‘Risky to part with your personal data’
The massive participation of Internet users in the #10YearChallenge has shocked cyber experts to the core as millions of people are sharing their personal and sensitive information on the Internet platform without thinking of its risky repercussions.
Pune: The massive participation of Internet users in the #10YearChallenge has shocked cyber experts to the core as millions of people are sharing their personal and sensitive information on the Internet platform without thinking of its risky repercussions. Experts pointed out that people are sharing their biometric data which can be a gold mine for advertising agencies, fraudsters and other persons.
“You may never know how your personal data can be used. We are well aware of spoof identities and at the rate at which people are sharing their crucial information it becomes quite easy to cheat you. We use our photo in PAN card, Aadhaar card and other identities,” said cyber expert and Founder of NetConclave Systems, Niranjan Reddy.
“Everyone is participating in the challenge without thinking about the damages,”Reddy added.
Reddy, however, is also puzzled that why has the #10YearChallenge cropped up in 2019, hinting at the future risks of sharing such massive data on the Internet.
“Such collection of data is indeed prohibited in many countries but in India, we are yet to have laws on it,” added Reddy.
Another cyber expert Pankajj Ghode, Founder and Chairman of Global Blockchain Foundation, said that it is indeed risky for people to share their data. Speaking about the challenge being part of data collection for facial recognition, Ghode said that the world is moving on to biometric identity and here is a clear trap to collect your identity.
Another cyber expert Anil Raj of Cybervault Securities Solution Private Limited said that while there is no such incident of misuse of data collected through the challenge it does not mean that the data will not be used in coming future. “People are currently sharing it on the social media sites for fun, but an analysis of the images under the ‘10 year challenge’ talks about identity of people, how people have changed, socio-economic standard of people, change location of people in 10 years, their change in association in 10 years and lots more which becomes a goldmine for companies. People can study several patterns in shared images and so the challenge can be risky. An absconding criminal would easily get caught in police trap if he takes the challenge,” added Raj.
Speaking on the challenge, Vinayak Lashkar, Assistant Professor of Sociology at TC College in Baramati said that people want to be valued and be part of a common platform and so the trend has gone viral. “People just want to contribute in common system so that they do not feel left out and isolated. In such case people do not think of future risks involved by their behaviour,” added Lashkar.
Don’t fall for #10yearchallenge
What does the draft Personal Data Protection Bill by Ministry of Electronics and Information Technology state?
‘Biometric data’ means facial images, fingerprints, iris scans or any other similar personal data resulting from measurements or technical processing operations carried out on physical, physiological, or behavioural characteristics of a data principal, which allow or confirm the unique identification of that natural person.
Sensitive personal data
‘Sensitive personal data’ means personal data revealing, related to, or constituting, as may be applicable.
Data protection impact
Where the data fiduciary intends to undertake any processing involving new technologies or large scale profiling or use of sensitive personal data such as genetic data or biometric data, or any other processing which carries a risk of significant harm to data principals,
such processing shall not be commenced unless the data fiduciary has undertaken a data protection impact assessment in accordance with the provisions of this section.
Bar on processing certain forms of biometric data
No data fiduciary shall process such biometric data as may be notified by the Central Government unless such processing is permitted by law.