Absolute AppSec - The Blog

A BLOG FOR THOSE WHO LIKE ABSOLUTE APPSEC AND BLOGS, TOO

4 May 2021

Two tensions governing privacy and data

by @absoluteappsec

Discussing data and privacy with Abine.com cofounder Rob Shavell

Protecting Data and Privacy

In an interesting episode of Absolute Appsec 133, Seth and Ken interviewed Abine.com cofounder Rob Shavell in a wide-ranging discussion concerning data and privacy.

In the historical context, according to Shavell, consumers have largely been persuaded that the promise of technology was worth ceding some privacy. But, since 2016 especially, social media users and online consumers have been made aware of the pitfalls of data tracking and the ways it can be exploited. If there is a tension between privacy and the promise of data-sharing, Shavell sees that a modicum of balance between these two values could start to be restored.

General Data Protection Regulation (GDPR) rules addressing privacy rights in Europe, are increasingly informing emerging privacy/data legal frameworks and future expectations concerning them in the United States. Shavell sees this as a positive development and a new phenomenon.

Coming from a background in venture spaces, Shavell has seen how his once contrarian stance that prioritized privacy over the technological offerings of data collection and sharing has been significantly mainstreamed. As a result, there’s money behind the interest in data and privacy protection.

For entrepreneurial developers, that means opportunity. Consumers who choosing from among several products or startup are much more likely to opt for or switch to the alternative that best protects personal data and privacy. And the rapid consumer adoption of Abine’s privacy suite: DeleteMe, Blur, and tracker blocker highlights increased interest in protecting personal data.

The second tension discussed in the episode related to the responsibility of developers in keeping privacy protections in mind while they work. Seth’s question elicited a considered response from Shavell. “Privacy by design” is a nice idea, according to Shavell, but decisions concerning how data is used is typically outside the developer’s authority. However, after Ken raised the concern of legal ramifications of a company’s exposure after potential data breaches, everybody agreed that there are significant incentives for developers to pay early attention to data protection in design phases.

Overall, there are reasons for optimism even with the privacy threats illustrated by technology that can be exploited (See, governments’ potential usage of facial recognition or AI). Please watch the rest of the episode here, subscribe to Absolute Appsec, or listen to us on your preferred podcasting platform.

tags: data - privacy - appsec - consumer