Tuesday, August 14, 2007

What is the Privacy Act?

The Privacy Act of 1974 (5 U.S.C. 552a) is a code of fair information practices which mandates how federal agencies, such as the EPA, maintain records about individuals. The Privacy Act requires that agencies:
collect only information that is relevant and necessary to carry out an agency function;
maintain no secret records on individuals;
explain at the time the information is being collected, why it is needed and how it will be used;
ensure that the records are used only for the reasons given, or seek the person's permission when another purpose for the record's use is considered necessary or desirable;
provide adequate safeguards to protect the records from unauthorized access and disclosure; and
allow people to see the records kept on them and provide them with the opportunity to correct inaccuracies in their records. The Privacy Act of 1974 (5 U.S.C. 552a) governs the collection, maintenance, use and disclosure of information about individuals by Federal agencies. Its purpose is to balance the Government's need to maintain personal information on individuals with the individual's right to be free from unwarranted invasions of personal privacy resulting from Government's use of such information.
The Privacy Act has three basic policy objectives:
to limit disclosure of information about individuals,
to grant individuals the right to access and amend records about themselves, and
to establish fair information practices regarding the collection, maintenance, and disclosure of records.
The Act, implementing regulations, and applicable Federal Register notices set forth procedures for achieving these goals which must be strictly followed by Agency personnel.



Information from the U.S. Environmental Protection Agency Website: http://www.epa.gov/privacy/faqs/index.htm#q1

Monday, July 30, 2007

FTC's Tips for Parents

Parents Should:
  • Look for a privacy policy on any website directed to children. The policy must be available through a link on the website's homepage and at each area where personal information is collected from kids. Websites for general audiences that have a children's section must post the notice on the homepages of the section for kids.
  • Read the policy closely to learn the kinds of personal information being collected, how it will be used, and whether it will be passed on to third parties. If you find a website that doesn't post basic protections for children's personal information, ask for details about their information collection practices.
  • Decide whether to give consent. Giving consent authorizes the website to collect personal information from your child. You can give consent and still say no to having your child's information passed along to a third party.
    Your consent isn't necessary if the website is collecting your child's email address simply to respond to a one-time request for information.
  • Decide whether to approve information collection from your kids based on new uses for the information. Website operators will let you know about the need for new consent by sending you a new notice and request. They will do this when they are changing the terms-of-use of the information in a "material" or significant way.
  • Ask to see the information your child has submitted. The site will ask you to verify your identity to ensure that your child's information isn't given out improperly.
  • Understand that you may revoke your consent at any time and have your child's information deleted. To stop a website from collecting additional information from your child, you can revoke your consent. You also may ask a site to delete any personal information it has already collected from your child.

From: http://www.ftc.gov/bcp/conline/edcams/kidzprivacy/adults.htm

Thursday, July 19, 2007

Personal Privacy Defined

Computer users consistently list privacy online as one of their top concerns about Internet use. So, what exactly is privacy? Merriam-Webster online defines privacy as "freedom from unauthorized intrusion" (http://www.m-w.com/dictionary/privacy). That definition certainly hits the mark of what a computer user expects from his 0r her time online. No one allowed into personal files, no one allowed to view surfing history and no one allowed access to any personal information. The truth is, there are people out their racking their brains on how to tap in to all that information mentioned. Some people make a career out of exploiting you. The best way to enjoy and utilize the Internet while still maintaining privacy is to install software that is specialized to protect you. We like Norton 360. Head over to CFR's personal privacy section and see why.

Tuesday, July 10, 2007

Can I really "erase" data?

Computer data and files are made up of numbers. Strings of 1's and 0's. To derive meaning from the digits you must organize them into patterns. Once your computer arranges the numbers into patterns, voila- you have your files. When the strings of numbers at the beginning of the sequence are scrambled, or randomized, the whole thing- be it a picture, email or website, the whole file is rendered invisible. Once the "deleted" or invisible file is erased, the computer sees the space where the file has been as blank. Then, new files and applications can be placed upon its old spot. As more and more 1's and 0's pile up over the grave site of the old file, eventually the file is erased. Sometimes the erasure does not completely occur because the "overwriting" process occurs at random. If any portion of the deleted file is not written over, that file can be recovered. If you think about this, then, when you sell off your old system, much of your data that has been "erased" may still be accessed.

