Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

<ul><li><keyword id="6354427" type="ORGANIZATION" weightage="20" keywordseo="apple">Apple</keyword> iPhones are sending as much as 1.5GB of <keyword id="7589011" type="UNKNOWN" weightage="20" keywordseo="tracking-data">tracking data</keyword> to third parties according to a report published by Geoffery Fowler in the Washington Post.</li><li>If the allegations hold true, it undercuts Apple’s key selling pitch of offering its users unparalleled privacy and data security.</li><li>The report estimates that there are around 5,400 unwanted data trackers on the <keyword id="6354606" type="COMPANY" weightage="20" keywordseo="iPhone">iPhone</keyword> which send out data. </li></ul>Apple’s key selling pitch has always been the unparalleled privacy it offers its users. And, it has been shouting it out on the rooftops. During CES 2019, its huge billboard said, “<a href="https://www.businessinsider.in/hey-apple-what-happens-on-iphones-doesnt-stay-there-and-your-clever-ces-ad-is-promoting-a-dangerous-illusion/articleshow/67429399.cms">What happens on your iPhone stays on your iPhone.</a>” Like all well-publicised truths, this might turn out to be a lie — and it’s not the first time its been called into question. Last year, Apple had to <a href="https://www.businessinsider.in/Apple-quietly-closed-an-important-privacy-loophole-while-preaching-about-its-data-protection-credentials/articleshow/64571181.cms">close a privacy loophole</a> in its system that allowed third party apps to gather data; while preaching the importance of privacy during Facebook’s Cambridge Analytica scandal. 
 
 <div type="image" title="5c332580bd77300c2b16d362-750-563" msid="69591181" hostid="261" caption="&amp;lt;p&amp;gt;Apple&amp;#39;s ad trolling Google at the Consumer Electronics Show (CES) 2019&amp;lt;/p&amp;gt;"></div>





 The Silicon Valley tech giant is now on the receiving end, as it is being accused of sending tracking data of its users’ iPhones to third parties. How bad is it? <a href="https://www.washingtonpost.com/people/geoffrey-a-fowler/">Geoffery Fowler</a>, <a href="https://www.washingtonpost.com/technology/2019/05/28/its-middle-night-do-you-know-who-your-iphone-is-talking/">The Washington Post</a>’s tech journalist, revealed that the iPhone comes equipped with nearly 5,400 data trackers — ‘hidden’ in its apps. These apps are sharing up to 1.5GB of data with third parties like MicrosoftOneDrive, Nike, Spotify, IBM’s the Weather Channel, and the Washington Post itself. Apple asserts that all of its components are designed to ‘provide advanced security and privacy at every level of the system’. 
 
 <div type="ExtQuote" text="At Apple we do a great deal to help users keep their data private. Apple hardware and software are designed to provide advanced security and privacy at every level of the system." auname="Statement from Apple spokesperson"></div>





 Apparently, it’s not Apple’s fault that your data is being transmitted out. There’s a ‘Limit Ad Tracking’ feature in every iPhone’s iOS settings that one needs to turn on for the data to stay within the phone. But it’s turned off by default. Non-tech savvy individuals are unlikely to know that they have to go hunting through the phone’s settings, to declare their ‘non-consent’ about being tracked. ‘Valid’ consent is something tech watch dogs all over the world are taking seriously. Earlier this year, Google was <a href="https://www.businessinsider.in/google-confirms-it-will-appeal-its-recent-57-million-fine-for-breaching-europes-strict-new-privacy-rules/articleshow/67664326.cms">fined $57 million</a> by the European Union under the General Data Protection Regulation (GDPR) for not making information for data collection easily accessible. See also: <a href="https://www.businessinsider.in/apples-privacy-promises-would-have-been-useless-against-a-simple-missed-call-from-whatsapp-hackers/articleshow/69325635.cms">Apple's privacy promises would have been useless against a simple missed call from WhatsApp hackers</a> <a href="https://www.businessinsider.in/google-could-be-bankrupting-apples-privacy-promises-by-handing-over-iphone-data-to-the-police/articleshow/68890410.cms">Google could be bankrupting Apple's privacy promises by handing over iPhone data to the police</a> <a href="https://www.businessinsider.in/apple-ceo-tim-cook-says-digital-privacy-has-become-a-crisis/articleshow/69181495.cms">Apple CEO Tim Cook says digital privacy 'has become a crisis'</a>

