TechKnowSurge
CompTIA Tech+ 1.4 CompTIA Tech+ 6.1 CompTIA A+ Core 2 4.6 CompTIA Server+ 3.1 CompTIA Tech+ 6.3
VideoComputeFree

Privacy Considerations

Privacy in the digital age means understanding how personal data is collected, stored, and shared across software, services, and communication platforms. From email and social media to AI tools and file sharing, protecting personal information requires awareness of where data goes and who controls it.

Complete this video to capture a CTF flag worth 1 point.

About this video

Privacy refers to freedom from unauthorized observation or intrusion, and it has become one of the most pressing concerns in modern technology. As personal data flows through email clients, cloud storage services, social media platforms, and AI tools, the question of who controls that data — and what they do with it — carries significant security and legal implications. Sensitive information such as Social Security numbers, medical records, and educational history represents the core of what privacy protections are designed to safeguard, and understanding the risks associated with each communication channel is essential for anyone operating in a digital environment. Email, for example, should be treated as an inherently insecure medium, and personally identifiable information should never be transmitted through it without appropriate encryption. Free software and online services present a particular challenge because the business model often depends on collecting user data, either to sell to advertisers or to fuel internal marketing. Platforms like Facebook, Instagram, and Gmail generate revenue by monetizing user behavior and preferences, meaning that accepting free access comes with a corresponding reduction in privacy. File-sharing tools introduce additional exposure when links are set to public rather than restricted to specific recipients, and AI platforms may use input data for model training unless a paid, enterprise-grade tier is in use. The regulatory landscape is shifting in favor of consumers, with an increasing number of privacy laws requiring companies to be transparent about data collection practices and to implement adequate protections, making regulatory awareness an important part of any comprehensive approach to digital privacy.

What you'll learn

What's covered

Privacy in Technology

Aligned to

CompTIA Tech+
1.4 Explain the value of data and information.
6.1 Summarize confidentiality, integrity, and availability concerns.
6.3 Summarize behavioral security concepts.
CompTIA A+ Core 2
4.6 Explain the importance of prohibited content/activity and privacy, licensing, and policy concepts.
CompTIA Server+
3.1 Summarize data security concepts.

Key terms

Privacy
The condition of being free from being observed or disturbed, particularly regarding the collection, storage, and use of personal information by software and services.
Personal Data
Information that relates to an individual's identity, such as medical history, school background, or government identification numbers, that is subject to privacy protections.
Data Custodian
A company or service that stores and manages user data on behalf of individuals, bearing responsibility for its security and proper use.
Encryption
The process of converting readable data into an unreadable format using an algorithm and key to prevent unauthorized access.
Spyware
Malware that secretly monitors and collects user activity and sends it to a third party without consent.
Data Exfiltration
The unauthorized transfer of data from a system to an external destination.
Cloud Computing
The delivery of computing services including servers, storage, and software over the internet on a pay-as-you-go basis.
Data Monetization
The practice by which free digital services collect and sell or leverage user data to generate revenue, such as through targeted advertising.
Confidentiality
The principle that information is accessible only to those authorized to access it.
Transport Layer Security
TLS
A cryptographic protocol that provides secure communication over a network, successor to SSL.

Topics

Data Privacy Personal Data Protection Data Collection Privacy Regulations Digital Services Cybersecurity

Transcript

What Privacy Means

When I was in the military, one of the things that we watched out for was too much of our personal information being released to the public. It's known as privacy, and over the years it's become more and more of a hot topic, especially with things like scammers out there. We need to be really careful about our privacy.

Privacy just means free from being observed and disturbed. It's a hot topic nowadays, and there are a lot of laws and regulations that are coming out to deal with privacy. It largely focuses on our identity and things about us.

Privacy Questions in Software

When it comes to privacy and software we have several questions. For instance, if it's some sort of software that's installed on our computer, maybe we're storing data on our computer, or perhaps the data is being sent back and forth across our network connections, or perhaps it's being stored up in the cloud, or at some sort of custodian area where there's a company that we're storing data with.

Let's use email as an example. In this case we could be operating off of a client. I could have client software installed on my machine — and is that client software secure? Is it encrypting the data? What happens if my laptop is stolen, or my desktop is stolen, or what happens if it's compromised? Is it secure being stored on the computer, or is it secure in transit?

If I'm sending email, I don't consider that a secure form of communication, so I never put personal information in there. Social Security numbers I don't put into email. I just consider it as being insecure, and so I don't store that private information in there. And where is it being stored — what are the email services that are being used, what are they doing with my information and my email, are they handling it securely?

A lot of times when we're talking about privacy, it's really focusing on our identity and things about us. Maybe our medical history, maybe it has to do with our school background. So really it has to do with personal information about us, not necessarily what we're sending through our email, but what information is being collected on us from those data custodians.

Free Services

Free software isn't a great example of this, because you might be storing information or sending information, but a lot of times when you sign up for free services it's either like a trial basis and they want to get you to buy their full product, or a lot of times what they're doing is they're taking that data, they're storing data about you and how to market toward you. So they're either selling that data to somebody else, or they're using it as a marketing channel to get more services in front of you and upsell you on different products.

A great example of this might be things like Facebook and Instagram and Twitter. These are all free social media services that are out there, and what are they doing? They're collecting information on you and then putting advertising out in front of you. That's how they make their money: people pay for advertising space to put ads in front of you. Sometimes that's not a big deal, but sometimes we might be concerned about that.

Email is another great example. There are a lot of free services out there. I'm a big fan of Gmail, but because of that I've also turned over a certain amount of rights and lost a certain amount of privacy because I use those Gmail accounts.

File Sharing, Messaging and AI

There's also software out there for file sharing. What info am I storing in those drives that I have available, and if I'm sharing it out, who am I sharing it out to? Sometimes when I share it out, I share it out to a specific person that needs to log into the system and then they can have access to it. But other times I could accidentally share it out to the world by saying, okay, give me a link, and I'll send that link to the person, not realizing that that opens that up to the rest of the world. So there are some privacy concerns over that.

There are some growing concerns over instant messaging and text messaging and insecure methods of communicating back and forth, which has allowed the market to open up for some third-party apps — things like Signal, that does do encryption and keeps things a little more private.

And by using AI, we're typing data into AI, which could then generate ways of marketing to you. Or perhaps they're just taking that information and using it for other purposes, using it for training the AI engine. So when we use AI we've got to consider that an insecure form, unless we purchase certain services that are a more secure way of using AI.

Laws and Regulations

Thankfully, us as consumers are winning the battle. There are more and more laws and regulations that are being put into place that are regulating companies to make sure that they're securing our data, that they are treating our data correctly, and that we know exactly what's going on with our data.

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →