{"id":8228,"date":"2023-08-31T15:56:12","date_gmt":"2023-08-31T19:56:12","guid":{"rendered":"https:\/\/joindeleteme.com\/blog\/?p=8228"},"modified":"2024-10-18T17:42:19","modified_gmt":"2024-10-18T21:42:19","slug":"september-2023-data-brokers-get-your-information-wrong","status":"publish","type":"incognito","link":"https:\/\/joindeleteme.com\/incognito\/september-2023-data-brokers-get-your-information-wrong\/","title":{"rendered":"Incognito \u2014 September 2023: What happens when data brokers get your information wrong?"},"content":{"rendered":"\n<div class=\"wp-block-rank-math-toc-block uk-card-default uk-padding-small\" style=\"font-size:16px\" id=\"rank-math-toc\"><h4>Table of Contents<\/h4><nav><ul><li><a href=\"#most-data-broker-information-is-inaccurate\">Most Data Broker Information Is Inaccurate\u00a0<\/a><\/li><li><a href=\"#why-wrong-data-is-dangerous\">Why Wrong Data is Dangerous<\/a><\/li><li><a href=\"#how-erroneous-broker-data-can-affect-you\">How Erroneous Broker Data Can Affect You<\/a><\/li><li><a href=\"#correcting-the-incorrect-and-other-steps-you-can-take\">Correcting the Incorrect and Other Steps You Can Take<\/a><\/li><li><a href=\"#recommended-reads\">Recommended Reads<\/a><\/li><li><a href=\"#you-asked-we-answered\">You Asked, We Answered<\/a><\/li><li><a href=\"#back-to-you\">Back to You<\/a><\/li><\/ul><\/nav><\/div>\n\n\n\n<p>Welcome to the September 2023 issue of Incognito, the monthly newsletter from DeleteMe that keeps you posted on all things privacy and security.<\/p>\n\n\n\n<p>Here\u2019s what we\u2019re talking about this month:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>What happens when data brokers get your information wrong?&nbsp;<\/li>\n\n\n\n<li>Recommended reads, including \u201cCybercriminals Spreading Fake AI Bots.\u201d<\/li>\n\n\n\n<li>Q&amp;A: Can I just ask a company to delete my data?<\/li>\n<\/ul>\n\n\n\n<p>That job you had all the credentials for but didn\u2019t get. The rental application you were denied. An unexpectedly higher insurance premium. What happened?&nbsp;<\/p>\n\n\n\n<p>Maybe there was a good reason why things didn\u2019t work out. Or maybe it was a data problem.&nbsp;<\/p>\n\n\n\n<p>From employers and landlords to insurers and law enforcement agencies, many of the third parties we interact with rely on information from data brokers to make decisions about us.&nbsp; When this information is incorrect, it can lead to lost opportunities and even traumatic interactions.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"most-data-broker-information-is-inaccurate\">Most Data Broker Information Is Inaccurate&nbsp;<\/h2>\n\n\n\n<p>It\u2019s data brokers\u2019 business to know everything about our lives and sell comprehensive profiles about us to anyone who wants them. The problem? A lot of the time, at least some of the information in these profiles is&nbsp; \u201c<a href=\"https:\/\/www.forbes.com\/sites\/kalevleetaru\/2018\/04\/05\/the-data-brokers-so-powerful-even-facebook-bought-their-data-but-they-got-me-wildly-wrong\/?sh=250ca7c93107\" target=\"_blank\" rel=\"noreferrer noopener\">wildly wrong<\/a>.\u201d&nbsp;<\/p>\n\n\n\n<p>40% of information data brokers have on people is inaccurate or no longer accurate, <a href=\"https:\/\/www.lix.polytechnique.fr\/~goga\/papers\/databrokers-measurement_finalCameraReady.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">according to one report<\/a>, a finding <a href=\"https:\/\/stratcomcoe.org\/publications\/data-brokers-and-security\/17\" target=\"_blank\" rel=\"noreferrer noopener\">confirmed by NATO<\/a>.&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>All data categories seem to have mediocre accuracy, including financial information and other data that may be used in background or credit checks.&nbsp;<\/li>\n\n\n\n<li>This finding appears to bear out in real life. After requesting her profile from a data broker, a <a href=\"https:\/\/www.theatlantic.com\/technology\/archive\/2017\/06\/online-data-brokers\/529281\/\" target=\"_blank\" rel=\"noreferrer noopener\">reporter for The Atlantic found<\/a> that nearly 50% of the information in it was incorrect.&nbsp;<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"why-wrong-data-is-dangerous\">Why Wrong Data is Dangerous<\/h2>\n\n\n\n<p>For people who hate the idea of someone else knowing their business, the fact that data brokers have incorrect information about them may seem like a good thing.