What happens on your iPhone doesn’t quite stay on your iPhone

<ul><li>A group of associations, including the United States Chamber of Commerce, wrote to <keyword id="3658" type="COUNTRY" weightage="20" keywordseo="India">India</keyword>’s minister of Electronics and IT against the implementation of the <keyword id="2617070" type="PERSON" weightage="20" keywordseo="Personal-Data-Protection-Bill">Personal Data Protection Bill</keyword>.</li><li>They expressed that the policy may not necessarily be effective in protecting user data, but it will definitely raise the cost of conducting business in India. </li><li>Major technology players like <keyword id="6354427" type="ORGANIZATION" weightage="20" keywordseo="apple">Apple</keyword>, <keyword id="6355629" type="COMPANY" weightage="20" keywordseo="google">Google</keyword> and Uber are members of these associations.</li></ul>Adding to the pressure on India’s Personal <keyword id="187124" type="ORGANIZATION" weightage="20" keywordseo="Data-Protection">Data Protection</keyword> Bill draft, a group of associations consisting of some of the world’s largest technology companies have <a href="https://economictimes.indiatimes.com/tech/ites/industry-bodies-write-to-it-minister-ravi-shankar-prasad-against-data-bill/articleshow/66062141.cms">written a letter</a> to the country’s minister of Electronic and Information Technology. Members of the group include Apple, <keyword id="10387" type="COMPANY" weightage="20" keywordseo="Microsoft">Microsoft</keyword>, Google, Canon, and Uber, who have jointly raised concerns that while the policy may definitely raise costs by 30-60%, it may not necessarily improve <keyword id="145060" type="ORGANIZATION" weightage="20" keywordseo="data-security">data security</keyword> to such an extent. Rather than propagating no regulation, the businesses have suggested setting up legal conditions for cross-border transfers to enable the free flow of data securely without the need for <keyword id="6441632" type="UNKNOWN" weightage="20" keywordseo="Data-localisation">data localisation</keyword>. Earlier the CEO of Google, Sundar Pichai, had also written a letter to the minister emphasising the importance of the free flow of data for economic growth and digital economy. Even India’s own state, Telangana, which is home to a host of tech firms and companies in the startup space, has expressed its concern that implementation of the bill would hurt their digital ecosystem. The letter was signed by industry associations that include the United States Chamber of Commerce, the United States-India Business Council (USIBC), Japan Electronics and Information Technology Industries Association (JEITA) and DIGITAL EUROPE. Cost of business In the proposed draft bill, the government proposed setting up a legal framework to monitor and supervise the processing of personal data. In that, one of the regulations aims at obtaining specific and explicit consent from individuals. The issue come in with the clause where the stakeholders are obligated to prove specific notices indicating where and how user’s personal data is going to be processed and ensuring that this data is being handled in a way that’s error-free. Not only does this require organisations to pitch in extra resources for implementation, but it means that before implementing any new improvements within the organisation, there would be more compliances to adhere to, increasing the time required. India-based payments companies like Paytm and PhonePe take the opposite stance citing that there’s no reason to oppose the bill. (Image source: IANS)

Groups of foreign companies are lobbying against India's Personal Data Protection Bill

Digital Privacy and Data Security

Online Privacy and Data Security

<ul><li>The ‘sins’ and ‘virtues’ of data privacy shared by the <keyword id="127521" type="ORGANIZATION" weightage="20" keywordseo="Data-Security-Council-of-India">Data Security Council of India</keyword> (DSCI) on <keyword id="8663645" type="UNKNOWN" weightage="20" keywordseo="data-privacy-day-2020">Data Privacy Day 2020</keyword> include the importance of transparency and consent.</li><li><keyword id="109249" type="COMPANY" weightage="20" keywordseo="Subex">Subex</keyword>, SAP and <keyword id="8664815" type="UNKNOWN" weightage="20" keywordseo="blazeclan-technologies">Blazeclan Technologies</keyword> shared their thoughts on the responsibility of companies towards consumer data safety with Business Insider India.</li><li>They feel that data breaches are becoming more common and that <keyword id="6361948" type="UNKNOWN" weightage="20" keywordseo="cybersecurity">cybersecurity</keyword> is becoming more complex with the implications of data localisation.</li></ul>Devices and technology are used around the clock so it’s hardly surprising that data is the most prized commodity in today’s day and age. <keyword id="6355199" type="ORGANIZATION" weightage="20" keywordseo="reliance-industries">Reliance Industries</keyword> chairman, <a href="https://www.businessinsider.in/amazon-walmart-owned-flipkart-set-back-by-new-e-commerce-rules-that-help-mukesh-ambanis-reliance-retail/articleshow/67751026.cms">Mukesh Ambani</a>, called it the ‘oil’ of the fourth industrial revolution. When you wake in the morning, you check your smartphone. Once you’re in your car, you turn on your GPS. In the office, you’re logging onto your laptop, replying to emails, and logging into Google Meets or Microsoft Teams for meetings. When it’s time for lunch, there are days you’re ordering food using an online delivery app. With so much data in the fray, the Data Security Council of India (DSCI) — not-for-profit arm of NASSCOM created to address data protection— has shared the ‘sins’ and ‘virtues’ of privacy when it comes to users data. 
	
 <div type="image" title="Untitled design (9)" msid="73689340" hostid="261" caption="&amp;lt;p&amp;gt;Sins and virtues of data privacy&amp;lt;/p&amp;gt;"></div>





