Online Privacy: How to Protect Your Personal Data in the Digital Age

Why Your Personal Data Matters

Every time you use a smartphone, visit a website, make an online purchase, or interact with a connected service, data about you is generated and collected. Your browsing history, location data, purchase patterns, social connections, health information, and political interests all have commercial value and are actively sought by a wide range of actors including advertisers, data brokers, insurers, employers, and occasionally government agencies.

For most people, the immediate consequence of this data collection is targeted advertising. But the implications extend much further. Data about you can influence the prices you are offered for insurance or credit. It can affect decisions about employment. It can be exposed in data breaches and used for identity fraud. It can be used to manipulate your beliefs and behaviour. And once your data is out in the world, it is very difficult to bring back.

Privacy is not just for people with something to hide. Privacy is a fundamental human right that enables autonomy, dignity, and freedom. Young adults who develop good privacy habits early protect themselves from harms that may not be immediately visible but that compound over time.

How Your Data Is Collected

Understanding the main mechanisms of data collection helps you make informed decisions about where to reduce exposure.

Cookies and trackers: When you visit websites, small files called cookies are often stored on your device. These track your activity across multiple sites, building a profile of your interests and behaviour. Third-party trackers from advertising networks operate across vast numbers of sites, meaning a single advertising network may have detailed records of your browsing habits across thousands of websites.

Social media platforms: Social media platforms collect enormous amounts of data about you: what you post, what you look at, how long you look at it, what you click, who your contacts are, your location, your device, and much more. This data is used to target advertising and is also sold or licensed to third parties in various forms. The platforms themselves are the product when the service is free: your attention and your data are what generates value.

Mobile apps: Many apps request permissions to access data on your device that goes well beyond what is needed to provide the service. Location data, contacts, microphone access, camera access, and more can be requested. Some apps collect and share this data even when you are not actively using them.

Data brokers: A significant industry exists to aggregate data from multiple sources and sell detailed profiles of individuals. These companies gather information from public records, social media, purchase histories, loyalty programmes, and many other sources. You can often request that data brokers remove your information, though the process is laborious.

Internet of Things devices: Smart speakers, connected home devices, wearables, and other internet-connected devices are additional collection points for data about your behaviour, health, location, and routines.

Practical Steps to Protect Your Privacy

You cannot achieve complete privacy in the modern world, but you can significantly reduce your exposure and limit the most intrusive data collection. The following practical steps are ordered roughly from highest to lowest impact.

Browser settings and extensions: Using a privacy-focused browser or enabling enhanced privacy settings in your current browser reduces cookie tracking. Browser extensions that block third-party trackers significantly reduce the amount of data collected about your browsing. Using a private or incognito browsing mode prevents your history being stored locally but does not prevent tracking by websites themselves. Search engines that do not track or profile users are available as alternatives to the dominant options.

Review app permissions: On your smartphone, review which apps have access to your location, microphone, camera, contacts, and other sensitive data. On both major mobile platforms, you can check and adjust permissions on a per-app basis. Revoke permissions that are not necessary for the app to function. Consider whether apps that request extensive permissions are worth keeping.

Social media privacy settings: Review and tighten the privacy settings on all your social media accounts. Consider who can see your content, who can search for you, what information is publicly visible on your profile, and whether to allow the platform to use your data for advertising. Many platforms default to the most permissive settings and you have to actively choose more restrictive ones.

Limit location sharing: Location data is among the most sensitive personal data because it reveals your home, your workplace, your routines, your associations, and your movements. Disable background location access for apps that do not genuinely need it. Use precise location only where necessary and approximate location otherwise.

Email privacy: Be aware that email newsletters and marketing communications often include tracking pixels that tell the sender when you opened an email, on what device, and in what location. Some email providers and clients allow you to block this tracking automatically.

Use encryption where possible: Using end-to-end encrypted messaging apps for private communications means that even if the data is intercepted or the platform is compromised, the content of your messages cannot be read. Not all messaging platforms offer end-to-end encryption by default.

Sharing Data With Services and Apps

Every time you sign up for a new service, you are making a data sharing decision. Before providing your personal information, consider what data is being requested, whether it is genuinely necessary for the service, what the privacy policy says about how it will be used, and whether you trust the organisation with that data. Using a secondary email address for sign-ups where you are not sure about a service reduces the exposure of your primary email address. Being willing to say no or to choose a different service that requires less data is a legitimate approach.

Understanding Your Rights

In many countries, individuals have legal rights regarding their personal data. These rights may include the right to know what data an organisation holds about you, the right to request that it be corrected, the right to request that it be deleted, and the right to object to certain uses. Data protection authorities in many countries can receive complaints if your rights are not being respected. Understanding that you have these rights, even if exercising them takes effort, is important. Many young adults are not aware that they can ask companies to delete their data or restrict its use.

The Bigger Picture

Individual privacy choices matter, but they exist within systems that are designed to minimise privacy as a default. Advocacy for stronger privacy laws, holding platforms and companies accountable, and supporting organisations that work on digital rights are all part of a healthier relationship with data in society. Being an informed, critical user of digital services is something that benefits not just you individually but the broader culture around privacy and data. Young adults who understand these issues and make intentional choices about their digital presence contribute to changing the norms around data collection and use.