Guard Your Personal Information on the Internet

Has your personal information been exploited without your consent? Is your identity at risk? Jobs.co.za issues caution to Job Seekers and Social Networkers using the Internet.

Many internet users are not fully aware that the consequences of publishing their personal information on the Internet and often publish their entire ‘pedigree' across a multitude of social websites without taking the time to read or understand the website's privacy policy. It may seem like an endless pit of legal jargon, but the truth is that this jargon could very well save an internet user from becoming a victim of identity theft.

Privacy Settings on Social Networks
As social networking becomes increasingly popular, the number of publicly available profiles across the Internet grows. Most information is published by the user himself (such as a personal profile on LinkedIn or an info page on Facebook) while some information about that user is published via their friends (such as tagging them in photographs) or employers and colleagues (such as recommendations being posted about them on LinkedIn). As this information is collected, the world-wide internet information bank is becoming richer - and sadly, more attractive for conniving criminals.

In most instances, social networks provide users with varying levels of privacy settings, and when users register on these websites they are almost always referred to the website's privacy policy, which the user must accept before they may register and interact on the website. The onus is on the user to actually read the privacy settings and to make sure that they understand just how much information about them the website is permitted to make available to the entire world of web users.

Many internet users make the mistake of assuming that if they don't use social networks that their online details are completely secure. There are many other online platforms that collect user's personal information when transacting online such as banking, shopping or job sites. Provided that these websites have specified in their privacy policy that they will protect the user's confidentiality, and provided that this information is stored behind a secure login, users generally need not be concerned.

Choose your Job Site with Caution
In a recent article published on webtechlaw.com reference was made to a South African based job site called Jobspace.co.za; which according to the writer ‘epitomizes the sort of service that negates users' offline privacy by recklessly disregarding their online privacy'. This particular website is a free job advertising platform which allows job seekers to submit their CV's without having to agree to the websites Privacy Policy. Upon registering a CV, the field entitled ‘Private CV' has a small blue information icon. Only once a user clicks on this icon are they made aware of the fact that ‘by default, their CV is available to the general public.' Job Seekers do have the option to make their CV private by checking this box, however by not checking this box the Job Seeker's entire profile is available ‘to the general public'.

Privacy Policies on Reputable Job Sites
Most job sites such as Jobs.co.za will insist that you read and accept the websites terms and conditions (including its privacy policy) before being able to complete the registration process. In most cases this privacy policy is a statement informing its users of how they intend to use any personal information that has been collected specifically through the website and outlines details of what personally identifiable information is collected via this website. It usually stipulates details of the organisation collecting the information; how the collected information is utilised and with whom personal information is shared. It further outlines the user's rights in respect of their personal information; and, the kind of security procedures that are in place to protect the loss, misuse or alteration of information under their control.

Most job sites do collect personal information in the interest of being able to present a complete job application to companies when job seekers apply to vacancies. The type of personal information collected usually includes name, address, email address, contact information and other discernible identifiable information. In certain areas they may collect personal information pertaining to a job seekers work history, remuneration and desired job interests.

Some websites may also gather certain data relating specifically to usage of the site such and the areas that users visit, the services accessed or information about the user's computer hardware and software, and also often record a users IP address, browser type, domain names, access times and referring website addresses. Although this information is gathered, it is never linked directly to a users personally identifiable information.

The significant difference between most job sites and the example provided in Jobspace.co.za is that Jobspace.co.za makes public information, public. This means that once a user uploads a CV and does not make it private, anyone can view all the information including the user's address, contact details and identity number if it has been included in the CV that was uploaded. Whereas, on most other job site's this information is stored behind a secure login - even if a job seekers made their CV visible (searchable). Most reputable job portals require companies to subscribe to their services at a fee before allowing them access to their CV database. Usually these paying customers enter into a terms of usage agreement with the Job Portal preventing them from using Job Seeker information for any purpose other than that prescribed to under the guidelines of the website for the purpose of assisting Job Seekers in finding jobs.

When registering on Job Portals, it is always advisable that Job Seekers look out for the following:

• Does the website refer them to a Privacy Policy
• Does the website require a user to accept the terms of use before registering
• Does the website provide details as to who it provides access to the personal information to
• Does the website require its paying clients (recruiters, employers or job advertisers) to agree to its terms of use, thereby also agreeing to further protect the Job Seekers personal information.

Most job portals that follow these guidelines are safe and users shouldn't be alarmed as long as they are aware how their information is being collected and published and who it is presented to.

By negating their responsibility to understand these policies a user opens themselves up to a number of risks including both identity theft and CV fraud.

Identity Theft:
Identity (ID) is a crime criminal obtains personal information, such as a person's ID Number in order to pose as someone else. The information is often used to obtain credit, services or even immigration using the victim's identity. Crimes are often committed by ID theft experts and could result in the victim becoming erroneously accused for the crime.

CV Fraud:
There are various forms of CV Fraud, however the most devious of them is when someone copies all the information on a Job Seekers CV (including qualifications, address details, Identity number etc) and then replace the original Job Seekers name with their own, thereby presenting a fraudulent CV to recruiters or employers.

The Golden Rule
As a rule of thumb, users should always ask themselves whether they would comfortably provide this information to a stranger over the telephone. That should then become a general guide as to what they will or won't publish on the Internet.

Always exercise caution and be aware of the risks involved, and always, always take the time to understand the website's privacy policies and how they use the information before providing it, and when in doubt, look for a contact number on the website an call someone at the company to discuss your concerns first.

Tags