 "Privacy is everyone’s responsibility and we need to create a conducive environment which safeguards personal data of one and all. Having a dedicated day to celebrate privacy globally lends further impetus to the larger objective of privacy awareness and helps bring user-centric attention to managing personal data," said Rama Vedashree, CEO of DSCI. <keyword id="569084" type="PERSON" weightage="20" keywordseo="Cyber-threats">Cyber threats</keyword> are everywhere — and it’s only going to get more complicated Smartphones are constantly by our side and play a major role in society. They’ve replaced calculators, cameras and physical books. So much so, that a mobile number is akin to identity, according to Subex COO Shankar Roddam. "Most of the digital growth is fueled by the curious and intelligent human society. This has increased the vulnerability of human society much more than what it was in the past. It is not uncommon that a week goes by without hearing a story of an account compromise around us," he told Business Insider India. Data breaches are becoming more common. News of <a href="https://www.businessinsider.in/jeff-bezos-intimate-messages-data-from-drug-cartels-adnan-kashoggi-the-many-things-pegasus-is-suspected-of-hacking-before-whatsapp/articleshow/71849602.cms">malware like Pegasus</a> that can allow hackers to access your devices without your knowledge has users wondering <a href="https://www.businessinsider.in/tech/news/heres-how-to-keep-your-phone-from-getting-hacked-like-jeff-bezos-according-to-a-cybersecurity-expert/articleshow/73685677.cms?src=hp_ts">how to best protect themselves</a>. In addition, there are concerns about data localisation. Advocates argue that it will help implement data privacy laws more effectively while global firms feel data will be <a href="https://www.businessinsider.in/tech/news/data-localisation-wont-help-local-firms-or-improve-privacy-but-it-could-cost-india-43-billion/articleshow/72251167.cms">more vulnerable if it’s all in one place</a>. Co-founder and CEO of Blazeclan Technologies Varoon Rajani divulged that it’s not only users but providers that are also trying to navigate new territory. "The concern of data breach and data localisation is alarming and has put the providers in a fix. It is imperative for stakeholders in the area to identify and understand the risks inherent to digitization, public networks and outsourcing of infrastructure components first hand," he told us. Companies need to find the balance to ensure user trust — and size doesn’t matter When it comes to managing data privacy, companies need to find a balance between transparency and customer confidence. "We need organisations that are more sensitive and proactive to secure their customers. This will be the one thing that will enable businesses to achieve their growth aspirations," said Roddam. Regardless of how big or small a company may be, they’re still managing large quantities of data. According to Dell’s <a href="https://www.businessinsider.in/data-protection-for-indian-businesses-inadequate/articleshow/68613117.cms">Global Data Protection Index</a>, nearly 47% of Indian businesses monetize data — higher than the global average of 36%. However, nearly 71% of companies reported that they weren’t able to find adequate data protection options in the market. "Enterprises manage large quantities of sensitive data on their employees, customers, and other stakeholders. It becomes crucial to employ extensive security measures to protect against the loss, misuse, and unauthorized alteration of data," Lovneesh Chanana, vice president of digital governments APAC at SAP, told Business Insider. Even so, cybersecurity is changing rapidly. Threats continue to evolve at-par, if not faster than cyber intelligence can keep up. Old methods like trojans are still rampant with new threats like phishing attacks, webcam blackmail, and deepfakes ramping up. "Businesses, both global giants and SMEs, are emphasizing on cybersecurity budgets, with over 50% of companies focusing on investment into cloud security and setting up data centres within the country," said Rajani India’s Personal Data Protection Bill is currently in process of being finalised but until there are official regulations, it’s up to users to be responsible for their own data — but also to stand up for their rights when asking for redressal measures against data breaches and violations of privacy. Meanwhile, companies too should do their best to adhere to the ‘sins’ and ‘virtues’ of data privacy. See also: <a href="https://www.businessinsider.in/tech/news/heres-how-to-keep-your-phone-from-getting-hacked-like-jeff-bezos-according-to-a-cybersecurity-expert/articleshow/73685677.cms?src=hp_latest">Here's how to keep your phone from getting hacked like Jeff Bezos, according to a cybersecurity expert</a> <a href="https://www.businessinsider.in/data-protection-for-indian-businesses-inadequate/articleshow/68613117.cms">Indian companies know how to sell data but not how to protect it</a> <a href="https://www.businessinsider.in/tech/news/heres-why-you-shouldnt-sell-you-face-even-if-a-company-pays-you-9-million/articleshow/71702556.cms">Here's why you shouldn't sell your face — even if a company pays you ₹9 million</a>

The sins and virtues of data privacy — Experts discuss where the responsibility lies

<a href="http://markets.businessinsider.com/stocks/amzn-stock" target="_blank" rel="noopener"><div class="KonaFilter image-container display-table"><div><div class="image on-image"><a href="http://markets.businessinsider.com/stocks/amzn-stock">Markets Insider</a></div></div></div></a><ul><li>Shares of <a href="http://markets.businessinsider.com/stocks/amzn-stock">Amazon</a> dipped 2.42% on Monday, part of a <a href="http://www.businessinsider.com/facebook-down-premarket-trading-cambridge-analytica-data-leak-2018-3">broader tech selloff led by Facebook</a>.</li><li>News broke on Saturday that Facebook had granted controversial political research firm Cambridge Analytica access to more than 50 million Facebook profiles who thereby illegitimately used the data to sway voters in US and UK elections.</li><li>There are concerns that Facebook's data privacy breach, and any potential response from regulators, could impact other tech companies.</li><li><a href="http://markets.businessinsider.com/stocks/amzn-stock">Watch Amazon's stock move in real time here.</a></li></ul> <div class="margin-top"> <h3>NOW WATCH: <a href="http://www.businessinsider.com/cut-cable-directv-now-streaming-cord-cutting-youtube-tv-hulu-sling-2018-3">I quit cable for DirecTV Now and it's saving me over $1,000 a year - here's how I did it</a></h3> <div> </div> </div>

