ICO warns consumers about the need for caution when downloading mobile apps this Christmas

Thursday 19 Dec 2013 @ 14:20
Information Commissioner's Office

The Information Commissioner’s Office (ICO) is warning consumers to protect their personal information when downloading mobile apps, ahead of the busiest day of the year for app downloads.

Last year 328 million apps were downloaded on Christmas Day alone and many people will have the latest tablet PC or smartphone at the top of their Christmas list this year. An online survey carried out by YouGov for the ICO this month found that 59% of adults in the UK have downloaded an app. This figure is likely to increase over the festive period.

But the survey also found that 62% of people who have downloaded an app are concerned about the way apps can use their personal information. The survey found 49% of app users have decided not to download an app due to privacy concerns.

The ICO has now published some top tips to help consumers stay in control of their data when using mobile apps, along with guidance to help developers look after people’s information correctly.

ICO Principal Policy Advisor for Technology, Simon Rice, said:

“Apps do all sorts of weird and wonderful things, helping someone chat with their friends, find a local restaurant or see what’s on at their local cinema. However, they often work by using personal information. This can include information you would not normally choose to give out to a stranger, such as the contact details of friends and relatives and details of your location.

“The survey published today shows people are clearly concerned about the privacy implications of this technology. Our tips aim to address this concern by showing people how they can stay in control of their personal information, while enjoying the benefits provided by the apps many of us will be downloading this Christmas.”

Top tips for keeping your personal information secure when using apps:

	Only download apps from official and trusted app stores. Be extremely careful of using untrusted sources.
	Read the information available about an app in the app store before you download it. Check you are happy about the personal information it will be using.
	Have a regular clear-out. Many of us have downloaded an app and only used it once. If you no longer use the app, uninstall it.
	Consider downloading mobile security software to help keep your device secure.
	Make sure you erase any apps from the phone before you donate, resell or recycle an old device, as these may have to access to your personal information. You should be able to find a ‘factory reset’ option in the device settings.

The ICO’s guidance for app developers will help the developer community address the public’s concerns by demonstrating that they are looking after people’s information correctly and complying with the Data Protection Act.

Simon Rice continued:

“The app development industry is one of the UK’s fastest growing industries, but our survey shows almost half of app users have rejected an app due to privacy concerns. It is important that developers tackle this issue by making sure their apps look after personal information correctly.

“Our guidance will help them achieve this by explaining the legal requirements when using personal information. That includes how to obtain lawful consent, the measures required to keep people’s information secure and advice on carrying out routine testing and maintenance. These are issues that must be considered at the start of the development process, but once addressed will help developers in the UK comply with the Data Protection Act and have the best chance of achieving commercial success.”

You can find out more about today’s guidance in a blog written by the ICO’s Simon Rice. The blog explains the reasons for the guidance, some of the key issues that app developers must consider and provides best practice solutions explaining how these issues can be addressed.

View this news release in Welsh

Notes to Editors

1. The Information Commissioner’s Office upholds information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

2. The ICO has specific responsibilities set out in the Data Protection Act 1998, the Freedom of Information Act 2000, Environmental Information Regulations 2004 and Privacy and Electronic Communications Regulations 2003.

3. The ICO is on Twitter, Facebook and LinkedIn, and produces a monthly e-newsletter.

4. Anyone who processes personal information must comply with eight principles of the Data Protection Act, which make sure that personal information is:

Fairly and lawfully processed
Processed for limited purposes
Adequate, relevant and not excessive
Accurate and up to date
Not kept for longer than is necessary
Processed in line with your rights
Secure
Not transferred to other countries without adequate protection

5. All figures, unless otherwise stated, are from YouGov Plc. Total sample size was 2,272 adults. Fieldwork was undertaken between 2nd - 4th December. The survey was carried out online. The figures have been weighted and are representative of all UK adults (aged 18+).

6. If you need more information, please contact the ICO press office on 0303 123 9070.

WIREDGOV