Stop Data Rape (How to Stop ID Theft, Part 2)

Definition and Description

The Data: Any data that has relevancy to you, but not to them

The Rape: Taking personal or sensitive data that is either not required for a given transaction (Movie store asking for a social security number before renting to you) or should be destroyed after a transaction, but isn't (Movie store keeping a database on exactly who rented what). Another example is how you are forced to create an account with an online retailer just to purchase something. In some cases, I have even had an account created for me without my permission when I called to make an order instead of doing it through the web.

Keeping control over who has access to what information about you is the very essence of privacy and data mining/brokering/sharing takes that control away.

Fixing the problem

A citizen should be able to control their own data. This does NOT mean that you should be able to just correct data, but that, minus being involved in crimes, you should exist in no databases against your will. All services should be usable without any personally identifiable information, or in the cases that such information is required (such as delivery of an item or billing), the data should be erased from all records, databases, backups etc. upon completion of the transaction.

For example: public libraries and video rental stores keep records of what is checked out, but they have no business keeping that data once the item has been checked back in. This serves no legitimate purpose and should be disallowed. They can keep information on what was checked out and when for organization and statistics, but the personal information should be removed.

Another example: If I make a credit card purchase online, I should not have to worry that they are keeping my card on file against my will. It should be used for the transaction only and then purged.

And another: I should not have to create an account with anyone for service. Forced registrations are identity rape and have no legitimacy in a consumer transaction. If I wanted to provide my data for easier checkout on return business, I would do so!

So, put simply, there needs to be stiff regulation of the storage and use of data.

They Can't Lose Data They Don't Have

There's a very simple philosophy I follow when it comes to data security. It doesn't matter how bad the security is or how smart the hackers are, if a company doesn't have my data, they can't lose it.

So remember every time there's a data breach and millions of customers' credit cards are stolen… It's not smart hackers, it's the data rapists who stored your information in the first place.