsing through the internet. Here are some guidelines you can follow:

1. You don’t need to login or sign up for new accounts to search for valuable information for personal use. When searching especially for not so important things, keep yourself private by not logging in to search platforms.

   
   

2. Always read terms and conditions whenever you sign up on a website.

   
   

3. Clear cache and cookies after your browsing sessions.

   
   

4. Use incognito mode whenever possible, especially when logging in to devices you don’t own.

   
   

5. Just share what is needed. You don’t need to share every detail about you.

In general, there is actually a long list of precautions you must take into account as a netizen. However, it is hard to put them into your mind at once. But you can start with these guidelines as you begin to protect your data and you especially when using social networking sites.

References

• https://www.ibm.com/topics/data-mining

• https://www.sas.com/en_ph/insights/analytics/data-mining.html

• https://www.spiceworks.com/tech/big-data/articles/what-is-data-mining/

Protecting your data in the online world is crucial as also part of protecting your identity as a person. Many organizations now worldwide have implemented and regularly added layers of security in their systems. However, despite this ongoing attempt to protect data of individuals, there seems to be no point of end in terms of breaches on the side of cyber criminals. The more the field of cybersecurity advances, the more these criminals also parallels the field with their heinous techniques.

In this kind of environment on the internet, one must know how to protect themselves to keep them safe from these attackers.

Below is a list of guidelines you should know as a netizen for keeping yourself protected in the internet:

Make sure your system and programs are up to date

Ensure the security of your systems by keeping both your operating system and programs up to date. Running the latest versions not only enhances their performance but also strengthens their security features. Enable automatic updates to streamline this process and ensure continuous protection for your systems.

Use antivirus software

Safeguard your work from malware infiltration by employing a robust antivirus software solution. Implementing a comprehensive cybersecurity program is vital for identifying threats across various fronts and ensuring effective malware protection.

Protect your online privacy with a VPN

When utilizing your personal computer, employ a VPN to encrypt your data and shield it from unauthorized access. With a VPN, all your online activity becomes encrypted, safeguarding your privacy in real-time. However, it's important to note that while a VPN hides your online activities during usage, your browsing history may still be accessible later on your device.

To maintain confidentiality, consider combining a VPN with an incognito window. Incognito browsing immediately erases browsing history files and cookies upon closing the window, effectively concealing your online activity from anyone who may access your device.

Secure your mobile devices

Securing your phone involves several fundamental steps:

• Set a passcode that is difficult to guess to restrict unauthorized access to your device.

• Download apps and games exclusively from reputable app stores to minimize the risk of downloading malicious software.

• Avoid jailbreaking or rooting your phone, as this could provide hackers with opportunities to compromise your device's security.

• Consider installing an app that enables remote data deletion, providing peace of mind in case your phone is lost or stolen.

• Keep your phone's software up to date to patch any vulnerabilities, and exercise caution when clicking on links online, similar to how you would on a laptop or desktop.

Use strong passwords

Craft robust passwords by incorporating a blend of uppercase and lowercase letters, numbers, and symbols to heighten security. Refrain from reusing passwords across multiple accounts, as this increases vulnerability. Regularly update passwords to thwart potential breaches, and consider utilizing a Password Manager tool for added convenience and enhanced protection.

Be mindful of app permissions

An app that requests access to extensive permissions such as your camera, microphone, location services, calendar, contacts, and social media accounts could pose a significant threat to your online privacy. In addition to being mindful of app permissions, it's prudent to regularly review and delete unused data, programs, and accounts. The more programs or apps you have active, the higher the likelihood that one of them could be compromised.

Be alert to phishing scams

Phishers often mimic reputable organizations like banks or popular retailers to deceive individuals into divulging their user credentials or unwittingly downloading malware via suspicious links or attachments in email messages. To mitigate the risk of falling victim to phishing attacks:

• Refrain from clicking on attachments or links from unknown senders or from emails that appear suspicious.

• If you suspect your account's security is compromised, avoid clicking on links within the email. Instead, navigate directly to the relevant website by typing the address into the URL bar of your browser.

• Exercise caution and skepticism when interacting with unexpected or unsolicited emails, particularly those urging immediate action or containing alarming messages.

Use Two Factor Authentication where you can

Strengthen your online security by implementing two-factor authentication, which requires a second form of ID verification in addition to passwords. This could include receiving an SMS code on your phone, using fingerprint recognition, or utilizing a security dongle or fob via USB.

Avoid oversharing your screen

Exercise caution when sharing your screen during online meetings. Avoid leaving any windows open that contain sensitive or confidential information that you do not intend to share. Accidentally sharing such content can compromise privacy and confidentiality. Similarly, be mindful of your webcam usage, as it may inadvertently expose the privacy of family members or others in the background. Take proactive steps to ensure that only intended content is shared, minimizing the risk of unintentional disclosure.

Be careful what you share on social media

Refrain from oversharing on social media to minimize the risk of cybercriminals piecing together personal information about you. To bolster your online privacy:

• Limit the disclosure of your movements, including upcoming travel plans, as this signals to others that you will be away from home. Instead, consider sharing vacation pictures after your return to avoid broadcasting your absence to potential intruders.

• Refrain from divulging sensitive information like your date of birth or workplace in public bio sections.

• Avoid sharing personal details such as your home address or phone number in any public forum.

• Disable location data settings on your social media posts to prevent inadvertently sharing your whereabouts.

• Be cautious of engaging in fun quizzes on social media, as the answers to these questions could potentially be used as security questions by hackers.

• Exercise skepticism towards giveaways and contests on social media, as some may be scams designed to collect sensitive data or spread malware. Avoid sharing such posts to protect yourself and others from potential harm.

Be careful with your computer when you are in public

When engaging in online activities remotely, the allure of accessing free public Wi-Fi with your laptop can be strong. However, establishments offering complimentary Wi-Fi, such as local coffee shops, can inadvertently expose you to fraudulent activities. Cybercriminals often exploit these environments by creating counterfeit networks that appear genuine but are actually designed for malicious purposes. To safeguard your internet privacy while using public Wi-Fi, it's advisable to utilize a VPN (Virtual Private Network) and adhere to recommended safety precautions.

In conclusion, as we navigate the ever-expanding digital landscape, prioritizing the online security and privacy of your data and you is paramount. The recent cyber threats faced by organizations like the Department of Science and Technology in the Philippines serve as stark reminders of the importance of safeguarding sensitive information and devices from malicious actors.

By adhering to cybersecurity best practices individuals can mitigate the risk of falling victim to cyberattacks. 

As we continue to rely on digital technologies for various aspects of our daily lives, staying informed and proactive in safeguarding our online security remains crucial. Through collective efforts and adherence to cybersecurity guidelines, we can navigate the digital landscape with confidence and resilience, protecting your data and you from emerging threats.

References

• https://www.philstar.com/headlines/2024/04/29/2351211/hackers-breach-dost-tech-research-website

• https://www.kaspersky.com/resource-center/preemptive-safety/how-to-protect-personal-online-privacy