Privacy concerns among Internet users could be reduced if data was allowed to fade over time, suggests research.
Dutch researcher Dr. Harold van Heerde from the Centre for Telematics and Information Technology (CTIT) at the University of Twente
Privacy concerns among Internet users could be reduced if data was allowed to fade over time, suggests research.
Dutch researcher Dr. Harold van Heerde from the Centre for Telematics and Information Technology (CTIT) at the University of Twente, looked into ways to gradually “degrade” the information that sites gather about visitors. And he said that slowly swapping details for more general information could help guard against accidental disclosure.
“There are so many weak points in security that you can never be sure that your data is safe,” the BBC quoted van Heerde as saying. The ability of databases to gather information tempts companies and organisations to hoard information just in case it proves valuable, said van Heerde. The dangers of having data about us stored more or less permanently in many different places around the web have been proved many times when that information is leaked by accident or design, he added.
“People make mistakes, people can be bribed. You cannot protect this data, you cannot be sure it’s not been disclosed, privacy policies are simply too weak,” he said. Rather than simply refusing to use services that gather data, van Heerde believes it would be better for people to surrender data knowing that there was a policy that determined how it degraded over time. At initial use to secure a transaction or get useful information from a search all relevant details might be stored. And with time, details would slowly be swapped for more general information.
In the case of a location-specific search information about a user’s exact GPS co-ordinates could be swapped for a street name, then a neighbourhood and then just a city. “You can slowly replace details with a more general value,” he said.
Apart from limiting the impact of any disclosure, such a policy might also force companies to be more explicit about what data they gather and what they will use it for. “In most cases there’s no good reason for them storing data for so long,” he said.