&nbsp;<\/p>\n\n\n\n<p>Sadly, that\u2019s not true. The fact is that third parties use data brokers to make important life decisions on our behalf. If they have erroneous information on you, that could harm you. And the worst part? You never get to find out why. Imagine being not able to make important transactions, receiving higher premiums, or being denied service, all without reason.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"how-erroneous-broker-data-can-affect-you\">How Erroneous Broker Data Can Affect You<\/h2>\n\n\n\n<p>Here are some ways inaccurate or incorrect data broker information can affect your life.&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Rising insurance premiums. <\/strong>Insurers use data broker information to <a href=\"https:\/\/techpolicy.sanford.duke.edu\/wp-content\/uploads\/sites\/4\/2021\/08\/Data-Brokers-and-Sensitive-Data-on-US-Individuals-Sherman-2021.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">predict costs<\/a> and false information &#8211; like being placed in a \u201cbiker enthusiast\u201d category when you\u2019ve never ridden a motorbike in your life or having \u201csmoker in household\u201d on your report &#8211; could massively inflate your premiums.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Denial of rental application. <\/strong>One <a href=\"https:\/\/themarkup.org\/locked-out\/2020\/05\/28\/access-denied-faulty-automated-background-checks-freeze-out-renters\" target=\"_blank\" rel=\"noreferrer noopener\">prospective tenant\u2019s report<\/a> said she sold meth, drove without insurance, stole, lied to a police officer, and engaged in other illegal activities. In fact, she hadn\u2019t done any of those things, and the data was pulled from the records of four different women with the same name and one woman who used her name as an alias.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Lost job opportunities.<\/strong> In a hearing before the committee on commerce, science, and transportation, an attorney and privacy consultant described how one of her clients was laid off from his high-paying job and denied employment for two years, even though he had great recommendations. The reason: his data broker profile said he had three DUIs and an arrest for murder &#8211; none of which was true. A similar situation led to another person<em> <\/em><a href=\"https:\/\/www.pbs.org\/newshour\/show\/mistaken-identity-background-checks-can-cost-applicants-job-offers\" target=\"_blank\" rel=\"noreferrer noopener\">losing out on a job<\/a> because his report falsely claimed he was convicted of drunk driving, attempted petit larceny and forgery, and had two stints in jail. Two data brokers even <a href=\"https:\/\/www.ftc.gov\/news-events\/news\/press-releases\/2014\/04\/two-data-brokers-settle-ftc-charges-they-sold-consumer-data-without-complying-protections-required\" target=\"_blank\" rel=\"noreferrer noopener\">had to pay fines<\/a> for sending employers reports saying an applicant could be on a sex offender list based on just their first and last name.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Wrongful arrests that are impossible to erase and incorrect application of force. <\/strong>Minor errors can lead to catastrophic consequences. <a href=\"https:\/\/www.brennancenter.org\/our-work\/analysis-opinion\/data-brokers-know-lot-about-you-what-do-you-know-about-them\" target=\"_blank\" rel=\"noreferrer noopener\">Renata and Chris Simmons<\/a> found this out the hard way when the police shot their dog after mistaking their home as the home of a man with a very similar last name (Simpson) when they were trying to serve a warrant.&nbsp;<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"correcting-the-incorrect-and-other-steps-you-can-take\">Correcting the Incorrect and Other Steps You Can Take<\/h2>\n\n\n\n<p>Some data brokers let you correct the information they have on you, but not all. Legally, your rights also depend on what state or country you live in. But even if all data brokers allowed you to correct your information, tracking all these companies down would be a massive feat.&nbsp;<\/p>\n\n\n\n<p>We also don\u2019t necessarily recommend giving data brokers more data. It makes much more sense <a href=\"https:\/\/joindeleteme.com\/blog\/opt-out-guides\/\" target=\"_blank\" rel=\"noreferrer noopener\">to opt-out<\/a>, and keep opting out, of data broker databases.&nbsp;<\/p>\n\n\n\n<p>You can also take action to reduce the likelihood that incorrect data about you will find its way into data broker databases in the first place. Small steps like using a privacy-first browser and being mindful about the kinds of apps you download on your phone won\u2019t make you invisible to data brokers, but they will help reduce the amount of data, including potentially incorrect data (like if you google a medical condition a friend has, and it suddenly becomes part of your profile) these entities can collect about you.