Tag: privacy

  • ProtonMail Scores Big Win Against Swiss Data Retention Laws

    ProtonMail Scores Big Win Against Swiss Data Retention Laws

    ProtonMail has scored a major legal victory against the Swiss government’s data retention laws, significantly increasing user privacy.

    ProtonMail is one of the most secure and private email platforms in existence. The company is used by individuals around the world who value their privacy and want encrypted communication.

    The company is based in Switzerland due to the country’s strong privacy laws, but that hasn’t stopped the government from forcing the company to turn over a user’s IP address to the authorities.

    ProtonMail launched a legal challenge in May, in an effort to get email providers reclassified so they’re not subject to the same requirements as telecommunications firms.

    As part of these efforts, in May 2020, we launched a legal challenge against the Swiss government over what we believe to be an improper attempt to use telecommunications laws to undermine privacy. In a ruling this week, the Swiss Federal Administrative Court confirmed that email services cannot be considered telecommunications providers, and consequently are not subject to the data retention requirements imposed on telecommunications providers.

    The victory follows another legal challenge in April by Threema.

    This comes on the heels of a Swiss Supreme Court ruling in April 2021 in a case brought by Threema (2C_544/2020) that ruled that instant messaging services are also not telecommunications providers. Together, these two rulings are a victory for privacy in Switzerland as many Swiss companies are now exempted from handing over certain user information in response to Swiss legal orders.

    The legal victories are good news for ProtonMail users and privacy advocates, and will likely result in Switzerland attracting even more privacy-focused companies.

  • ProtonMail Logs User’s IP at Behest of Authorities

    ProtonMail Logs User’s IP at Behest of Authorities

    ProtonMail is having a PR crisis as a result the revelation that the company logged a user’s IP address at the behest of authorities.

    ProtonMail has built its reputation as one of the most private and secure email services, providing end-to-end encryption. Despite that, French authorities wanted information on an activist being monitored.

    According to TechCrunch, ProtonMail did not initially cooperate with the French authorities. In response, the French enlisted the aid of authorities in Switzerland, where ProtonMail is based. While the company doesn’t log IP addresses by default, it will do so if local authorities require it to.

    With Swiss authorities aiding their French counterparts, ProtonMail was compelled to log the user’s IP and turn it over. In doing so, the company showed the privacy it provides has its limits — that limit being whatever the Swiss government says it is.

  • Google’s Privacy Labels Will Be Required By April 2022

    Google’s Privacy Labels Will Be Required By April 2022

    Android developers will be required to provide a privacy label for their apps by April 2022, bringing a new level of transparency to the platform.

    Apple rocked the mobile development world when it required app developers to disclose what information they gathered and tracked from their users. Meanwhile, Android users have had no comparable feature, leaving them in the dark about what and how much of their data is being collected by apps.

    Google is taking steps to address that, signaling in May it intended to bring its own version of privacy labels to the Play Store. According to CNET, those labels will be required by April 2022.

    The announcement is good news for Android users who are interested in protecting their privacy.

  • Apple Risks Angering Users With Push Notifications About Emmys

    Apple Risks Angering Users With Push Notifications About Emmys

    Apple has risked drawing the ire of some users with unsolicited push notifications regarding the Emmys.

    Ted Lasso, an Apple TV+ exclusive, has racked up an impressive number of Emmy nominations. Not surprisingly, Apple wants people to know and issued a press release for that purpose.

    As AppleInsider points out, however, the company followed that up a day later with push notifications alerting users. The notifications included invitations “to see why Ted Lasso and more Apple Originals are up for awards.”

    Given Apple’s focus on privacy and protecting user rights, it’s not a good look for the company to send unsolicited, and potentially unwanted, push notifications — even for the purpose of celebrating a major accomplishment.

  • BEUC File Complaint Against WhatsApp Over Privacy Update

    BEUC File Complaint Against WhatsApp Over Privacy Update

    The European Consumer Organisation (BEUC) has filed a complaint over WhatsApp’s privacy update.

    Facebook and WhatsApp sparked a furor over a proposed privacy update, in which Facebook would share data from WhatsApp with other Facebook-owned companies. Initially, Facebook said users would be locked out of their accounts if they did not accept the new terms by a certain date.

    The backlash was swift and severe, with many WhatsApp users (including yours truly) closing their accounts. Signal and Telegram, in particular, saw huge increases in their user bases as a result of Facebook’s plans. Facebook postponed the cutoff deadline in response, before finally saying they would not close accounts that did not accept the new terms.

    Despite Facebook walking back its position, the BEUC has filed a complaint, according to SFGate. The BEUC has accused WhatsApp of bombarding users with prompts to accept the new terms, and says the service has not been clear or transparent regarding the terms of the new agreement.

    “WhatsApp has been bombarding users for months with aggressive and persistent pop-up messages to force them to accept its new terms of use and privacy policy,” BEUC Director General Monique Goyens said. “They’ve been telling users that their access to their app will be cut off if they do not accept the new terms. Yet consumers don’t know what they’re actually accepting.”

    The complaint is the latest setback Facebook has faced, and is further demonstration of the increasing importance of privacy to consumers.

  • TikTok Releases 2021 Q1 Transparency Report

    TikTok Releases 2021 Q1 Transparency Report

    TikTok has released its first transparency report of the year, detailing the measures it has taken to protect users.

    TikTok has been under ongoing scrutiny for its privacy practices, as well as for not doing enough to protect the privacy of minors. Not surprisingly, its 2021 Q1 transparency report addresses a number of issues the company will likely use against its critics.

