4 4.3 Concerns about Privacy and Data Protection in the ICT Sector The increasing availability of Internet services accessed via a personal computer (PC), laptop, mobile phone or other devices, has brought many benefits and is seen as crucial to continued innovation and development. But it has given rise to numerous privacy concerns about the data that is collected, stored and shared when using such services. The collection and use or misuse of sensitive data has the potential to be used for discriminatory purposes. This could include data on racial origin, political opinions or religious or other beliefs, personal data concerning health or sexual life, genetic data, biometric information, trade-union membership, and data relating to criminal convictions. Unauthorised intrusions to access or destroy data stored for use in criminal purposes – such as unauthorised access to bank accounts – is an issue rising rapidly up the list of key concerns for many businesses. New business models based on the collection and sale of a user’s data by the company gathering the data, where data is used for purposes not explicitly revealed to the user who provided the data and without their permission, raise concerns about the respect for user privacy. 317 While ‘Big Data’ 318 may carry important benefits, it also carries serious risks. Data mining of large data sets has the potential to be discriminatory. It may discriminate against specific groups and activities (such as in profiling) and it may be used to draw conclusions about large groups of people who may be excluded from data collection, further perpetuating exclusion. 319 In addition to more generalised areas of data protection, there are other areas of online protection that have generated real concern, particularly around the protection of children who are active online. Table 38: Toward a Social Compact for Digital Privacy and Security 320 Below are excerpts of the core elements that the Global Commission on Internet Governance advocates in building a new ‘ social compact’ for digital privacy and security:  “Fundamental human rights, including privacy and personal data protection, must be protected online. Threats to these core human rights should be addressed by governments and other stakeholders acting both within their own jurisdiction and in cooperation.  Businesses or other organisations that transmit and store data using the Internet must assume greater responsibility to safeguard that data from illegal intrusion, damage or destruction. Users of paid or so-called ‘free services’ provided on the Internet should know about, and have some choice over, the full range of commercial 317 The Global Commission on Internet Governance was established in January 2014, to articulate and advance a strategic vision for the future of Internet governance. With work commencing in May 2014, the twoyear project will conduct and support independent research on Internet-related dimensions of global public policy, culminating in an official commission report. 318 ‘Big Data’ refers to large datasets that are collected and analysed to find correlations or predict trends. For example, it can be used by business to predict which products will be popular, but can also be used for social issues, such as predicting outbreaks of disease in certain areas. 319 See Privacy International, “Data Protection” (last accessed August 2015). See also, European Commission, “EU Data Protection Reform and Big Data, Factsheet” (April 2015). 320 Global Commission on Internet Governance, “Toward a Social Compact for Digital Privacy and Security Statement” (2015). 154 PAGE CHAPTER 4.3: PRIVACY