Describe the risks to privacy from collecting and storing personal data on a computer system.
IOC-2.A.1 Personally identifiable information (PII) is information about an individual that identifies, links, relates, or describes them. Examples of PII include:
- Social Security number
- age
- race
- phone number(s) )
- medical information
- financial information
- biometric data
IOC-2.A.2 Search engines can record and maintain a history of searches made by users.
IOC-2.A.3 Websites can record and maintain a history of individuals who have viewed their pages.
IOC-2.A.4 Devices, websites, and networks can collect information about a user’s location.
IOC-2.A.5 Technology enables the collection, use, and exploitation of information about, by, and for individuals, groups, and institutions.
IOC-2.A.6 Search engines can use search history to suggest websites or for targeted marketing.
IOC-2.A.7 Disparate personal data, such as geolocation, cookies, and browsing history, can be aggregated to create knowledge about an individual.
IOC-2.A.8 PII and other information placed online can be used to enhance a user’s online experiences.
IOC-2.A.9 PII stored online can be used to simplify making online purchases.
IOC-2.A.10 Commercial and governmental curation of information may be exploited if privacy and other protections are ignored.
IOC-2.A.11 Information placed online can be used in ways that were not intended and that may have a harmful impact. For example, an email message may be forwarded, tweets can be retweeted, and social media posts can be viewed by potential employers.
IOC-2.A.12 PII can be used to stalk or steal the identity of a person or to aid in the planning of other criminal acts.
IOC-2.A.13 Once information is placed online, it is difficult to delete.
IOC-2.A.14 Programs can collect your location and record where you have been, how you got there, and how long you were at a given location.
IOC-2.A.15 Information posted to social media services can be used by others. Combining information posted on social media and other sources can be used to deduce private information about you.