Monday, June 25, 2007

Who is behind identity theft and cybercrime?

It is crucial to protect your identity, account numbers, and personal information secure. You may well know by now that there are people preying on that information, ready to use it to exploit money and valuable privacy from you. But who exactly are these "people" preying on your information. Who makes up this dangerous group? In 2004 major players in the Internet black market were arrested. The members of this group ranged from part-time students to international members from beyond our borders. The group that was busted was called the ShadowCrew and was made up of over 4,000 members(The Cybercrime Blackmarket). They hacked into networks and extracted private information and sold what they had stolen. Today, even after the arrest of members of the ShadowCrew there are groups of criminals thriving. Many belong to online communities that sell and trade fraudulent information. Some of these criminal communities can be accessed with registration and a registration fee, and there are likely even more covert communities for the black market out there. Access to the most secure black market operations is much more difficult and the communities are undetectable. This is just a glimpse into the forces operating against innocent Internet users. We hope this information is motivation to keep your identity safe through safe Internet practices and the implementation of security software such as Personal Privacy software, AntiVirus software and AntiSpyware software.




References

"The Cybercrime Blackmarket." Symantec . 2007. Symantec Corporation. 25 Jun 2007 .

Monday, June 18, 2007

Information Storage

Do you realize that your medical, insurance, pharmacy, police and employment records are all stored on computers? Even your old school records, phone records and video rental records are somewhere, stored on a computer. In the past, employers have accessed employees' medical information and used it against them in hiring and firing situations. Ideally, medical information is private and only to be accessed with the permission of the individual. However, as mentioned employers are getting their hands on the secure information easily and using it for harm. They are able to obtain this information because it is stored on computers and easily extracted. The issue of medical records disclosure is just one of the problems that information storage online or within computer hard drives can be dangerous. To protect your information always ask about the security of information databases. Never disclose personal information unless you're sure that the database is kept secure.

Tuesday, June 12, 2007

Identity Theft

If you've been the victim of identity theft, there are some important steps to take. First you must report the crime to the police and obtain a case report and a case number. Next call all of your credit card providers. Cancel your cards and request new account numbers. Also, be sure to indicate that you want your cancellation statement to disclose that the account was closed at the owner's request. Also be sure to ask for a password to be placed on all of your new or reissued accounts.

The thief may have opened accounts in your name, so you'll want to close those as well. As for the future. You can set up a "flag" for yourself, so that your name and account is on fraud alert. So, when you are anyone else tries to open an account in your name, the account will need to be cleared through you. You provide a phone number, and whenever an account open attempt occurs, you'll receive a call. This is a safety measure that will help you rest easily, especially after an identity theft situation.

Monday, May 21, 2007

Kid's Privacy

Kids love the Internet as much as we do. They can play games, watch videos and chat with friends. But children and adolescents can fall prey to exploitation if parents, teachers and caregivers don't take the necessary precautions. It's important to monitor where your kids are surfing. By law, websites that collect information from kids under 13 must post their privacy policy. This should include the type of information they solicit, how that information will be used, and whether the information is shopped to third parties for the purpose of marketing. Parents and caregivers should learn to read the privacy policy in order to make an informed decision on whether the site is a safe domain for your child to spend his or her leisure time. Protecting your child on the Internet is essential now more than ever, as web predators are harming more defenseless children every day.

Thursday, May 17, 2007

Privacy Suites: Usability

The great thing about privacy suites is that they combine the important security features of antivirus, antispyware and privacy protection software. The downside to these programs has been, in the past, lack of usability. We think it's important to create suites that are usable and effective. Norton 360 calls that usability automation. Basically, automation means that a program works as automatically as possible. The program works on its own, protecting your system, your information and your privacy. A suite should do this without interrupting you. A suite should be self-sufficient. Whether you call it automation or usability, look for a suite that will not take away your valuable time.