Amazon dips as data privacy concerns hit Facebook

<ul><li>After the Indian government approved changing the name of the <keyword id="158388" type="ORGANIZATION" weightage="20" keywordseo="Telecom-Commission">Telecom Commission</keyword> to the Digital Communications Commission, inside sources reveal that it is more than just a namesake.</li><li>The Indian government plans on bringing <keyword id="803848" type="PERSON" weightage="20" keywordseo="Data-privacy">data privacy</keyword> and security under the umbrella of the Telecom Commission as well. </li><li><keyword id="3658" type="COUNTRY" weightage="20" keywordseo="India">India</keyword>’s data consumption, while on telecom networks, in currently looked after by the Ministry of Electronics and Information Technology.</li></ul>Technically any data consumption that happens on your phone is on a telecom network. But, rather than the Telecom Commission being in charge of its security, it’s the Ministry of Electronics and Information Technology (MeitY) that cares of your data privacy concerns. In order to address that discrepancy, the Indian government is thinking of switching gears and putting all data related regulations and directives under <a href="https://economictimes.indiatimes.com/tech/internet/data-cyber-security-may-come-under-trai-telecom-commission/articleshow/66406362.cms">one umbrella</a> with the Telecom Commission. But that’s easier said than done. The government would have to widen the scope for the commission as well bring in amendments to include new laws and regulations. In order to tackle this gargantuan shift, the Indian government’s already put a panel in place to figure out how to bring the various aspects of <keyword id="145060" type="ORGANIZATION" weightage="20" keywordseo="data-security">data security</keyword> and privacy under the ambit of the Telecom Commission and out from under MeitY. A senior official at the commission told the <a href="https://economictimes.indiatimes.com/tech/internet/data-cyber-security-may-come-under-trai-telecom-commission/articleshow/66406362.cms">Economic Times</a> that the recent change of the Telecom Commission to the Digital Communication Commission (DCC) and Telecom Regulatory Authority of India (<keyword id="6356988" type="DEFINITION" weightage="20" keywordseo="trai">TRAI</keyword>) being <a href="https://economictimes.indiatimes.com/industry/telecom/telecom-news/trai-to-be-renamed-as-dcrai-telecom-minister/articleshow/65970939.cms">renamed</a> the Digital Communications Regulatory Authority of India (DCRAI) is more than just namesake. It’s about cementing the idea that any policy changes that happen aren’t just from a single ministry, but from the government as a whole. Putting data regulation and security under one commission would streamline the processes that have to follow as well. Especially since 93% of data consumption happens on telecom networks. Here’s how it’s going to happen TRAI explains why accountability, autonomy and security are integral for it to be an efficient ‘Data Controller’ in its <a href="https://trai.gov.in/sites/default/files/Takshashila_07_11_2017.pdf">report</a>, the ‘Privacy, Security and Ownership of Data in the Telecom Sector’. Laws have to be changed, panels have to set up and experts have to be called in. And, first in line are the implications of the <keyword id="6996546" type="UNKNOWN" weightage="20" keywordseo="personal-data-privacy-bill">Personal Data Privacy Bill</keyword>. Scheduled to come back on the table in December once all comments and suggestions have been taken into consideration, the draft bill will give users the right to monitor their consent or withdraw it altogether. Though the bill was submitted to the <keyword id="296566" type="ORGANIZATION" weightage="20" keywordseo="IT-Ministry">IT ministry</keyword>, it may shift under the TRAI once the required changes are made to the TRAI Act and scope of the ministry. These changes can only be made through an amendment in laws. And, that takes time. There may already be a panel in place, but the Indian government still has a long way to go to not only ensure data privacy for its citizens but simultaneously bring in cybersecurity under the Telecom Commission.

India plans on handing over the reins of data privacy to the telecom industry watchdog

<ul><li>On International <keyword id="3223465" type="ORGANIZATION" weightage="20" keywordseo="Data-Privacy-Day">Data Privacy Day</keyword>, Business Insider India spoke to Check Point Software about the best practices to keep your phone from getting hacked. </li><li>Oded Vanunu, head of products vulnerability research at Check Point, points out that a sudden battery drain is one way to tell if you’re device has been breached. </li><li>Vanunu also points out that it’s currently a race between the forces of good and bad to stay ahead of each other when it comes to <keyword id="6361948" type="UNKNOWN" weightage="20" keywordseo="cybersecurity">cybersecurity</keyword>.</li></ul>Winning against hackers isn’t going to happen overnight. They prey on habits and routines to exploit vulnerabilities — something as simple as clicking on a malicious video link that’s been shared over WhatsApp, like with <a href="https://www.businessinsider.in/tech/news/the-nasty-spyware-likely-used-to-hack-jeff-bezos-lets-governments-secretly-access-everything-in-your-smartphone-from-text-messages-to-the-microphone-and-cameras-heres-how-it-works/articleshow/73530272.cms">Jeff Bezos and his iPhone X</a>. Uninstalling WhatsApp or never clicking on video link again isn’t a solution. However, Oded Vanunu from Check Point Software — known for finding vulnerabilities in WhatsApp and TikTok — believes there’s still a lot that you can do to keep yourself from getting hacked. On International Data Privacy Day, the purpose is to raise awareness, promote privacy and data protection best practices. Aside from the basics — like ensuring your device is updated — it’s important to make sure that you have security software in place. Security software can be found in the Google Play Store and the Apple App Store. They work to protect the data on your device against malware and phishing attempts. While there are paid and free options, it’s not necessarily that only paid versions are efficient. "All vendors are working to be more secure in all their services, the question is if they are doing it enough. Hackers will keep on searching for bugs and we will keep on finding them and hopefully be ahead of them," explained Vanunu. How do I know if I’ve been hacked? Despite all your best efforts, it’s still possible that hackers can gain access to your device. As per the forensic analysis of <keyword id="191583" type="PERSON" weightage="20" keywordseo="Jeff-Bezos">Jeff Bezos</keyword> phone, there was a surge in data transfer right after he clicked on a malicious link allegedly shared by the Saudi Crown Prince — Mohammed bin Salman. "If you don’t have security on your mobile it is almost impossible to sense this. However sometimes a quick loss of battery is an indication that the mobile is being used by crypto mining - a popular malware used to mine cryptocurrency," explained Vanunu. <a href="https://www.businessinsider.in/tech/apps/news/jeff-bezos-intimate-messages-data-from-drug-cartels-adnan-kashoggi-the-many-things-pegasus-is-suspected-of-hacking-before-whatsapp/articleshow/71849602.cms">Pegasus</a>, the security software likely used to hack into Jeff Bezos’ phone, was allegedly also used to track Jamal Khashoggi before he was killed. The Mexican government argues that it’s a force for good that’s been used to <a href="https://www.businessinsider.in/slideshows/jeff-bezos-intimate-messages-data-from-drug-cartels-adnan-kashoggi-the-many-things-pegasus-is-suspected-of-hacking-before-whatsapp/after-the-hack-nso-was-able-to-secure-its-first-official-sale-of-pegasus-to-mexico-the-mexican-government-wanted-to-use-the-software-to-crack-down-on-drug-cartels-/slideshow/71850117.cms">crack down on drug cartels</a>. In the long run, it’s a <a href="https://www.businessinsider.in/tech/news/jeff-bezos-phone-hack-shows-hackers-are-winning-in-the-arms-race-between-governments-and-tech-firms/articleshow/73543826.cms">war between the forces of good and bad</a>. As cybersecurity gets more complex, so do the threats posed by cybercriminals. Using artificial intelligence (AI), for instance, can empower pattern recognition — it can be used to identify threats, but also exploit vulnerabilities. "We should all assume that whatever habits or practices we adopt- hackers will look for ways to exploit them. That’s why it’s a prolonged race," explained Vanunu. When it comes to platforms like WhatsApp, Facebook, Instagram or TikTok — they’re trying their best to keep up. However, new threats keep popping up. "Security is a top priority for them but the fact is that we keep finding bugs and problems. As long as we are the ones finding them — the cybersecurity or defence industry — this is a positive scenario as we keep them secured. But if bad actors of cyber offence players find them — this means they’ll be exploited and breached," Vanunu said. At the end of the day, make sure your device is protected and maintain a healthy suspicion of links. See also: <a href="https://www.businessinsider.in/tech/news/jeff-bezos-phone-hack-shows-hackers-are-winning-in-the-arms-race-between-governments-and-tech-firms/articleshow/73543826.cms">Jeff Bezos phone hack shows hackers are winning in the 'arms race' between governments and tech firms according to a cybersecurity expert</a> <a href="https://www.businessinsider.in/tech/apps/news/jeff-bezos-intimate-messages-data-from-drug-cartels-adnan-kashoggi-the-many-things-pegasus-is-suspected-of-hacking-before-whatsapp/articleshow/71849602.cms">Jeff Bezos’ intimate messages, data from drug cartels, Jamal Kashoggi — the many things Pegasus is suspected of hacking before WhatsApp</a>

