We have conducted a study on data transmission in consumer security products, addressing the concerns of Internet users regarding the access and usage of their personal information. While computer security software has a legitimate need to send certain system information to its manufacturers, such as details of malware for effective user protection, it is crucial that programs do not indiscriminately transmit personal data without the explicit knowledge and consent of the system’s owner. This report provides valuable insights into the data-sending practices of popular consumer security programs.
We are delighted to announce that more exclusive information in addition to this report will be published in an extensive report by PC Magazin, PCgo,
Connect-Living.de. Once the report is live and available for reading on their website, a corresponding link will be provided promptly.
https://www.av-comparatives.org/wp-content/uploads/2023/07/avc_data_sending_2023.pdf
Ensuring User Privacy: Insights from the Recent Data Collection and Sharing Practices Analysis of Consumer Anti-Virus Products
In an age of increasing concerns about data security and privacy, Internet users are becoming more cautious about who has access to their personal information and how it is utilized. These concerns extend to computer security software, which often requires some level of data sharing to effectively protect users from malware. However, this does not mean that users should surrender all their personal information to software manufacturers without their knowledge and consent.
Recently, a comprehensive analysis was conducted on the data collection and data sharing practices of 20 market-leading consumer Anti-Virus (AV) products. This report aimed to evaluate vendors based on their data collection practices, data sharing policies, accessibility, control of software and processes, and transparency. The objective was to promote user awareness and encourage transparency in data-sharing practices.
Vendor Performance
Each vendor was assigned a score ranging from one (lowest) to five (highest), with higher scores indicating better practices. Notably, Bitdefender, ESET, F-Secure, G Data, K7, Kaspersky, and VIPRE emerged as the top-performing vendors, receiving scores of four stars or more.
Importance of Data Sending
The report emphasizes the significance of considering data sending practices when selecting a security solution that aligns with individual needs. It highlights the need for user privacy, the importance of user consent for specific data transfers, the establishment of trust between users and vendors, and the transparency demonstrated by vendors.
Contextualizing Data Security Concerns
In the past year, there have been a lot of concerns about data security and privacy risks raised in general, but in special against companies in the IT security market. Even the BSI (German Federal Office for Information Security) issued a warning against the use of Kaspersky (which was later revealed that it might have been politically
motivated), countries banning the use of TikTok on government devices, or the recent congressional hearing of Shou Chew, the CEO of
TikTok.
However, it is crucial to note that such scenarios are theoretically possible with software from any company. It is equally important to distinguish between threat scenarios encountered by government employees and those faced by private individuals. For instance, military personnel using fitness
trackers may inadvertently expose military bases, creating security risks, but this is not a concern for the average user.
Considerations of Trust and Discretion
Antivirus manufacturers, like any other company, must comply with local and international data protection laws. These laws provide a legal framework for companies to handle user data. However, the ultimate discretion lies with the receiver and their data handling policies. Therefore, users should exercise caution in providing data to companies and be mindful of what information may be collected from their behavior or metadata.
Continued Focus on User Privacy
The report concludes by reiterating the importance of data sending practices when selecting a security solution. It underscores the significance of user privacy, user consent for data transfers, trust between users and vendors, and vendor transparency. However, it is essential to note that this report solely concentrates on consumer software and does not encompass enterprise security solutions, which typically involve deeper access to user behavior.
Looking Ahead
This report represents an updated analysis since the last study conducted in
2014, which coincided with the revelations of extensive eavesdropping by the NSA. Since then, privacy issues and laws have become increasingly prominent, including the implementation of
GDPR and the
Schrems II ruling, which highlighted the violation of European privacy rights in data transfers to the US. Users now have questionnaires and prepared forms to facilitate data inquiries and requests from companies.
As the digital landscape evolves, it is crucial for users to remain vigilant about their data privacy and seek solutions that prioritize transparency and user consent. By staying informed and engaged, individuals can make empowered choices to protect their personal information in an increasingly interconnected world.
www.av-comparatives.org
www.connect-living.de