Monday, April 30, 2007

Online Shopping Safety

Shopping convenience used to mean a 3 story mall with all your favorite stores in one place. Now the easiest shopping happens in your bedroom at 3am when the world is asleep. A few clicks can buy you golf clubs or a golf vacation. You can buy groceries from your laptop.

Unfortunately, for some people online shopping has proven too good to be true. Meaning, some e-shoppers have fallen prey to identity theft. With online shopping ignorance is not bliss- make sure you know your seller, where your information is sent and the reputability of the site.

Regarding the seller, check up on the merchant. Does the site offer contact information and other clues to their validity?

Find out what information the seller obtains from you. Do they sell your email address or phone number? You can find this information in the privacy and security policies which are usually found at the bottom of the page.

Wednesday, April 25, 2007

The Tracks You Leave Online

  • An email path is one of the traces your online activity creates.
  • Cookies attach to your computer which allows websites to monitor your activity.
    How often you visit Search engines, toolbars and what exactly you are searching for is also stored.
  • Clicking on ads reports to the parent site your web location, which in turn can be used for targeted marketing.Webmasters will know the address you originate from and which pages you visit on their website.
  • Spyware, adware and viruses also monitor your footprints:
  • Sending and receiving email generates a trail connecting you, through ISP to your recipient. Your actual email content is also copied!
  • The content of instant messages is not private: it is possible for people monitoring network activity to view your messages and trace them to a source.

Tuesday, April 17, 2007

Protect Your Privacy Politely

Do you find it hard to say no? Well in the case of your personal privacy you need to learn how to use that word. Never provide sensitive information over the phone. This goes for social security number, home address, mother's maiden name or bank account number. These suggestions may seem like no-brainers, but in the heat of the moment you might feel the pressure to be polite and oblige. An easy phrase to refuse information disclosure is, "I'm concerned about my privacy and don't feel comfortable disclosing that information over the phone..." Be persistent- your information is your own and you have the right to keep it safe.

Tuesday, April 3, 2007

Maintain privacy when shopping online

With a click of the mouse shoppers can get their hands on groceries, books, cars and diamond rings. For the most part this availability is exciting and convenient. However, the downside to the online shopping industry is the potential for your private information to leak out into the wrong hands. Your credit card number, for example has the potential to reach the hand of an identity theft. So to be sure that you are protecting your privacy while still engaging in some leisurely afternoon shopping, here are some tips:

Shop at Secure Web Sites
  • if you look at the address bar while shopping the address should start with https:// the "s" after http stands for secure.
  • Also, look for the closed padlock displayed at the bottom of the screen. If the lock is opened, your site is not secure.
  • An unbroken key is another indication of a secure website.

Research the Site Before You Order

  • You may want to order an inexpensive item right away, if the site is unfamiliar to you.
  • Look for a physical address on the site. Reputable sites will have a hub with a real city and a real zip code.
  • The Better Business Bureau provides a list of trusted online vendors.

Don't Disclose your Social Security Number

  • Enough said.

Shop with a Credit Card

  • If something goes wrong, you are protected under the Credit Billing Act.
  • E-checks and money orders don't give any protection if something goes wrong.

Tuesday, March 27, 2007

Privacy: What's the big deal?

Computer users everywhere list computer privacy as one of the biggest blockades to their Internet use. While online shopping, banking and bill paying is available and likely very convenient, the idea of sending personal information into a seemingly unknown abyss like the world wide web makes many people uncomfortable. The collection and sale of personal information has become a booming business for the marketing industry, so one has a reason to be leery of disclosing private information online. Even those grocery store discount memberships have an ulterior motive: your local grocer could actually be tracking your purchases so that targeted coupons can reach your doorstep. Sure this tailor-made marketing sounds kind of exciting and convenient, but who really gets their hands on your private information? Whether it's shopping habits or your social security number you should tighten the reigns on your privacy. Here are two effective ways to improve your personal privacy level on the web.