Here's how to keep your phone from getting hacked like Jeff Bezos, according to a cybersecurity expert

<ul><li>India’s three main surveillance projects — <keyword id="109740" type="ORGANIZATION" weightage="20" keywordseo="NATGRID">NATGRID</keyword>, <keyword id="15615" type="CITY" weightage="20" keywordseo="cms">CMS</keyword>, and <keyword id="26425" type="CITY" weightage="20" keywordseo="Netra">NETRA</keyword> — have been directed to stop collecting data by the Delhi High Court. </li><li>The order comes as public interest litigation (PLI) filed by lawyer Prashant Bhushan on behalf of the CPLI cited that there is ‘insufficient oversight’ allowing the mass surveillance of Indian citizens and breaking their <keyword id="515140" type="PERSON" weightage="20" keywordseo="right-to-privacy">right to privacy</keyword>. </li><li>NATGRID has access to 12 categories of data, CMS can listen in on your phone conversations, and NETRA can track everything you do online. </li></ul>The Delhi High Court has issued a notice today asking India’s central government to stop collecting data through their three main surveillance systems — National Intelligence Grid (NATGRID), Central Monitoring System (CMS) and Network Traffic Analysis (NETRA). The notice is in response to public interest litigation (PLI) filed by lawyer and activist Prashant Bhushan on behalf of the NGO called the Center for Public Interest Litigation (CPIL). In the appeal, Bhushan argues that the three systems create a net of 360-degree surveillance on Indian citizens. They allow central and state law enforcement agencies to intercept and monitor all telecommunications in bulk which is an infringement of individuals’ fundamental right to privacy. <div type="twitter" handle="barandbench" handlename="Bar &amp; Bench" image="http://pbs.twimg.com/profile_images/1304761912068984833/5-qPfQOb_normal.jpg" favoritecount="55" retweetcount="8" status="#Breaking: Delhi High Court issues notice in PIL to direct Centre to stop collection of data through NATGRID, Centr… https://t.co/SkXhSb80Gl" createdat="1606888535000" id="1334013320572014592"></div> The plea further contends that there is an ‘insufficient oversight mechanism’ to authorise and review the interception and monitoring orders issued by the state agencies under the existing legal framework. What are NATGRID, NETRA and CMS? NATGRID, NETRA and CMS are surveillance systems. This means they collect data in order to keep an eye out for anything that could threaten national security. NATGRID allows investigation and law enforcement agencies to access real-time information from data stored within agencies like the Income Tax Department, banks, insurance companies, the Indian Railways, and other offices. There are a total of 21 categories of data that NATGRID has access to. Where the NATGRID has access to real-time data, CMS is centralised telephone interception provisioning system. And, it’s exactly what it sounds like. It can bypass the middleman — the telecom companies — to directly monitor text messages, social media posts and phone calls. NETRA is the third leg of India’s security infrastructure. While the CMS is tapping into your phone’s network, NETRA is watching everything you do online — not just on social media. It can monitor any text-based messages containing direct messages on Facebook, within your personal emails or online blogs. Using filters and keywords, it can identify words even in encrypted messages. How does NATGRID undermine the right to privacy? NATGRID was established through governmental notifications rather than through legislation passed in the Parliament. Even though it helps the project come to fruition faster, it also undermines the system of checks and balances essential to a democracy, according to <a href="https://www.prsindia.org/theprsblog/natgrid-should-parliament-have-role">PRS India</a>. Considering that NATGRID can access information of private individuals, it also has a bearing on their fundamental rights — like the right to privacy, as cited by Bhushan. Unlike India, countries like the US and the European Union (EU) have comprehensive privacy laws. They include the conditions under which access to databases would be allowed and limitations on how such data can be used. UIDAI, like NATGRID, was formed using governmental notifications. It was established as an executive authority, and still functions without a statutory mandate. What roles to CMS and NETRA play? The underlying logic for developing CMS and NETRA was to monitor terrorist activities mainly after the terrorist bomb attack in Mumbai on November 26, 2008. With both of them, the problem again boils down to a lack of transparency in the absence of data protection laws. The general public has no way of knowing if and when a person’s data has been intercepted or how data is being used. CMS and NETRA allow for mass surveillance with the potential to target large groups of people without a valid reason. To solve for the lack of transparency, the PLI filed by Bhushan seeks the creation of a permanent independent oversight body — either judicial or parliamentary — for issuing and reviewing lawful interception and monitoring warrants under the enabling provisions of the Indian Telegraph Act, 1885 and the Information Technology Act, 2000. SEE ALSO: <a href="https://www.businessinsider.in/tech/apps/news/fortnites-biggest-ever-event-saw-15-million-players-3-million-viewers-and-took-twitch-down/articleshow/79523514.cms">Fortnite's biggest ever event saw 15 million players, 3 million viewers and took Twitch down</a> <a href="https://www.businessinsider.in/science/health/news/pfizer-covid-19-vaccine-can-survive-in-fridge-for-five-days-claims-company/articleshow/79526886.cms">Pfizer claims its newly approved COVID-19 vaccine can survive without sub-zero temperatures for five days</a> <a href="https://www.businessinsider.in/tech/apps/news/google-maps-has-a-new-community-feed-which-looks-a-lot-like-yelp-or-tripadvisor-on-steroids/articleshow/79525031.cms">Google Maps has a new 'community feed', which looks a lot like Yelp or TripAdvisor on steroids</a>

