Episode 16: Digital Detox - how to cleanse yourself on Data Protection Day

On the day after Data Protection Day (or Privacy Day, depending on whether you are tomato or tomato) we take a look at privacy enhancing technologies - how to control, restrict and eliminate your personal data footprint (if that’s what you want to do). This podcast will be invaluable for privacy professionals that want to know what PETs are available and for consumers that would like to have greater control of their digital profiles. GDPR Now! Is brought to you by This Is DPO. www.thisisdpo.co.uk. Guest/s Abigail Dubiniecki Data Protection Specialist My Inhouse Lawyer https://www.linkedin.com/in/abigaild/ Host Mark Sherwood-Edwards info@thisisdpo.co.uk Materials Competition and Markets Authority (UK competition regulator) report on digital advertising https://www.gov.uk/government/news/cma-lifts-the-lid-on-digital-giants Links to PETs (Privacy Enhancing Tech) and resources mentioned in the podcast (and more!) Disclaimer – not endorsing any PET in particular, just sharing info. Want a pretty version or more explanation? Check out my LinkedIn profile for a Slideshare of a presentation and handy Infographic – available next week. Let’s help build this list. Which PETs are you using or curious to try? If they’re not here, let Abigail know via contact details in the show notes so I can update my list. Inform yourself, update software, adjust privacy settings, use 2FA! Privacy Analyzer (https://privacy.net/analyzer): Analyses your browser to reveal what can be learned about you and recommend actions you can take DuckDuckGo Device Privacy Tips https://spreadprivacy.com/tag/device-privacy-tips/ ‘Learn’ tab in the DisconnectMe Privacy Pro VPN (iOS only) – ‘learn’ materials available without paying. Just download the app and click!: https://apps.apple.com/us/app/disconnect-privacy-pro-entire/id1057771839?ls=1 Consumer Reports articles & videos with quick-fixes in bite-sized pieces: https://www.consumerreports.org/privacy/linkedin-privacy-settings/ www.consumerreports.org/video/view/electronics/news/6050416388001/protecting-your-online-privacy/ Terms of Service, Didn’t Read (TOSDR https://tosdr.org/): one-stop shop for digested Ts & Cs of most popular online providers, including score cards. Brilliant browser add-on offers automatic assessment of pages you access. Addresses privacy notices & terms e.g. cancellation, etc. Ghostery (www.ghostery.com) lets you block ads and trackers, watch the watchers, and speed up your browser with a suite of products, some of which are free, others reasonably privacy. A new product – Ghostery Midnight (www.ghostery.com/midnight) – claims to protect your entire device while giving granular preference management at the app-by app level. Sounds like having your own personal privacy watchdog on your device. Extension is free!! But some of the other products are paid. Baycloud (https://baycloud.com) was one of the early champions of privtech, starting in the DNT space. They offer B2C and B2B resources. Baycloud Bouncer let reveals who’s tracking you and gives you a handy dashboard to adjust your preferences (https://baycloud.com/bouncer). You can also pre-scan websites you’d like to visit from the comfort of Baycloud’s site. Try before you buy (so to speak, with your data I mean). Free!! Have I been pwned?(https://haveibeenpwned.com) will help you check whether your account or credentials has been compromised based on research into the (sigh) multitudinous data breaches. Free!! DuckDuckGo privacy report card for websites (https://duckduckgo.com/app): instantly evaluates and remediates websites you visit to give you a before and after score. Browser add-on for various browser types on desktop but only available for iOS on mobile. Free!! Deseat.Me (www.deseat.me) : Helps you clean up your online presence by instantly getting a list of all your accounts, allowing you to sort through and delete them / unsubscribe. Personal Data.io: A self-named “integrated toolbox addressing surveillance capitalism”. This advocacy group goes beyond providing tools for e.g. filing DSARs, there is a forum (https://forum.personaldata.io) and a number of chat groups for trouble-shooting, contributing, advocacy and knowledge-exchange) You can share your experience or tap into people’s expertise, commiserate or find journalists to raise awareness about your experience or discoveries. This is the group that helped journalist Judith Duportail, who was researching dating apps, learn that Tinder had over 800 (disturbing) pages of data on her. Worth a read here: https://www.theguardian.com/technology/2017/sep/26/tinder-personal-data-dating-app-messages-hacked-sold My Permissions(https://mypermissions.com): app that does a privacy scan (Privacy Cleaner) of your social media / collaboration apps to help you identify who can access your data. It identifies your current permissions and let’s you quickly and efficiently manage them all from one place. A small fee required to manage permissions, but there is a free