Beware: Your data could be traced and sold

By Muthoga Kioni

The arrival of Seacom undersea fibre optic cable and others will provide broadband in East Africa that previously relied on expensive and slower satellite connections.

This development will, in the long run, provide cheaper Internet access. We shall witness a few interesting trends.

One of the most obvious realities to contend with is the sheer amount of our personal information that will appear on cyber space.

Cheaper access to technology will make it possible for the Government and other entities to automate their records. This automation will make it possible for someone to easily scan for your personal details, especially in sites that trade personal information.

For example, financial institutions with an online presence often ask you for your mother’s maiden name as a security word. You will soon discover that this name, and other security phrases, will be publicly available on the Internet. This will happen when the births, marriages and death records will be automated and digitally published.

Linking your searches through these disparate databases will easily yield your personal information. Your details are, therefore, traceable and sellable.

Valuable Information

Kenyans will now be forced to discard their nonchalant attitude towards their personal information.

Kenyan companies have traditionally been crucial custodians of our information. They unfortunately don’t appreciate how valuable this personal data is and that they hold it on trust for their clients.

Most companies feel that people have given them their personal information and they can use it to run their business in any way they like. Until recently, banks implemented more stringent measures in looking after your money than your personal information. Fortunately, the financial sector has changed its mindset and is currently in the forefront of data protection. There are many other companies that need to practice duty of care.

Taking care of data is a complex affair. Unlike money, if data is stolen or lost, the original is usually left in place and the sense of loss is therefore minimised.

Next week, I will outline what local firms need to do to safeguard data and the regulatory and compliance requirements needed to force these organisations to invest more in taking care of our personal information.

The writer is an ICT Security and Forensic Specialist. Email: [email protected]