India's three main surveillance projects NATGRID, CMS and NETRA have been directed to stop collecting data citing breach of privacy

<ul><li>A new survey finds that 80% of Indians don’t trust the <keyword id="144117" type="ORGANIZATION" weightage="20" keywordseo="AADHAAR">Aadhaar</keyword> card program.</li><li>Respondents agree that the government needs to take <keyword id="187124" type="ORGANIZATION" weightage="20" keywordseo="Data-Protection">data protection</keyword> more seriously. </li><li>The government had previously signed an affidavit for the Supreme Court, stating that the Aadhaar database can neither be hacked nor breached.</li></ul>The Aadhaar card scheme, a 12-digit unique identity number for residents in India, has been embroiled in controversy since its initiation in 2009. Nine years down the line, citizens still don’t <a href="https://cio.economictimes.indiatimes.com/news/digital-security/80-people-concerned-about-aadhaar-data-security-study/64383641">trust</a> the world’s <a href="https://telecom.economictimes.indiatimes.com/news/aadhaar-worlds-largest-id-database-exposed-by-india-government-errors/64175448">largest</a> biometric ID system. A survey conducted by Velocity MR, a market research and analysis company, concluded that eight out of 10 respondents were concerned about the security of their Aadhar data and felt the government should be more proactive about data protection. This comes from taking 5,800 respondents into consideration, across 8 tier-1 cities in India, including the National Capital Region. The Aadhaar conundrum Headlines that call the security of Aadhaar into the question rear their head every few months. Regardless of whether it’s a <a href="https://www.indiatimes.com/technology/news/an-online-researcher-hacked-into-aadhaar-s-official-android-app-to-show-how-poorly-it-s-secured-337425.html">French researcher</a> or <a href="https://economictimes.indiatimes.com/tech/internet/uidai-trashes-zdnet-report-refutes-aadhaar-data-leak-claim-by-delhi-researcher/articleshow/63446024.cms">ZDNet</a>, the issue lies with the government’s reiterations of the Aadhaar system being ‘<a href="https://www.troyhunt.com/is-indias-aadhaar-system-really-hack-proof-assessing-a-publicly-observable-security-posture/">hack-proof</a>’. The Unique Identification Authority of India (<keyword id="6355252" type="DEFINITION" weightage="20" keywordseo="uidai">UIDAI</keyword>), the government agency behind Aadhaar cards has <a href="https://economictimes.indiatimes.com/news/politics-and-nation/aadhaar-data-is-fully-safe-uidai/articleshow/61725239.cms">said</a>, “The Aadhaar data, including biometric information, is fully safe and secure.” Even the government filed an <a href="https://www.firstpost.com/india/government-files-affidavit-in-aadhaar-case-claims-it-cannot-be-hacked-or-breached-supreme-court-to-hear-case-today-4190835.html">affidavit</a> with the Supreme Court in lieu of the Aadhaar case, that claimed that the data collected through the system cannot be breached or hacked. Security in itself is not a zero-sum game. Technology evolves at such velocity that safeguards becoming obsolete is always a concern, while also being inevitable. That being said, a system cannot be completely secure, it can only be sufficiently prepared. The Cambridge Analytica data breach scandal goes a long way in proving the same. It’s one of reasons why the conversation has veered from obtaining consent to getting ‘<a href="https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/consent/what-is-valid-consent/">valid’ </a>consent. The same survey, when asking about Facebook usage, found that 1-in-3 users are going to reduce the amount of information they share on the social networking platform, though they aren’t ready to leave it altogether. Because, let’s be honest, there’s always a weak link or a point of vulnerability. The question is, how long will it be before someone finds it.