tier. Princeton IoT Inspector (https://iot-inspector.princeton.edu/) let’s you watch your smart devices back. Automatically discovers IoT devices and analyzes their network traffic to identify security and privacy issues. Currently only available on MacOS High Sierra or Mojave (waitlist for Windows, Linus and MacOS Catalina). PiHole for Raspberry Pi (https://pi-hole.net): Protect your entire network from ads and targeting. Block in-app and SmartTV ads. Free!! but powered by donations. You need a supported OS and hardware (Raspberry Pi). Strong Passwords: NCSC ‘3 random words’ guidance: https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/use-a-strong-and-separate-password-for-email. Test password strength on Comparitech: https://www.comparitech.com/privacy-security-tools/password-strength-test/. Generate secure, unique passwords with https://1password.com. VPN, tracking-blockers, ad-blockers, including some in-app / whole-of-device options and free web extensions: Bitnet Defender (https://www.bitdefender.com/toolbox) Guardian (https://apps.apple.com/us/app/guardian-firewall-vpn/id1363796315) Disconnect.Me (https://disconnect.me) ProtonVPN (https://protonvpn.com) Adblock Fast (https://adblockfast.com) HTTPS Everywhere (https://www.eff.org/https-everywhere) Privacy Badger (https://www.eff.org/privacybadger) Privacy Possum (https://download.cnet.com/Privacy-Possum/3000-11745_4-77899656.html) Who Targets Me browser extension re: political microtargeting (https://whotargets.me/en/) Private Search and Browsers: DuckDuckGo! (https://duckduckgo.com) StartPage.com (www.startpage.com) Qwant & QwantJR (https://www.qwant.com) Ecosia (https://ecosia.org) Firefox (https://www.mozilla.org/en-GB/firefox/new/?redirect_source=firefox-com) Brave (https://brave.com) Cliqz (https://cliqz.com/en) Use their brilliant add-ons like Facebook Container, universal cookie consent. Private chat, calls, collab: jitsimeet (https://meet.jit.si) Signal (www.signal.org) Wire (https://app.wire.com/auth) NextCloud Talk (https://nextcloud.com/talk). Secure email: Proton Mail (https://protonmail.com) NextCloud (https://nextcloud.com/athome/) Lock down social media (or switch to something better): Data Detox story: https://onezero.medium.com/find-out-what-google-and-facebook-know-about-you-31d0fa6d7b61 CitizenLab security planner: https://securityplanner.org/#/ Surveillance Self Defense social media tool: https://ssd.eff.org/en/module/protecting-yourself-social-networks; Private social networks: Minds (https://www.minds.com/) MeWe (https://mewe.com) Mastodon (https://mastodon.social/about) Diaspora (https://diasporafoundation.org/) Popjam (for kids): https://web.popjam.com/home. Exercise your rights, control your online identity: TapMyData (https://tapmydata.com/) Deseat.me (https://www.deseat.me/) Just Delete Me (https://justdeleteme.xyz) Data Rights Finder (https://www.datarightsfinder.org) Personaldata.io forum (https://forum.personaldata.io/) Yoti (https://www.yoti.com) SecureKey’s Verified.Me (Canada only for now: https://verified.me/) Take your data back: Personal Data Accounts: Hub of All Things (Dataswift): https://www.hubofallthings.com/ Digi.Me (https://digi.me) MesInfos (http://mesinfos.fing.org/english/) inrupt (https://inrupt.com/) Go forth and make good privacy choices: Exit Google Maps and use TomTom instead (https://www.tomtom.com/en_gb/) Read & support creators and journalists in ad-free, targeting free spaces like Correspondent (https://thecorrespondent.com/) & Medium (https://medium.com/) Listen to (or create your) Podcasts on Radio Public (https://radiopublic.com/) Pickatale reading & audio app for kids age 0 - 10 (https://pickatale.co.uk/) OneZeroMe Financial Passport (https://onezero-me.com/) Get value from it (or share the love!): Brave Rewards (https://brave.com/brave-rewards/); My Good-Loop ethical adtech (https://my.good-loop.com/#my); My Offrz (https://myoffrz.com/en/fuer-nutzer/); HATDeX (https://hatdex.dataswift.io/). Give back Privtech folks & advocates work hard & use their incredible expertise to make a difference. Help fund them. Pay for their tools. Support their cause. Contribute your own sweat & skills. Spread the word. Most BigTech apps who’ve lost their way were starving startups at some point. Help privtech scale!! It means a better future for all of us. Help Open Rights Group make more privacy notices machine-readable: https://generator.projectsbyif.com/; Participate in workgroups like Forum.PersonalData.io; Donate money, time or skills to TOSDR, PiHole, and others asking for help. Still want more? Learn here: The Ultimate Guide to Online Privacy – 150+ Ninja Tips: https://fried.com/privacy ; Privacy Tools.io : https://www.privacytools.io/ Reset the Net Privacy Pack: https://pack.resetthenet.org/; Data Ethics.eu: Digital Self Defense tab; news; CitizenLab’s Net Alert keeps you updated on online threats & offers solutions. Security Planner is very handy. NCSC Top Tips for Staying Secure Online; Data Rights Finder (Open Rights Group). Special Guest: Abigail Dubiniecki.

