Is Google tracking me?

This is a good question. Google have just realised a new service called Latitude. Latitude lets smartphone and laptop users share their location with friends and allows those friends to share their locations in return. Although not pinpoint accurate, Latitude can display your general location based on information from GPS satellites and cell towers. Latitude works on both mobile devices and personal computers.

From a privacy perspective, it is an opt-in service (i.e. you have to ask to get it, it is not provided automatically without asking your permission first) which is good. It also gives a choice of levels of visibility. However the privacy concerns are similar to that as with the increasing practice of tracking mobile phones today. Apart from the obvious risks to privacy, e.g. everyone getting to know where everyone is, that is if you care, and Google holding more information than what they have promised, finally providing yet another vector for surveillance by government authorities. There is the concern for the privacy and safety of children. 

It risks in fact becoming quite a fashionable thing to do amongst young people, and in just 5 years we may even forget how life was without this service. Children today will be sharing their location information with their friends, and if they are unable to determine the difference between online friends and real friends the risk of physical sexual exploitation is higher than what it is today.

Children are easily befriended online. If they agree to share their location information with someone that has befriended them, and has in fact intentions to groom them. The online grooming process (this is described in the book “Virtual Shadows”) is speeded up significantly. It will give the predator the child’s movement data to help them to build up a profile of the victim.  Latitude will in effect become yet another tool in the existing toolkit used by online predators to groom any individual child ready for sexual abuse.

Following is a clip from google explaining the privacy features of the service.

[youtube=http://www.youtube.com/watch?v=u9H4xaTspaQ&hl=en&fs=1]

DPA amendments

There is some strange legislation changes happening in the U.K. It is an amendment to the Data Protection Act 1998.

Taken from computer weekly: “…an ‘information sharing order’ to share personal information. This seems to circumvent whatever purpose the information was gathered for; for example, child protection data could be shared with police, benefits officials or your local school. (……) Furthermore, the sharing process can include publishing that personal information.”

Just to give an example:
Part 8 — Data Protection Act 1998 (c. 29)
50A Power to enable information sharing
(1) Subject to the following provisions of this Part, a designated authority may by order (an “information-sharing order”) enable any person to share information which consists of or includes personal data.

(3) For the purposes of this Part a person shares information if the person–
(a) discloses the information by transmission, dissemination or otherwise making it available, or
(b) consults or uses the information for a purpose other than the purpose for which the information was obtained.

This means “mission-creep” is acknowledged as ok… not good. This provides an opening for the further sharing of any personal information that we have originally shared for a specific purpose, including our DNA data. After this change, there will be another amendment in a few years time, and bingo before we know it the DNA data of our children is stored and used for all sorts of unethical practices. Although of course, today we see them as so, in 20 years time, they will probably be accepted as normal.
Read more from computer weekly.

Thanks to ARCH blog for highlighting.

30th International Conference of Data Protection and Privacy Commissioners

Data Protection Authorities from every continent gathered in Strasbourg last week to participate in the 30th International Conference of Data Protection and Privacy Commissioners (www.privacyconference2008.org). The theme of this year’s conference was “protecting privacy in a borderless world”. One conclusion from this meeting was to endorse a resolution brought forward by the Office of the Privacy Commissioner of Canada that called for an international effort to protect the privacy of children online.

Child pornography blocked in the U.S.

Wow, how about this for a development in the U.S. “ALBANY — Verizon, Sprint and Time Warner Cable have agreed to block access to Internet bulletin boards and Web sites nationwide that disseminate child pornography. ” Read more here.

The move is part of a groundbreaking agreement with the New York attorney general, Andrew M. Cuomo, that will be formally announced on Tuesday as a significant step by leading companies to curtail access to child pornography. Many in the industry have previously resisted similar efforts, saying they could not be responsible for content online, given the decentralized and largely unmonitored nature of the Internet.