Nine years later, 80% of Indians are still not convinced the world’s largest biometric ID system is secure

<ul><li>With the growing number of healthtech startups, India is in the need of a <keyword id="7507326" type="UNKNOWN" weightage="20" keywordseo="healthcare-data-privacy">healthcare data privacy</keyword> bill. </li><li>The Indian government has proposed a law that will bring the ownership of the data to the consumer. </li><li>Healthtech startups like <keyword id="1165142" type="COMPANY" weightage="20" keywordseo="Practo">Practo</keyword>, Healthifyme too agree to the need of consumer ownership in the privacy bill.</li></ul>Over the years, with the growth of internet businesses, data privacy has gained even more importance. And when it comes to healthcare data, the importance of data privacy only increases. India has been toying with the idea of a healthcare data privacy bill since 2018, but it hasn’t come into effect yet. In March 2018, the Indian Ministry of Health and Family Welfare said that it plans to set up a nodal body called National Digital Health Authority, that would enforce privacy and security measures for electronic health data in India. However, while the setting up of the regulatory body is awaited, there are multiple healthtech startups out there today with millions of users that have access to medical records. Recently, healthcare platform Practo released a report on India’s healthcare map citing “key consumer healthcare trends, concerns and behaviour.” The report was generated from the doctors appointment bookings made through their platform. An official statement from the company said the report was made “of hundreds of thousands of searches and appointments, by over 13 crore patients, across 50+ cities and 250+ specialities, in 2018.” But doesn’t that put the privacy of a patient at risk? Experts don't believe so as the anonymity of the user is still in place. Varun Dubey, VP, Marketing at Practo spoke to Business Insider and said “We feel this data itself is powerful as it shows the healthcare trends in the country. There is a real need for conversation around the issues in the sector,” he said. It’s similar to when Google releases a report about what people are searching for, it is quite generic as well as anonymised, he added. Experts from the healthcare industry too stress on the importance of such reports. “If without sharing the name of the individual, if the remaining quantifiable and quality data is shared for the purpose of innovation, I don’t think it’s a bad thing. It's like a necessary evil for the greater good of mankind,” Dr. Siddhant Bhargava, Co-founder, Fitness &amp; Nutritional Scientist - Food Darzee told Business Insider. So how does Practo, a company which has about 2.5 crore patients booking appointments through them, keep the data safe? “We have cared and given importance to data security and privacy for years now. Probably, we are the only ISO 27000 certified company in healthtech. As we work in other countries too, we don’t have to just comply with Indian laws but across many other countries. We have a lot of external and internal audits that take place. Our servers are Health Insurance Portability and Accountability Act (hipaa) compliant, even though India doesn’t need one. We also have a 256 bit encryption code, which is much stronger than security codes in Indian banks,” said Dubey. The Health Ministry is also looking to bring about a strict <a href="https://www.business-standard.com/article/economy-policy/india-to-be-first-to-protect-health-data-of-citizens-with-iron-clad-law-118053100126_1.html">law</a> that would give individuals the ownership of their data. It is the “consumer ownership” of data that makes the law important. While Dubey believes that not just healthcare but data privacy overall is utmost important, he said that the bill is moving towards giving more power to the consumer. Other healthcare startups too agree. Tushar Vashisht, co-founder and CEO of Healthifyme, said that it is the government’s mandate to figure out how strict the norms should be. “I would personally ask for the consumer to be king. They should define how they want to control or secure their data,” Vashisht told Business Insider. See Also: <a href="https://www.businessinsider.in/indian-government-commits-to-increasing-public-health-spending-to-2-5-of-gdp-by-2025but-is-that-enough/articleshow/67086285.cms">Indian government commits to increasing public health spending to 2.5% of GDP by 2025—but is that enough?</a> <a href="https://www.businessinsider.in/indias-fintech-cos-are-growing-but-cybersecurity-fails-to-make-the-mark/articleshow/68255233.cms">India’s fintech cos are growing but cybersecurity fails to make the mark</a>

India has millions of medical records online but no law to keep the data safe

Third-party smartphone <keyword id="6354741" type="General" weightage="20" keywordseo="apps" source="Orion">apps</keyword> for connected cars belonging to top brands like Tesla, Nissan, Renault, Ford, and Volkswagen are using the vehicle owners' credentials without asking for their consent, a new report claimed on Friday. On top of this, one in five of applications have no contact information, which makes it impossible to report a problem, according to Kaspersky's 'Connected Apps' report which analysed 69 popular third-party mobile apps designed to control connected cars. "The benefits of a connected world are countless. However, it is important to note that this is still a developing industry, which carries certain risks," said Sergey Zorin, Head of Kaspersky Transportation Security. "Unfortunately, not all developers take a responsible approach when it comes to data storage and collection, which results in users exposing their personal information. This data may further be sold on the dark web and end up in untrustful hands," he warned. Cybercriminals might not only steal your data and personal credentials but also gain access to your vehicle - and that might lead to physical threats. Connected automotive applications allow users to remotely control their vehicles by locking or unlocking the doors, adjusting climate control, starting and stopping the engine, etc. Even though most car manufacturers have their own legitimate applications for the cars they make, third-party apps designed by mobile developers are also very popular among users as they may offer unique features that have not yet been introduced by the vehicle manufacturer. The third-party applications analysed by Kaspersky cover almost all major vehicle brands, with Tesla, Nissan, Renault, Ford and Volkswagen in the top-5 cars most often controlled by such apps. "However, these applications are not entirely safe to use," claim Kaspersky researchers. They found that more than half of the applications don't warn about the risks of using the owner's account from the original automaker's service. Moreover, every fifth application does not have information on how to contact the developer or give feedback, making it impossible to report a problem or request more information on the app's privacy policy. "It is also worth noting that 46 of the 69 applications are either free of charge or offer a demo mode. This has contributed to such applications being downloaded from the Google Play Store more than 239,000 times, which makes you wonder how many people are giving strangers free access to their cars," the report mentioned. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/how-to-find-out-how-much-you-have-spent-on-swiggy-so-far/articleshow/91810447.cms">How to find out how much you have spent on Swiggy so far</a> <a href="https://www.businessinsider.in/tech/news/government-backed-attackers-are-using-predator-spyware-to-record-audio-hide-apps-and-more-heres-everything-you-need-to-know-about-it/articleshow/91782685.cms">Government-backed attackers are using Predator spyware to record audio, hide apps and more — here's everything you need to know about it</a>