On the day after Data Protection Day (or Privacy Day, depending on whether you are tomato or tomato) we take a look at privacy enhancing technologies - how to control, restrict and eliminate your personal data footprint (if that’s what you want to do). This podcast will be invaluable for privacy professionals that want to know what PETs are available and for consumers that would like to have greater control of their digital profiles.

GDPR Now! Is brought to you by This Is DPO.
www.thisisdpo.co.uk.

Guest/s
Abigail Dubiniecki
Data Protection Specialist
My Inhouse Lawyer
https://www.linkedin.com/in/abigaild/

Host
Mark Sherwood-Edwards
info@thisisdpo.co.uk

Materials
Competition and Markets Authority (UK competition regulator) report on digital advertising
https://www.gov.uk/government/news/cma-lifts-the-lid-on-digital-giants

Links to PETs
(Privacy Enhancing Tech) and resources mentioned in the podcast (and more!)
Disclaimer – not endorsing any PET in particular, just sharing info.

Want a pretty version or more explanation? Check out my LinkedIn profile for a Slideshare of a presentation and handy Infographic – available next week. Let’s help build this list.

Which PETs are you using or curious to try? If they’re not here, let Abigail know via contact details in the show notes so I can update my list.

Inform yourself, update software, adjust privacy settings, use 2FA!

Privacy Analyzer
(https://privacy.net/analyzer): Analyses your browser to reveal what can be learned about you and recommend actions you can take

DuckDuckGo Device Privacy Tips
https://spreadprivacy.com/tag/device-privacy-tips/
‘Learn’ tab in the DisconnectMe Privacy Pro VPN (iOS only) – ‘learn’ materials available without paying. Just download the app and click!: https://apps.apple.com/us/app/disconnect-privacy-pro-entire/id1057771839?ls=1

Consumer Reports articles & videos with quick-fixes in bite-sized pieces: https://www.consumerreports.org/privacy/linkedin-privacy-settings/
www.consumerreports.org/video/view/electronics/news/6050416388001/protecting-your-online-privacy/

Terms of Service, Didn’t Read (TOSDR https://tosdr.org/): one-stop shop for digested Ts & Cs of most popular online providers, including score cards. Brilliant browser add-on offers automatic assessment of pages you access. Addresses privacy notices & terms e.g. cancellation, etc.