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"recommended-reads\"><strong>Recommended Reads<\/strong><\/h2>\n\n\n\n<p>Our recent favorites to keep you up to date in today\u2019s digital privacy landscape.&nbsp;<\/p>\n\n\n\n<p id=\"AI\"><strong>Cybercriminals Spreading Fake AI Bots<\/strong><\/p>\n\n\n\n<p>Criminals are buying ads for fake artificial intelligence (AI) bots. This was <a href=\"https:\/\/www.welivesecurity.com\/en\/scams\/a-bards-tale-how-fake-ai-bots-try-to-install-malware\/\" target=\"_blank\" rel=\"noreferrer noopener\">discovered by an ESET security researcher<\/a> who saw an ad for the latest version of Bard, Google\u2019s AI tool, on Facebook. Upon investigation, he found several discrepancies, including oddities in the ad\u2019s language and a site hosted on Google\u2019s cloud infrastructure but with content not related to Google. The researcher warned of other examples he has encountered, including \u201cmeta AI.\u201d<\/p>\n\n\n\n<p id=\"google\"><strong>Google Launches New Privacy Tools<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"551\" src=\"https:\/\/joindeleteme.com\/wp-content\/uploads\/2023\/08\/firmbee-com-31OdWLEQ-1024x551.webp\" alt=\"\" class=\"wp-image-8230\" style=\"width:589px;height:317px\" srcset=\"https:\/\/joindeleteme.com\/wp-content\/uploads\/2023\/08\/firmbee-com-31OdWLEQ-1024x551.webp 1024w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2023\/08\/firmbee-com-31OdWLEQ-300x161.webp 300w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2023\/08\/firmbee-com-31OdWLEQ-768x413.webp 768w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2023\/08\/firmbee-com-31OdWLEQ-1536x826.webp 1536w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2023\/08\/firmbee-com-31OdWLEQ.webp 2000w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Google is <a href=\"https:\/\/blog.google\/products\/search\/new-privacy-tools\/\" target=\"_blank\" rel=\"noreferrer noopener\">rolling out new tools<\/a> to help users maintain their privacy online. This includes a \u201cresults about you\u201d dashboard where you can see if your personal information appears on Google Search without having to do the search yourself and the ability to receive notifications when more information is uploaded. Google will now also let users remove explicit or graphic images of themselves from Google Search.&nbsp;<\/p>\n\n\n\n<p id=\"linkedin\"><strong>LinkedIn Account Hijacking Campaign Underway&nbsp;<\/strong><\/p>\n\n\n\n<p>Across the globe, LinkedIn users are <a href=\"https:\/\/cyberint.com\/blog\/research\/linkedin-accounts-under-attack-how-to-protect-yourself\/\" target=\"_blank\" rel=\"noreferrer noopener\">losing their accounts<\/a> to hackers who are using brute force methods or leaked credentials. While the motive for the campaign is unclear, LinkedIn accounts can be used for data gathering, phishing, and job offer scams. Researchers at Cyberint have also noted that some users had their LinkedIn accounts deleted while others received small ransom requests.<\/p>\n\n\n\n<p id=\"musk\"><strong>Elon Musk\u2019s X Testing New Identity Verification Feature<\/strong><\/p>\n\n\n\n<p>X, formerly Twitter, is asking Blue (premium) subscribers to <a href=\"https:\/\/uk.pcmag.com\/social-media\/148267\/verifying-your-identity-on-twitter-will-require-taking-a-selfie\" target=\"_blank\" rel=\"noreferrer noopener\">verify their identity<\/a> with a selfie and a photo of a government-issued ID. In doing so, users must also agree to X storing their biometric and other data from their profile for up to 30 days for safety and security purposes. The personal information is handled by an Israeli identity verification and management company called Au10tix.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"you-asked-we-answered\"><strong>You Asked, We Answered<\/strong><\/h2>\n\n\n\n<p>Here are some of the questions our readers asked us last month.<\/p>\n\n\n\n<p id=\"email\"><strong>Q: <\/strong>What can someone do with my email address?<\/p>\n\n\n\n<p><strong>A: <\/strong>Great question!&nbsp;<\/p>\n\n\n\n<p>With just your email address, someone can:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Find more personal information about you via people finder sites with a reverse email lookup feature.<\/li>\n\n\n\n<li>Spam you.&nbsp;<\/li>\n\n\n\n<li><a href=\"https:\/\/www.reddit.com\/r\/ProtonMail\/comments\/x2vpjs\/someone_falsely_using_my_email_to_make_hundreds\/\" target=\"_blank\" rel=\"noreferrer noopener\">Make hundreds of accounts on different websites<\/a> using your email.