Third-party apps connected to your car may be stealing your data

<ul><li><keyword id="6624175" type="COMPANY" weightage="20" keywordseo="CERN">CERN</keyword>, the European Organisation for Nuclear Research, has ended its partnership with Workplace by Facebook after a four-year trial period. </li><li>After Facebook introduced paid plans last year, CERN had the choice to either pay up and continue with its current plan or downgrade to the free version. </li><li>The free version would transfer the control of data to Facebook, a compromise that CERN felt was “unacceptable”. </li><li>The agency also claimed that paying for a tool that’s not integral to its community would not be justified. </li></ul>The European Organisation for Nuclear Research (CERN) has shunned Workplace by Facebook over <a href="https://www.businessinsider.in/tech/apps/news/facebook-data-breach-continues-more-than-a-year-after-cambridge-analytica/articleshow/71941273.cms">data privacy concerns</a>. It has further demanded that the tech giant need to remove all its content off of the platform. The agency claims that only 150 active users were using the app. This is a minuscule percentage of its 2,600 full-time employees and community of 18,000 users. "Representatives from HR, IT and IR worked together to carry out dedicated trials within their department/sector to gather feedback. Reactions were not always positive," <a href="https://home.cern/news/news/computing/cern-ends-trial-facebook-workplace">CERN</a> said in a statement. Facebook puts Workplace behind a paywall Facebook opened up Workplace for everyone to use in 2016. "In particular, for CERN, [Workplace by Facebook] made the enticing offer of waiving the fees and so we took the opportunity to test the platform," CERN said in a statement. Last year Facebook introduced new paid plans for its professional platforms, claiming that over 3 million users had subscribed in July 2019. According to the agency, Facebook offered CERN a choice. It could either continue by paying for the free setup or it could downgrade to the free version. The latter would remove administrative rights and give CERN sign-on access. The catch being that all <a href="https://www.businessinsider.in/tech/news/the-sins-and-virtues-of-data-privacy-experts-discuss-where-the-responsibility-lies/articleshow/73689240.cms">data would be sent to Facebook</a>. Losing control over data is “unacceptable” CERN decided that rather than lose control over its data, it would rather drop Facebook as its partner. It pointed out that it would be “unacceptable” to shell out money for a tool that’s not integral to the nuclear research agency. "Last October, we announced an update to our pricing and packaging. As part of this, we started renewal conversations with some of our customers and we're sorry CERN is no longer trialling Workplace," said Facebook. The move is a loss for Facebook and not just commercially. Gaining an endorsement from CERN — which is known for high-end scientific research like super collider — would have bolstered its claims of being a reliable platform. The move ends a four-year trial period between the agency and the tech giant. See also: <a href="https://www.businessinsider.in/tech/apps/news/facebook-data-breach-continues-more-than-a-year-after-cambridge-analytica/articleshow/71941273.cms">Facebook data breach continues more than a year after Cambridge Analytica</a> <a href="https://www.businessinsider.in/zuckerberg-facebook-more-privacy-focused-indian-government/articleshow/68301513.cms">Here’s why the Indian government may not like Mark Zuckerberg's Facebook post</a> <a href="https://www.businessinsider.in/facebook-india-head-explains-3-ways-that-indian-tech-startups-need-to-transform/articleshow/71327000.cms">Facebook India Head explains 3 ways that Indian tech startups need to transform</a>

You Searched For "Data privacy" and got 13 results

What happens on your iPhone doesn’t quite stay on your iPhone

Prabhjote Gill

Groups of foreign companies are lobbying against India's Personal Data Protection Bill

Prabhjote Gill

Digital Privacy and Data Security

Online Privacy and Data Security

The sins and virtues of data privacy — Experts discuss where the responsibility lies

Prabhjote Gill

Amazon dips as data privacy concerns hit Facebook

Kimberly Chin

India plans on handing over the reins of data privacy to the telecom industry watchdog

Prabhjote Gill

Here's how to keep your phone from getting hacked like Jeff Bezos, according to a cybersecurity expert

Prabhjote Gill

India's three main surveillance projects NATGRID, CMS and NETRA have been directed to stop collecting data citing breach of privacy

Prabhjote Gill

Nine years later, 80% of Indians are still not convinced the world’s largest biometric ID system is secure

Prabhjote Gill

India has millions of medical records online but no law to keep the data safe

Sanchita Dash

Third-party apps connected to your car may be stealing your data

IANS

Facebook gets rejected by CERN over data privacy concerns and high costs

Prabhjote Gill

Popular Keywords

Buying Guides