Why worry about my data If I have nothing to hide?

In a story from February, how companies collect your personal data and compile it into a profile for advertisers, ICE, and other agencies.

• 0:00Speaker 00

  WNYC is supported by Bear. Science is about asking questions, testing, trying again. It's not easy, but it's relentless. It evolves, and that's why science delivers. Learn more at sciencedelivers.com.

• 0:17Speaker 01

  Hey, it's Flora and you're listening to Science Friday. In the last couple of months, Vermont, Alabama, and Oklahoma have passed their own data privacy laws. Massachusetts is negotiating its own version now. Meanwhile, congressional lawmakers have introduced national privacy bills that would preempt these state laws. In light of all this legislation, we're revisiting an interview we did earlier this year all about your data and how exactly it's used by law enforcement. From facial scanning to private health records to location tracking, how does the US's data ecosystem make it possible,

• 0:58Speaker 01

  not just for ICE, but other government agencies and businesses to buy our private data? And what actually happens after we send that DM or open up Instagram at a protest to post a picture? Here to help is Laura Moy, Associate Professor of Law at Georgetown Law. She's testified in Congress about privacy laws and how data brokers profit off of personal data. And she's partnering with organizations that work for stronger privacy laws. Laura, welcome to Science Friday.

• 1:31Speaker 02

  Hi.

• 1:32Speaker 01

  All right, you know, I think we've all heard that we can be tracked, but I want to get into the details. What does that mean exactly? Are we talking about my messages, my DMs, my car? Walk us through it.

• 1:46Speaker 02

  We're pretty much talking about all of the above. So we all carry a very powerful tracking and computing device with us everywhere we go now. It's our smartphone. And people take them in the car with them when they go to work. They take them when they go pick up their kids from school. They take them to church when they go to worship. And some people even take them in the shower. And all of that time, those devices are generating all kinds of information about us, where we go, who we communicate with, what apps we like to use, what websites we like to browse. And any and all of that information might be subject to collection.

• 2:30Speaker 02

  And in addition to that, you mentioned cars. We also have license plates on our cars. And as I think most folks are aware, there are cameras everywhere now that track where our cars are going. We might see them as red light cameras, or speeding cameras, or maybe parking garage cameras. And to private companies, and then to those that purchase information from private companies like the government. And then in addition to that, there's information about ourselves that even if we don't have a phone or a car with us when we're going somewhere, we can't help but share. And that's our faces. You mentioned facial recognition technology that ICE is now using.

• 3:15Speaker 02

  We carry that information with us everywhere we go. And a government agency that wants to deploy a powerful technology to try to identify us out in the field can now do that just using a mobile app on their end. ICE has a really powerful app now called Mobile Fortify. And it is error prone. It has misidentified multiple people. But ICE is using it to try to identify people as they are out in the field.

• 3:45Speaker 01

  Can you opt out of any of this? I mean, obviously, you can't opt out of your face or your car getting scanned. But what about your phone? Like, does it come down to turning off location services? Or is it way beyond that?

• 3:59Speaker 02

  I think for the average person, it is way beyond that. Actually, honestly, even for a pretty tech savvy person, it's way beyond that. There are some things that we can turn location services off. And then we know that our information isn't being shared directly with that app. However, some of the information that has come out about location tracking companies that sell location information to government agencies suggests that sometimes location tracking is happening in other ways. For example, through mobile ad spots. When you look at a website or an app on your phone and you see an advertisement in it,

• 4:43Speaker 02

  you might think that that advertisement is being shared with you based on what's on the website or the app that you're viewing. In reality, that advertisement might be being placed in a very short moment based on information about you that is sent to an advertising network. And then the advertising network determines the most appropriate ad to display to you. And the information that goes out about you to the advertising network often includes location data. And that can happen even if you're not aware that you're sharing location data by visiting that website. So there's, there are some things that we can maybe opt out of. There's a lot that we can't.

• 5:27Speaker 02

  And then, of course, for folks who have to drive places, we really can't do anything about sharing location through our license plates. You have to have a license plate on your car.

• 5:37Speaker 01

  And what about, you know, if your, if your social media account is private, for example? Is that a meaningful distinction in terms of how that data gets tracked and sold?

• 5:49Speaker 02

  It is still a meaningful distinction, but it's certainly not an airtight way to protect ourselves. And I guess one other thing that I'd say about that is even when you're sharing information over social media privately with folks that you know and are connected to, there's always a possibility that the network itself, that the social media provider, is also gaining insight into your activity through that service. And there's no perfect guarantee that that information can't be mined to gain insights about you, either by the social media company or maybe eventually by the administration.

• 6:25Speaker 01

  Hmm, you know, I want to trace how our data is collected and then where it goes, sort of beginning to end. So we've been talking about the sort of data gathering. Then who takes it and where does it go?

• 6:41Speaker 02

  Yeah, it's so confusing because that data can go so many different places. When a person is using their cellphone, something that they may not realize is that they are sharing information with their cellphone provider, their cell service provider, also with the maker of the cellphone, also with every social media service or app that they use, also with advertisers through websites and through email and other communications that they have. They're just kind of constantly sharing information with many, many different parties through that device. So you kind of asked what happens to that information. A lot of that information then gets kind of vacuumed up, bought up,

• 7:25Speaker 02

  by what are called data brokers, these companies that specialize in collecting information from lots of different sources and aggregating it, and then repackaging it and reselling it, or selling access to that information to others that might want it. And in most cases, that's advertisers or marketers who want to gain your attention and your interest in products. They want to sell you things. But sometimes it's the government. And I think that that's one thing that has become really, really clear in recent months is that this administration, perhaps more than ever before,

• 8:03Speaker 02

  has been using those commercial resources, the resources available through data brokers, to track people down, again, for purposes of finding people and deporting people, for figuring out where they live and where they work so that it can capture them at those places, or to locate folks for the purpose of suppressing dissent.

