Cyber Security Newsletter - January 2023: Data Privacy Week

January 22-28 is Data Privacy Week! Recognized in many countries, Data Privacy Week aims to promote online privacy and best practices for protecting personal data. 

Although we've previously shared many security best practices with you (e.g., strong passwords, multi-factor authentication, keeping your devices up-to-date and free of malware, etc), it's important to note that many online services are not "private by design".  

Here are 6 privacy-specific tips from our Cybersecurity team that you can use to better protect your data: 

Tip #1: Cut down on Cookies

Cookies are files stored on your computer by a website – they are used to collect data like your shopping preferences, search history, device details, and your physical location. Tracking information gathered from cookies is sometimes resold to other companies or individuals, some of who may not behave ethically with this information. 

Most reputable websites will prompt you to "Accept All Cookies" by default or will allow you to choose more detailed options when visiting their website for the first time. Take a few seconds to customize your cookie options and clear your web browser's cookies regularly. Most browsers also have settings that allow you to limit the cookies that your browser accepts. 

Tip #2: Only provide necessary information

Social media apps, loyalty cards, and even online retailer checkouts will ask customers to provide more information than necessary. Limit the details you provide whenever possible. Even if companies use your information ethically, any organization can still experience a data breach.

Tip #3: Use VPN on public Wi-Fi

In addition to the security risks of public Wi-Fi, web traffic on these networks is often tracked. Using a VPN service creates a secure, encrypted connection between your device and the VPN provider, leaving the public Wi-Fi provider unable to see the information passing through.  

Tip #4: Review privacy & security settings for your apps and accounts

Platforms like Facebook and Google can collect large amounts of data by default. However, they also offer "privacy checkups" and can be configured to limit how much information is being shared for your account. This also applies to operating systems like Windows and Mac OS, which can also be intrusive by default and sometimes hide their privacy settings when first installed. Review your app and account settings and disable any data-tracking features that you do not want to use. 

Tip #5: Exercise caution with "smart" home devices

Internet-connected smart devices such as doorbell cameras and wireless baby monitors are convenient tools but can also present privacy risks. Pick quality devices from reputable manufacturers and understand the potential security concerns around these devices:

• Change any default usernames and passwords when you set up a new smart home device; use your home router's settings to restrict any unnecessary communication.
• Configure the privacy settings to disable any features you don't use and check for software updates regularly.
• Keep these devices out of areas in your home where privacy is needed.

Tip #6: Limit your digital footprint

It can be difficult to completely remove information from the internet once it's been posted, but you can take steps to minimize the amount that you share wherever possible. Regularly delete old data (e.g., emails, files, folders), deactivate any unneeded accounts, ignore friend requests from strangers or suspicious-looking accounts, and uninstall apps you no longer use.