&nbsp;<\/li>\n\n\n\n<li>Send you phishing emails.&nbsp;<\/li>\n\n\n\n<li>Spoof your email, i.e., pretend to be you to someone else.<\/li>\n\n\n\n<li>Hack into your online accounts, including your email account. Many websites let you use your email address as your username, which means someone could log into your accounts if your passwords are weak or already available for sale on the dark web.<\/li>\n<\/ul>\n\n\n\n<p>For this reason, it\u2019s generally considered a good idea to <a href=\"https:\/\/krebsonsecurity.com\/2022\/08\/the-security-pros-and-cons-of-using-email-aliases\/\" target=\"_blank\" rel=\"noreferrer noopener\">use email aliases<\/a>. You should also always use strong passwords and multi-factor authentication whenever possible and remove your personal information from data brokers and people search sites.&nbsp;<\/p>\n\n\n\n<p id=\"delete\"><strong>Q: <\/strong>Can I just ask any company to delete my data?<\/p>\n\n\n\n<p>You can definitely ask. But whether the company complies with your request will depend on where you\u2019re based, the kind of data you\u2019re talking about, how that data was collected, and the company in question.&nbsp;<\/p>\n\n\n\n<p>For example, under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California citizens can ask companies to delete personal information that the company collected about them from them themselves. If a company collected a California citizen\u2019s personal information in some other way, such as buying it from data brokers or acquiring it from another third party, they wouldn\u2019t be obliged to delete it.<\/p>\n\n\n\n<p>Also, even if the data was collected from California consumers themselves, a business may still legally refuse to delete it under certain circumstances, like if they need it to detect fraudulent, malicious, or illegal activity or comply with legal obligations.&nbsp;<\/p>\n\n\n\n<p>An <a href=\"https:\/\/www.washingtonpost.com\/technology\/2021\/09\/26\/ask-company-delete-personal-data\/\" target=\"_blank\" rel=\"noreferrer noopener\">article from The Washington Post<\/a> goes over the process of how you can go about requesting that a company delete your data.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"back-to-you\"><strong>Back to You<\/strong><\/h2>\n\n\n\n<p>We\u2019d love to hear your thoughts about all things data privacy.<\/p>\n\n\n\n<p><strong>Get in touch with us.<\/strong> We love getting emails from our readers (or tweet us <a href=\"https:\/\/twitter.com\/deleteme\" target=\"_blank\" data-type=\"link\" data-id=\"https:\/\/twitter.com\/deleteme\" rel=\"noreferrer noopener\">@DeleteMe<\/a>).<\/p>\n\n\n\n<p><strong>Don&#8217;t forget to share!<\/strong> If you know someone who might enjoy learning more about data privacy, feel free to forward them this newsletter. If you&#8217;d like to subscribe to the newsletter, <a href=\"https:\/\/joindeleteme.com\/incognito\/\" target=\"_blank\" rel=\"noreferrer noopener\">use this link<\/a>.<\/p>\n\n\n\n<p><strong>Let us know. <\/strong>Are there any specific data privacy topics you\u2019d like us to explore in the upcoming issues of Incognito?&nbsp;<\/p>\n\n\n\n<p>That\u2019s it for this issue of Incognito. Stay safe, and we\u2019ll see you in your inbox next month.&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Welcome to the September 2023 issue of Incognito, the monthly newsletter from DeleteMe that keeps you posted on all things privacy and security. Here\u2019s what we\u2019re talking about this month:&nbsp; That job you had all the credentials for but didn\u2019t get. The rental application you were denied. An unexpectedly higher insurance premium. What happened?&nbsp; Maybe [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":7499,"menu_order":0,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-8228","incognito","type-incognito","status-publish","format-standard","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/incognito\/8228","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/incognito"}],"about":[{"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/types\/incognito"}],"author":[{"embeddable":true,"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/users\/14"}],"version-history":[{"count":0,"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/incognito\/8228\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/media\/7499"}],"wp:attachment":[{"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/media?parent=8228"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}