The good and bad side of apps: can we trust them to protect our privacy?

No. 51: Bringing you the news that matters in video privacy and security

A note from our Editor

Hi all,

Apps can be convenient tools in our personal lives and often can be useful in helping public health and safety efforts. However, as they collect large amounts of personal data, we need to be sure that they are properly regulated, with the correct privacy and security safeguards in place.

A recent study by the non-profit, Internet Safety Labs, found that 96% of apps used in US K-12 schools share information with third parties without the consent of users, parents, or even schools. This report highlights the potential dangers of exposing children’s data to some of these educational apps and the risk of sensitive student data being used to fuel targeted advertisements without consent. 

new AI-generator app, Lensa, has become incredibly popular among social media consumers who have been using it to generate avatar-like images of themselves. However, privacy professionals have urged caution as it uses third-party data analytics, identifiers, and registered user information - all of which are collected when users post their own images.

There are, however, attempts to try and tackle these app-based privacy issues with policy changes. Apple has recently put forward new security measures to help protect users’ data. Similarly, the UK has released a voluntary code of practice to help improve security and privacy for apps. The government looks to work with app developers and operators over the coming months to ensure adoption. 

As always, please send any feedback or topics of interest you would like to be covered. 

Seena


News

Study finds 96% of apps used in US schools share children’s information with third parties without consent

A recent study probing into school mobile apps has found 96% of apps used in schools share the personal information of children without the consent of the users or the schools. The data was collated from over 600 schools across the entire US, finding that attempts of schools to digitise and improve their tech has compromised students' personal data.

Cyberscoop: Most apps used in US classrooms share students' personal data with advertisers, researchers find

The Journal: Report: 96% of School Apps Send Kids’ Personal Data to Potentially Harmful Third Parties

 

Meta bans “surveillance for hire” companies from their platforms

Meta has banned 7 companies from Facebook over the past year involved in “surveillance-for-hire” activities that were making it easier to track online users, including journalists and activists. In a recent report, Meta said it has taken “global spyware operations” in countries like China, the US, and India, which targeted people in almost 200 countries. 

Forbes: Surveillance-For-Hire Industry Continues To Thrive, Says Meta

Cyberscoop: Meta takes down surveillance-for-hire firms, calls for government action against the industry

 

Vancouver votes to move forward with wide-scale adoption of police body-worn cameras by 2025

Vancouver City Council has approved new plans to investigate the use of body-worn cameras among the police. This move comes as part of the aim to improve accountability and transparency in law enforcement and public safety.

Global News: Vancouver councillors vote to move ahead on body-worn cameras for police

CBC News: Vancouver police approved to wear body cameras by 2025

 

New AI-generated selfie app sweeps the internet but there are privacy concerns

A new app, Lensa, which produces AI-generated avatar selfies has recently been popular amongst users across social media but poses privacy concerns. Privacy professionals have warned that it is almost impossible to know what users’ photos are done after they have been uploaded, as well as drawing attention to the biometric data being collected and stored from this app.

Wired: What You Should Know Before Using the Lensa AI App

ABC News: AI photography is taking over social media. Why are some concerned about privacy

 

Fortnite game owners settle $520 million in FTC settlement over privacy breach

The maker of the popular Fortnite video game, Epic Games, is set to pay a $520 million settlement with the US Federal Trade Commission over allegations they tricked children into making in-game purchases and violated privacy laws. These allegations include claims that the company used invasive default settings and interfaces which tricked its users. 

NPR: Major password manager LastPass suffered a breach — again

Tech Crunch: LastPass says it was breached — again


AI Snippet of the Week

Man fakes an entire month of his life using realistic AI-generated photos

A writer and director in New York has proved how effective AI can be in creating a new reality. Kyle Vorbach successfully used a Stable Diffusion AI generator to create realistic photos of himself, successfully creating a completely fake life for a month on social media. 

My Modern Met: Man Fakes His Entire Life for a Month With Convincing AI-Generated Photos

Peta Pixel: Man Fakes an Entire Month of His Life Using AI Generated Photos


Policy Updates

UK government publish new guidance measures to protect user privacy and safety on apps

The Department for Digital, Culture, Media and Sport has recently released a new voluntary code of practice to improve the privacy and security requirements of apps and app stores. The move aims to improve transparency around privacy for app users, improve software vulnerabilities, and make users feel safer.

Gov.uk: UK finalises landmark data decision with South Korea to help unlock millions in economic growth

CSO: ​​UK finalizes first independent post-Brexit data transfer deal with South Korea


To subscribe to our fortnightly newsletter, please click here

Thanks for reading, if you have any suggestions for topics or content that you want to see covered in future please drop a note to: info@secureredact.co.uk

Previous
Previous

Content moderation is high on the legislative agenda, but it needs more

Next
Next

Safety and security vs. "intrusive monitoring": the two sides of the surveillance coin