• 8:27Speaker 01

  I mean, how integrated is this data collection? Like, are data brokers able to combine my location data, you know, the fact that I was at a protest, and my healthcare data that says I have a pre-existing condition, and my social media, and, you know, where I went in my car into one profile? Or is it piecemeal and owned by different companies?

• 8:54Speaker 02

  I think that the fact that that information can be combined is one of the things that is scariest about advances in computing and advances in data processing. Right? So I think most people think that it would be really difficult to combine all that information about them. And they think, not only do I have nothing to hide, but also nobody would ever be so interested in me that they would combine all of that information, that they go through all that trouble. But the reality is, is that that process can be done at scale in an automated way really quickly. And cross referencing of different data sources is actually quite trivial. So if I can just link it back again to ICE,

• 9:39Speaker 02

  one of the things that folks may have been reading about in the news is about ICE's relationship with a big company called Palantir. And one of the things that Palantir's platform does that makes it such a powerful and frankly terrifying platform is that it does link data from lots of different sources and enable ICE very quickly to pull from all of those different sources about one person, and even to add its own information gathered from agents out in the field to the network of data sources. So just to make that concrete, what does that look like? That looks like data brokers that collect information about you from advertising networks,

• 10:24Speaker 02

  combined with location data brokers that hold information about the location of your phone and everywhere that you've been in the past month, combined with information about you from the driver's license database in your state that contains a high resolution photograph of your face, along with your address, combined with, you know, with any other number of other records, not only about you, but about all of your family and associates that you're close with.

• 10:56Speaker 01

  It's shocking. I mean, I think, I just want to underline this because I think you're right. I think a lot of people think, well, the scale of this data must provide some anonymity. It's just too much. But what I'm hearing you say is that that's wrong.

• 11:12Speaker 02

  Yeah, I think that's, I think that that's wrong. And I think that it used to be true, at least to some extent. And as I said, I think that due to advances in automated data analysis techniques, it's just not true anymore.

• 11:30Speaker 01

  Why do we not have laws to protect our private data? I grew up when you had to get a warrant for, you know, a phone tap. What happened?

• 11:40Speaker 02

  I mean, you still do, right? You know, in theory, at least, we still have the Fourth Amendment that protects us from certain unwarranted access to and collection of information. But why do we not have privacy laws? There's a variety of factors. One of them is that, as I kind of mentioned before, the technological landscape has changed dramatically in a relatively short period of time, and laws haven't kept up. In addition to that, I think, you know, some folks will know that there have been multiple efforts to try to pass a comprehensive privacy law that would kind of mandate things like

• 12:22Speaker 02

  data minimization and a deletion horizon that says that companies that are collecting your information have to delete it after a certain period of time, that would kind of create some baseline rights for people and also prohibit the use of our private information for being used for nefarious purposes. Those laws just haven't managed to pass at the federal law. There's been a little bit more progress at the state level, but I think it's still too early in those efforts to see whether those state laws are really going to protect folks from misuses of their information by companies that sell it to agencies like ICE.

• 13:03Speaker 02

  And I guess another thing that I would say is that the companies that don't want strong privacy laws fight tooth and nail against a privacy law that might threaten to limit the amount of, for example, again, location information that they can have about an individual. Because if I know where you go every day, I know where your kids go to school, and I know where you worship, and I know where you shop, then I can really successfully target my advertisements to you. And that makes that information valuable. It makes it very threatening to companies that advertise and companies that depend

• 13:44Speaker 02

  on advertising to see if privacy laws potentially passed that protect the location of our phones and our cars. So I think that that's another big reason that we don't have strong privacy laws that are very clearly protecting the location of our phones.

• 14:03Speaker 01

  What are your personal privacy protocols?

• 14:06Speaker 02

  Hmm. I opt out of information and data sharing whenever I can. I use encrypted communications whenever I can.

• 14:22Speaker 01

  Like Signal?

• 14:23Speaker 02

  Yes, like Signal. And that gives me some comfort. And I try to remain aware of the fact that I may be tracked wherever I go. But, you know, I mean, I know, it's really, it's not a huge comfort. It's not a huge comfort. We need to solve this problem, not at an individual level, but at a societal level. And the way to do that is through legislation and policy. That's why I do the policy work that I do. And it's why I think that folks really should care about privacy laws and trying to get them passed and advocating for stronger protections, paying particular attention, not just to

• 15:07Speaker 02

  their individual rights as consumers, but to the protection of information that is likely to be misused to go after the most oppressed and most targeted among us. And right now, you know, we see that that is immigrant and mixed status communities, but sometimes it is low-wage workers, right? There are folks who get targeted for nefarious uses of data. And we really should be passing stronger privacy laws to protect those folks.

• 15:41Speaker 01

  Laura Moy is an associate professor of law at Georgetown Law. Laura, thank you so much for taking the time.

• 15:47Speaker 02

  Thank you. I really appreciate you covering this important topic, and it was a pleasure speaking with you.

• 15:53Speaker 01

  My pleasure, too. This episode was produced by Dee Peterschmidt. And if you'd like to get this podcast delivered to you by Passenger Pigeon after hearing this episode, please let us know, along with any other thoughts, questions, or feelings. 877-4SYFRI. We really do always love to hear from you. 877-4SYFRI. Thank you for listening. I'm Flora Linkman.