    The company says that during the first quarter of 2021, it removed 11,149,514 accounts for violating its Community Guidelines or Terms of Service. Of those, 7,263,952 were suspected of belonging to someone under the age of 13. For users in that demographic, TikTok has TikTok for Younger Users, with curated content and additional safeguards in place.

    TikTok also says it removed 86.1% of videos featuring adult nudity and sexual activity proactively, before they could be reported. A total of 89.8% were removed within 24 hours of being reported.

    Similarly, when it came to videos that featured harassment and bullying the company says “66.2% were removed before they were reported to us, and 83.8% were removed within 24 hours of being posted.”

    It’s clear TikTok is working to address the criticism it has faced. It remains to be seen if such efforts will win over any critics.

  • Mozilla Launches Rally, a Privacy-First Data Sharing Platform

    Mozilla Launches Rally, a Privacy-First Data Sharing Platform

    Mozilla has launched Rally, a privacy-first data sharing platform, to tackle the growing challenges related to privacy and user data.

    Mozilla has a long history of championing privacy. It’s web browser, Firefox, is one of the most privacy-focused, secure browsers available. The company also offers a VPN service that has garnered positive reviews for its approach to privacy and security.

    The company is adding Rally to its portfolio of software and services in an effort to help people take back control over their own data.

    Your data is valuable. But for too long, online services have pilfered, swapped, and exploited your data without your awareness. Privacy violations and filter bubbles are all consequences of a surveillance data economy. But what if, instead of companies taking your data without giving you a say, you could select who gets access to your data and put it to work for public good?

    Rather than advertisers benefiting from user data, Rally will give users the option to donate their data to help crowdfund research projects.

    Computer scientists, social scientists and other researchers will be able to launch groundbreaking studies about the web and invite you to participate. A core focus of the initiative is enabling unprecedented studies that hold major online services accountable.

    Mozilla is working with Professor Jonathan Mayer’s research group at Princeton University to help launch the Rally research initiative.

    “Online services constantly experiment on users, to maximize engagement and profit,” says Mayer. “But for too long, academic researchers have been stymied when trying to experiment on online services. Rally flips the script and enables a new ecosystem of technology policy research.”

    Rally sounds like an interesting concept and will hopefully help more users take control over their data.

  • TikTok in the Crosshairs of Dutch Consumer Group Over Data Harvesting

    TikTok in the Crosshairs of Dutch Consumer Group Over Data Harvesting

    TikTok is once again in hot water for its data practices, as a Dutch consumer group is launching a $1.8 billion claim against the company.

    TikTok is no stranger to controversy regarding its privacy and data practices. The company has faced accusations of exploiting child privacy, discrimination, lawsuits, bans — from corporations and the military — and criticism for being “fundamentally parasitic.”

    The Consumentenbond, along with the foundation Take Back Your Privacy, is bringing the claim against TikTok, according to ABC News.

    “The conduct of TikTok is pure exploitation,” Consumentenbond director Sandra Molenaar said in a statement. “The company earns hundreds of millions per year on the backs of children. And that while privacy law prescribes that children should receive additional protection.”

    TikTok has received a reprieve in the US, as the Biden administration has halted the previous administration’s attempts to ban TikTok. The company has drawn increased scrutiny from the EU, however, and this latest claim could have major repercussions.

  • Colorado Lawmakers Pass Colorado Privacy Act

    Colorado Lawmakers Pass Colorado Privacy Act

    Colorado has become the third state to pass sweeping privacy legislations, as lawmakers passed the Colorado Privacy Act.

    Privacy has become an increasingly important element to consumers and regulators alike, with Colorado the latest state to pass legislation protecting consumer privacy. The state joins California and Virginia as the only states in the country to take such measures.

    The new bill stipulates that “consumers have the right to opt out of the processing of their personal data; access, correct, or delete the data; or obtain a portable copy of the data.”

    While good for Colorado residents concerned with their privacy, the Colorado Privacy Act illustrates the challenges companies are beginning to face. The EU has the GDPR, while California, Virginia and Colorado will all have their own privacy legislation.

    As individual states continue to adopt their own legislation, it will become increasingly complicated for companies to ensure compliance with the patchwork of applicable requirements. It’s little wonder that, in early 2020, then Salesforce co-CEO Keith Block called on the US to pass comprehensive privacy legislation.

    In the meantime, the Colorado bill is headed to the governor’s office to be signed into law.

  • TikTok Updates Terms to Collect Biometric Data

    TikTok Updates Terms to Collect Biometric Data

    TikTok is at it again, threatening user privacy as it updates its terms to collect biometric data.

    TikTok is one of the most controversial social media platforms, in large part due to its repeated, flagrant disregard for privacy. The company has been sued over accusations it collected and uploaded videos to servers in China without consent, without the user even having an account. The company has been accused of repeatedly violating child privacy, censoring individuals it didn’t consider beautiful enough to be showcased and has been warned by the EU over its handling of data. Even the CEO of Reddit called the platform “fundamentally parasitic.”

    The latest controversy involves a change to the company’s privacy policy, allowing it to collect biometric data.

    We may collect biometric identifiers and biometric information as defined under US laws, such as faceprints and voiceprints, from your User Content. Where required by law, we will seek any required permissions from you prior to any such collection.

    In many ways, the change is not particularly surprising. The company recently settled a lawsuit in Illinois for $92 million over its handling of biometric data. Notably, the company never admitted to the accusations in the aforementioned lawsuit. The change to the company’s privacy policy, however, gives it the ability to do what it was accused of doing, while committing to following applicable laws.

    All of which does little to change the validity of Reddit’s CEO that the platform is “fundamentally parasitic,” and not one anybody concerned about privacy should have on their phone.