Why the GDPR Warning Might Warn You About Malicious Sites
You cannot login to any website or online platform without getting a pop-up asking your permission to access personal information. New and upcoming privacy laws may help limit how much information websites can ask for from you. They can also help you better detect fake and malicious sites.
So what is the so-called GDPR? And how can it help you stay away from malicious sites?
What is GDPR?
The GDPR is a privacy regulation since 2018 that applies to European companies and international companies operating in the region. GDPR stands for General Data Protection Regulation, and it aims to give people more control over their personal data.
Companies operating under the GDPR and their websites cannot collect any data without asking for explicit permission. While you can change your preferences later, if you accept a cookie from a website, it remembers your preferences and will not ask you when you visit the site again.
How can the GDPR help you identify malicious sites?
The sites comply with the GDPR, as they are required to by law. But websites of questionable origins and websites with little or no legal documentation are rarely held to the same standards. For example, if a site you’ve never visited before doesn’t ask you about your privacy preferences, it could be a fake website.
Of course, not asking for permission can also mean that the site doesn’t collect user data. However, in most cases, sites use cookies, so they have to comply with the GDPR. One way to tell the difference is if you interact with the site or change its settings—theme, font, or by clicking on a link—and whether the effect persists when you visit it again.
Just because you didn’t submit any credit card information or passwords doesn’t mean the site can’t collect valuable information about you. Cookies can store a lot of information that you input, such as your name, email address and phone number. Persistent cookies may keep a record of your log-in details, preferred settings, themes and bookmarks.
What should you do after visiting a fake site?
Start by clearing your browser’s cookies and removing any traces that a website can use to identify you the next time you visit it or one of its affiliated sites. If you entered any sensitive information, especially if the site connection is not encrypted, change it as soon as possible.
And get your security software to scan for viruses or any malicious content, just in case.
online
Mostly, your data is obtained through website cookies, account creation, subscription, or single sign-on practices. Other times, it’s through lead magnets such as email lists, webinar sign-up sheets, giveaways, and freebies.
Data obtained through online means can be anything: your full name, contact details, personal address, credit card details, or other forms of metadata. Together, this information can be used to understand things like your socioeconomic status, credit information, lifestyle, and purchasing habits.
offline
While it used to be possible for users to easily opt-out of data collection practices when offline, it’s not so straightforward these days. With the rise of wearables and smart home technology, needing your data in exchange for important tasks has become all too common.
Besides your smartphone, some common devices that regularly collect your data are smart speakers, smart cameras, smart scales, fitness watches, VR headsets, pocket printers, and more.
Data collected through these different types of hardware complements information already available through your online profile, helping to build a better picture of you as a consumer and individual.
Why you should care about data collection
Unfortunately, this picture of you provided to advertisers through detailed data is not always used to benefit your shopping habits. It may also affect your access to services, dynamic product pricing, and may expose you to questionable content if unsecured.
Most online advertising is harmless for now. Most companies receive your data to find out what, where and when they should sell their products or services to you. If you prefer to receive ads for relevant products that you would love to have in your home, that’s not an entirely bad thing.