Ghostery
(www.ghostery.com) lets you block ads and trackers, watch the watchers, and speed up your browser with a suite of products, some of which are free, others reasonably privacy. A new product – Ghostery Midnight (www.ghostery.com/midnight) – claims to protect your entire device while giving granular preference management at the app-by app level. Sounds like having your own personal privacy watchdog on your device. Extension is free!! But some of the other products are paid.

Baycloud (https://baycloud.com) was one of the early champions of privtech, starting in the DNT space. They offer B2C and B2B resources. Baycloud Bouncer let reveals who’s tracking you and gives you a handy dashboard to adjust your preferences (https://baycloud.com/bouncer). You can also pre-scan websites you’d like to visit from the comfort of Baycloud’s site. Try before you buy (so to speak, with your data I mean). Free!!

Have I been pwned?(https://haveibeenpwned.com) will help you check whether your account or credentials has been compromised based on research into the (sigh) multitudinous data breaches. Free!!

DuckDuckGo privacy report card for websites (https://duckduckgo.com/app): instantly evaluates and remediates websites you visit to give you a before and after score. Browser add-on for various browser types on desktop but only available for iOS on mobile. Free!!

Deseat.Me (www.deseat.me) : Helps you clean up your online presence by instantly getting a list of all your accounts, allowing you to sort through and delete them / unsubscribe.

Personal Data.io: A self-named “integrated toolbox addressing surveillance capitalism”. This advocacy group goes beyond providing tools for e.g. filing DSARs, there is a forum (https://forum.personaldata.io) and a number of chat groups for trouble-shooting, contributing, advocacy and knowledge-exchange) You can share your experience or tap into people’s expertise, commiserate or find journalists to raise awareness about your experience or discoveries. This is the group that helped journalist Judith Duportail, who was researching dating apps, learn that Tinder had over 800 (disturbing) pages of data on her. Worth a read here: https://www.theguardian.com/technology/2017/sep/26/tinder-personal-data-dating-app-messages-hacked-sold

My Permissions(https://mypermissions.com): app that does a privacy scan (Privacy Cleaner) of your social media / collaboration apps to help you identify who can access your data. It identifies your current permissions and let’s you quickly and efficiently manage them all from one place. A small fee required to manage permissions, but there is a free tier.

Princeton IoT Inspector (https://iot-inspector.princeton.edu/) let’s you watch your smart devices back. Automatically discovers IoT devices and analyzes their network traffic to identify security and privacy issues. Currently only available on MacOS High Sierra or Mojave (waitlist for Windows, Linus and MacOS Catalina).

PiHole for Raspberry Pi (https://pi-hole.net): Protect your entire network from ads and targeting. Block in-app and SmartTV ads. Free!! but powered by donations. You need a supported OS and hardware (Raspberry Pi).

Strong Passwords: NCSC ‘3 random words’ guidance:

https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/use-a-strong-and-separate-password-for-email.
Test password strength on Comparitech: https://www.comparitech.com/privacy-security-tools/password-strength-test/. Generate secure, unique passwords with https://1password.com.

VPN, tracking-blockers, ad-blockers, including some in-app / whole-of-device options and free web extensions:

Bitnet Defender (https://www.bitdefender.com/toolbox)

Guardian (https://apps.apple.com/us/app/guardian-firewall-vpn/id1363796315)
Disconnect.Me (https://disconnect.me)
ProtonVPN (https://protonvpn.com)
Adblock Fast (https://adblockfast.com)
HTTPS Everywhere (https://www.eff.org/https-everywhere)
Privacy Badger (https://www.eff.org/privacybadger)
Privacy Possum (https://download.cnet.com/Privacy-Possum/3000-11745_4-77899656.html)
Who Targets Me browser extension re: political microtargeting (https://whotargets.me/en/)

Private Search and Browsers:

DuckDuckGo! (https://duckduckgo.com)
StartPage.com (www.startpage.com)
Qwant & QwantJR (https://www.qwant.com)
Ecosia (https://ecosia.org)
Firefox (https://www.mozilla.org/en-GB/firefox/new/?redirect_source=firefox-com)
Brave (https://brave.com)
Cliqz (https://cliqz.com/en)
Use their brilliant add-ons like Facebook Container, universal cookie consent.

