by winston » Wed Aug 12, 2009 9:05 am
Online privacy concerns arise as website lists personal data By Imelda Saad, Channel NewsAsia
Online privacy concerns arise as website lists individuals' home addresses
SINGAPORE: Here's something to think about in this digital world. How much of your personal data is available online, without your knowledge?
Authorities say while there is currently no law on online privacy in general, common law rules protect the confidentiality of an individual's personal data.
When engineer Chua Kim Cheng saw the "People Search" function at the Red Nano website, he decided to test it out. He typed in his name and was shocked to see his particulars and address listed. Full addresses of others living in the same housing block as him were also listed.
Mr Chua said he did not give any consent to SPH Search, which runs the Red Nano website, to list his personal details in the public domain. He said: "Imagine anybody can target the whole block and they can search the whole block, so it's even more sensitive this way. It would be very useful for marketing people... even loansharks would be interested to know.
"Anybody can send a mail to me or come to my house... (and say), 'Is Mr Chua in?' You would think that's a friendly person, could be a friend or relative coming, anybody will open the door."
SPH Search said its data sources are proprietary to the company and it is not at liberty to disclose information on it. Its "People Search" section is an opportunity for the public to extend their visibility, socially or professionally, on the Internet.
Red Nano has since taken down Mr Chua's particulars but there are many more names listed on the site.
Responding to Channel NewsAsia's queries, the Ministry of Information, Communications and the Arts (MICA) said there is a Model Data Protection Code in Singapore. But this is for voluntary adoption by the private sector.
It added: "The Model Code provides broad guidelines and principles on the proper management of personal information and it has been adopted by many companies, including those engaged in e-commerce under the TrustSG initiative."
Under the code, personal data may include an individual's name, age, medical records, spending habits, home address and phone number. The ministry said a company would be breaching common laws covering privacy if it did not get the individual's consent to make public his or her personal particulars.
The Media Development Authority gave this advice to online users: "We advise aggrieved individuals to seek professional legal advice to determine the most appropriate legal recourse. Individuals may also wish to contact the website directly for assistance in removing the information."
An inter-ministerial agency is currently reviewing Singapore's data protection regime to better safeguard the privacy of online users.
There is currently no established uniformed approach to deal with data protection and the committee is looking at various examples in countries like the US and Canada. The committee is made up of agencies such as the Trade and Industry and the Home Affairs ministries.
Experts said current laws lack punitive action and clearer guidelines are needed.
Tan Wei Ming, senior manager for government relations at Symantec Asia Pacific, said: "Nowadays, with the Internet age and with information stored everywhere, you could easily find your information floating around on the Internet and sometimes without yourself realising it!
"There are many reasons for that. For example, when you go to a social networking site, do you or do you not set the right privacy safeguards for your data? For example, you go to Facebook or other networking sites, they allow you to list down what you can and cannot be shared in the public domain," he added.
Mr Tan noted that many other websites are also posting personal details of individuals. He added areas that need to be addressed in the new regime include: what constitutes consent, what happens when data is collected, what the data will be used for, how it will be transferred and what needs to be done if data breaches occur.
- CNA/ir
It's all about "how much you made when you were right" & "how little you lost when you were wrong"