What can we do to protect ourselves?
There are many misconceptions about how much privacy ISPs (internet service providers) really lend to their subscribers: that ISPs can use and sell Social Security Numbers, or that they can just sell our browsing history and other information to marketers.
ISPs do collect data about their users and need to be more transparent about how they use it. However, Social Security Numbers and other personally-identifiable information (PII) is subject to additional legal safeguards under the law that limits what private businesses can do with this information.
How Much Privacy Do ISPs Really Allow Us?
One of the primary privacy measures that users have between themselves and ISPs is a secure-socket-layer (SSL) certificate that protects your activity from the ISP. When the browser connects to a website through SSL, that certificate encrypts the connection between your device and that server which cloaks the precise details of what your ISP sees. The browser can tell when you are visiting that site, but not your activities there.
However, SSL encryption is not enough in the highly connected modern era. ISPs are not the only receptors of information as devices also send browsing activity to device vendors, even if it’s not a 1:1 replica of the content. With so much information available online, there’s no way for the billions of users to have full control over their protection and the flow of information to and from all these different servers and websites. Remote computers and servers may be sending your information to places that really shouldn’t have it and you would have no idea it was happening.
This has caused concerns for people who value their privacy and don’t want their information being used without consent. In an age where not having online access to essential aspects of day-to-day life like banking, research for school, managing your healthcare, and numerous other functions, simply avoiding Internet usage is not really an option.
Are VPNs a Cure-All?
Virtual private networks (VPNs) have been touted as a panacea for protecting your online activity. However, just like with ISPs you need to review the privacy policies of each VPN provider. They may actually offer even fewer safeguards, such as “free” VPN services that serve as a means for the companies to make money off your browsing data to be sold.
Other Safeguards You Can Take to Protect Your Privacy
There are many precautions that you can adopt to protect your privacy right now. Many people think that an SSL certificate is protection enough, along with using a private network that isn’t in a public place on an unsecured device. While pushing vendors and ISPs to be more transparent is a slow-moving process, here’s what you can do today to stay secure today.
Regardless of what happens with proposed FCC laws that could allow ISPs to sell your browser activity at will, you need to take steps on your own to protect your privacy online. Relying on government regulations alone when there are people within trying to fight against that privacy for profit will not be enough, and should only be relied on for simple basic measures like ensuring that your PII like Social Security and bank account numbers are not tampered with.
Take precautions when it comes to your email, browsing, and account security with the right tools and best practices. A simple password change or a few minutes spent updating your privacy settings in your most commonly-used browsers and apps can be all it takes to prevent an attack or massive fire sale of your browsing activity.