January 28th - Data Privacy Day

By DoIT Communications

Security Training and Awareness Working Group


Date Released: 1/28/2022

 

January 28th is officially Data Privacy Day

 

Data privacy can be defined as the right and ability to determine who can access your information.  Good data privacy practice is limiting access to your information or accounts.  Here are some best practices to keep your data private. 

 

Social media is a great tool to stay in touch or to connect with other people, but it is important to be mindful of what you post online.  

  • Limit what you post on social media and online in general.  

    • Seemingly innocent data can be used to crack passwords and security questions.  

  • Always remember anything shared on the internet is effectively shared permanently.

  • Enable two-factor authentication on every social media account and especially personal email accounts.  

 

Mobile apps are incredibly useful and allow us to make the most of our phones, tablets and other mobile devices.  

  • Only download apps from legitimate sources such as Apple’s App Store or the Google Play Store.

  • Research apps and the company that makes them and choose those that are highly and positively rated. 

  • Limit app permission to your device's location, camera, contacts, etc.  If it does not require that access to function, do not allow it. 

  • Do not jailbreak your device or configure it to allow apps from unknown sources.

 

Internet of Things (IoT) devices are more common than ever and have become integrated into daily use.  IOT devices are smart appliances or devices that collect or pass on information.  This includes, for example, Amazon Alexa devices, Google Nest, smart watches, cellphones, smart refrigerators and everything in between.

  • Be sure to buy from reputable companies that make security a priority.

  • Ensure these devices are updated when patches are available and some manufacturers will send notifications when there are new updates.

  • Everything has a limited lifespan.  Once a device reaches its end-of-life date it is no longer eligible to receive updates and should be replaced.  

 

Use a Password Manager

  • All accounts should be protected by strong, unique passwords known as passphrases  

  • Do not reuse passwords. 

  • The password manager is a secure way to keep all of your log on data secure, while only having to remember a single, secure password.  

 

           Stony Brook offers LastPass password manager Enterprise to protect your Stony Brook work accounts. Did you know that all faculty and staff that sign up for Lastpass Enterprise are also eligible for LastPass premium family edition? LastPass Families grants you and up to five additional users access to Premium accounts, so your entire family can benefit. Your personal accounts remain separate from your work account and are fully supported by LastPass.