Ir al contenido principal

Who's watching you?

Every day, we leave behind a digital footprint. Every post we publish, every photo we share, every purchase we make, and every search we perform adds more data about who we are. The real question is no longer whether data about us exists, but who is watching us, who has access to it, and how it is being used.

We constantly expose, often without realizing it:

  • Personal identifiers (names, email addresses, phone numbers, and images).

  • Behavioral data (likes, comments, browsing habits, and search history).

  • Location data (GPS signals, IP addresses, and mobile devices).

  • Professional and social information (employment history, skills, and networks).

  • Transactional data (purchases, subscriptions, and financial activity).

Social networks, mobile apps, websites, and intelligent devices collect this information all the time, sometimes combining it with data obtained from third parties without us knowing about them.

馃憤馃徑 Legal uses of our data

Some uses are lawful and, most of the times, beneficial: 

  • Personalization and Efficiency: Our data enables platforms to personalize content, detect fraud, and improve services. Advertising, analytics, and recommendation systems are largely built on patterns derived from our own interactions. 
  • Business and Operational Purposes: Organizations analyze our data to understand customer behavior, improve products, manage risk, and optimize operations. In many cases, this data is described as anonymized or aggregated, although re-identification remains a real concern. 
  • Government and Public Administration: Governments may lawfully use our data for taxation, public services, national security, law enforcement, or public health, typically within legal and regulatory frameworks that define acceptable use.

These practices are often disclosed only through privacy policies and terms of service.

馃憥馃徑 Ilegal uses of our data

There is also a risk of misuse beyond lawful boundaries: 

  • Data Breaches and Exfiltration: Poor security practices, malicious insiders, or cyberattacks can expose our personal information without our knowledge or consent. 
  • Identity Theft and Financial Fraud: Once compromised, our data can be used to impersonate us, open fraudulent accounts, or conduct scams that exploit our trust and habits. 
  • Unauthorized Surveillance and Profiling: Our information may be used to monitor behavior, track movements, or construct detailed profiles for political manipulation, discrimination, or harassment. 
  • Underground Data Markets: Stolen personal data is frequently traded, reused, and resold, often long after the original breach has occurred and with little chance of complete remediation. 
  • The Imbalance of Control: We generate the data, but we rarely control it. Companies monetize it. Governments access it. Intermediaries aggregate and trade it. Once our information leaves our direct control, recovering it—or even knowing where it resides—becomes extremely difficult.

馃攼 While we cannot disconnect from the digital world, we can and must reduce our exposure:

  1. Be more deliberate about what we share and with whom.

  2. Review privacy settings and permissions regularly.

  3. Question why our data is being collected and whether it is truly necessary.

  4. Be cautious of “free” services that rely on extensive data collection.

  5. Advocate for stronger privacy protections, accountability, and transparency.

Asking “Who’s watching us?” is not an overreaction, it is a necessary act of awareness. Cyber security awareness does not eliminate the risks, but it empowers us to make informed choices and to challenge systems that operate without our full knowledge or consent.

If you are interested in getting to know how to protect your information in social networks, you may read this article: The risks of sharing personal information with social network companies.

Comentarios

Entradas populares de este blog

Reporte SOC 2 Type 2 en la seguridad de la informaci贸n

La importancia del reporte SOC 2 Type 2 en la seguridad de la informaci贸n En un entorno digital donde la confianza y la seguridad son fundamentales, las organizaciones deben demostrar que sus pr谩cticas de protecci贸n de datos cumplen con est谩ndares rigurosos. Uno de estos est谩ndares es el SOC 2 (Service Organization Control 2) Type 2 , un informe que eval煤a c贸mo una empresa maneja la seguridad, disponibilidad, integridad del procesamiento, confidencialidad y privacidad de los datos. Este reporte es esencial para empresas que manejan informaci贸n sensible, ya que proporciona evidencia objetiva sobre su capacidad para proteger la informaci贸n de sus clientes y socios comerciales. ¿Qu茅 es un reporte SOC 2 Type 2? El SOC 2 Type 2  es un informe de auditor铆a que eval煤a los controles internos de una organizaci贸n  relacionados con la seguridad de la informaci贸n. Desarrollado por la AICPA (American Institute of Certified Public Accountants), este informe sigue los Criterios de Servicios...

Managing Cyber Risks: Third-Party and End-User Challenges

馃攼 Managing Cyber Risks: Third-Party and End-User Challenges Our organizations face a multitude of cyber threats that can compromise data integrity, disrupt operations, and damage reputations. Among the most challenging risks are those posed by third parties and end users. These risks often operate outside the direct control of the organization, yet their actions or inactions can have profound security implications. Understanding these risks and implementing effective controls is essential for building a resilient cybersecurity posture. 馃敆  Third-Party Risks arises when organizations rely on external vendors, suppliers, or service providers who have access to our sensitive systems or data. These partners may not adhere to the same security standards, creating vulnerabilities that can be exploited by malicious actors. High-profile breaches, such as those involving supply chain attacks, have underscored the dangers of insufficient oversight in third-party relationships. The challeng...

Compendio de terminolog铆a computacional / Compendium of Computational Terminology

1a versi贸n: 22/julio/2023 Actualizado: 28/mayo/2026 2FA: Two-Factor Authentication 3DEA: Triple Data Encryption Algorithm 3DES: Triple DES 3PS: Third Person Shooter AAM: Agentic Access Management AC: Access Control ACL: Access Control Lists AES: Advanced Encryption Standard AI: Artificial Intelligence AIoT: Artificial Intelligence of Things AitM:  Adversary-in-the-Middle AML: Anti-Money Laundering AOC: Attestation Of Compliance API: Application Programming Interface APT: Advanced Persistent Threat ASCII: American Standard Code for Information Interchange ASM: Attack Surface Management ASPM: Application Security Posture Management ASV: Approved Scanning Vendor for PCI ATM: Automated Teller Machine ATT$CK: Adversarial Tactics, Techniques, and Common Knowledge AV: Antivirus AWS: Amazon Web Service B2B: Business to Business B2C: Business to Consumer BAS: Breach and Attack Simulation BAU: Business As Usual BBP: Bug Bounty Program BCM: Business Continuity Management ...