Private chat, calls, collab:
jitsimeet (https://meet.jit.si)
Signal (www.signal.org)

Wire (https://app.wire.com/auth)
NextCloud Talk (https://nextcloud.com/talk).

Secure email:

Proton Mail (https://protonmail.com)
NextCloud (https://nextcloud.com/athome/)

Lock down social media (or switch to something better):
Data Detox story: https://onezero.medium.com/find-out-what-google-and-facebook-know-about-you-31d0fa6d7b61
CitizenLab security planner: https://securityplanner.org/#/
Surveillance Self Defense social media tool: https://ssd.eff.org/en/module/protecting-yourself-social-networks;

Private social networks:
Minds (https://www.minds.com/)
MeWe (https://mewe.com)
Mastodon (https://mastodon.social/about)
Diaspora (https://diasporafoundation.org/)
Popjam (for kids): https://web.popjam.com/home.

Exercise your rights, control your online identity:
TapMyData (https://tapmydata.com/)
Deseat.me (https://www.deseat.me/)
Just Delete Me (https://justdeleteme.xyz)
Data Rights Finder (https://www.datarightsfinder.org)
Personaldata.io forum (https://forum.personaldata.io/)
Yoti (https://www.yoti.com)
SecureKey’s Verified.Me (Canada only for now: https://verified.me/)

Take your data back: Personal Data Accounts:
Hub of All Things (Dataswift): https://www.hubofallthings.com/
Digi.Me (https://digi.me)
MesInfos (http://mesinfos.fing.org/english/)
inrupt (https://inrupt.com/)

Go forth and make good privacy choices: Exit Google Maps and use TomTom instead (https://www.tomtom.com/en_gb/)
Read & support creators and journalists in ad-free, targeting free spaces like Correspondent (https://thecorrespondent.com/) & Medium (https://medium.com/)
Listen to (or create your) Podcasts on Radio Public (https://radiopublic.com/)
Pickatale reading & audio app for kids age 0 - 10 (https://pickatale.co.uk/)
OneZeroMe Financial Passport (https://onezero-me.com/)

Get value from it (or share the love!):
Brave Rewards (https://brave.com/brave-rewards/); My Good-Loop ethical adtech (https://my.good-loop.com/#my); My Offrz (https://myoffrz.com/en/fuer-nutzer/); HATDeX (https://hatdex.dataswift.io/).

Give back
Privtech folks & advocates work hard & use their incredible expertise to make a difference. Help fund them. Pay for their tools. Support their cause. Contribute your own sweat & skills. Spread the word. Most BigTech apps who’ve lost their way were starving startups at some point. Help privtech scale!! It means a better future for all of us. Help Open Rights Group make more privacy notices machine-readable: https://generator.projectsbyif.com/; Participate in workgroups like Forum.PersonalData.io; Donate money, time or skills to TOSDR, PiHole, and others asking for help.

Still want more? Learn here: The Ultimate Guide to Online Privacy – 150+ Ninja Tips: https://fried.com/privacy ; Privacy Tools.io : https://www.privacytools.io/ Reset the Net Privacy Pack: https://pack.resetthenet.org/; Data Ethics.eu: Digital Self Defense tab; news; CitizenLab’s Net Alert keeps you updated on online threats & offers solutions. Security Planner is very handy. NCSC Top Tips for Staying Secure Online; Data Rights Finder (Open Rights Group).

Special Guest: Abigail Dubiniecki.

Episode 16: Digital Detox - how to cleanse yourself on Data Protection Day
Broadcast by