1. Use a separate account for your personal email. Though you may be sending email from your home computer, if you are using your workplace email server your information could be easily accessed by your employer and coworkers. Set up a separate email account stemming from a separate server to ensure that your messages are confidential.

2. Clear your browser cache after browsing. After you surf the web a transcript of all you visited sites and activities is stored on your PC. Go to "Preferences" in your browser and click on "Empty Cache". This way your browsing activity is between you and your PC- nobody else.

To really ensure your privacy though, you should seriously consider purchasing privacy software. Check out http://www.consumerfirstreviews.com/

Monday, March 12, 2007

Ways to Protect Your Privacy

Never give out your social security number unless you have to.

During a hospital stay ask who has access to your records, you can also check "access logs" to see who has accessed your information.

You may also attempt to restrict the amount of information that is relayed to insurers or employers. Avoid blanket authorizations by various organizations to view your history.


You may also refuse to fill out medical questionnaires, accompanying surveys, or drug promotions which is a way third parties obtain your information.

If your employer is self-insured ask for a copy of all policies regarding medical information.


Never provide health information over the phone and prohibit your health-care provider from releasing medical records without authorization from you.

Tuesday, March 6, 2007

Is your anti-virus software ICSA Certified?

ICSA is an independent organization with specific criteria for certifying anti-virus software. To become certified, a program must meet certain standards such as: Detect 100 percent of current viruses listed on the‘In The Wild’ list, Detect 100 percent of viruses listed in the ICSA Labs Common Infectors Test Suite, Detect 100 percent of ICSA Labs Polymorphic Test Suite, etc. Make sure your anti-virus software is ICSA Certified. If you find that your software is not certified you need to make a change to ensure the safety of your PC. If you don't currently utilize anti-virus software you need to purchase the software. Consumer First Reviews offers honest and comprehensive reviews of leading anti-virus programs, see http://www.consumerfirstreveiws.com/antivirus

Phishing more common than viruses

Data from MessageLabs showed that in January 2007 number of phishing attacks overtook number of virus attacks. Emails containing phishing attacks has now reached 1.07%, while Trojans and viruses infected 0.83% of all emails. So what is Phising and how can I prevent it? Pronounced "fishing," it is a scam to steal valuable information like credit card and social security numbers, user IDs and passwords. When phishing occurs, an professional-seeming e-mail is sent to recipients pretending to be from their ISP, bank or retail establishment. These messages may be sent to people on selected lists or on any list, expecting that some percentage of recipients will actually have an account with the organization the message claims as its source. The e-mail usually asks the user to re-enter their financial or account information because of some internal technical error. The page might seem official, but any HTML page on the web can be copied, so be wary even of sites that "look" official. To prevent phishing on your computer you must equip your computer with the proper software to detect and prevent phishing. We suggest Norton Confidential. See this page for details on this personal privacy defender http://www.topcfr.com/

Monday, March 5, 2007

What is computer security?

Computer security involves two actions: prevention and detection. For your computer to be secure it must prevent intruders from tapping into your system. Detection is the act of determining whether an intruder has, in fact, tried to enter your system. You might wonder, why should I care about computer security? If you are like most Americans you likely use your computer for banking, shopping and email. Those activities potentially expose your personal information like account numbers, personal messages and even social security numbers for others’ to see. In order to hide your personal information you must be sure that your computer is secure from intruders. We suggest purchasing personal privacy software like Norton Confidential to safeguard your PC against security threats. http://www.topcfr.com/

Wednesday, February 28, 2007

Identity Theft! How it happens

· Thieves scour your trashcan, looking for straight cut or unshredded papers.
· They steal your mail or your wallet.
· They listen to your conversations with others.
· They manipulate you to share your personal information over the phone.
· They buy the information from someone who stole it.
· They steal it from old loan or credit card applications, hospital records or even fish it out of dumpsters outside of businesses that have your information on file.
· They steal it from your computer.