Online Privacy Awareness in Bangladesh: Challenges and Solutions
Jannatul Nayim Chowdhury, Wahid bin Ahsan
Department of Human-Centered Design
Userhub
Abstract
In recent times, individuals in Bangladesh are facing serious challenges due to their growing dependency on the internet. This study employs a qualitative research design to identify a lack of understanding and awareness of internet usage among individuals, coupled with the negligence of authorities, as the primary causes of these issues. The findings reveal that while most people are aware of online scams, phishing, and suspicious links, they often share personal information without reading privacy policies due to their complexity. Additionally, there is a significant lack of knowledge about government laws and regulations regarding online privacy. The study suggests that comprehensive educational initiatives are essential to improve online privacy practices in Bangladesh.
Keywords: Internet dependency, online privacy awareness, privacy policies, government regulations, educational initiatives, Bangladesh, cybersecurity, personal information protection.
Introduction
The internet has become an integral part of everyday life, facilitating quick, easy, and effortless communication and access to information. As Bangladesh undergoes rapid digital transformation, the country is witnessing significant growth in internet usage (Hasan, 2023). According to the Bangladesh Telecommunication Regulatory Commission (BTRC), the number of internet users in Bangladesh was around 87.79 million as of June 2018 (Bangladesh in the Age of Digital Privacy, 2020). However, with this growth comes an increased risk of privacy breaches and cybercrimes (Shah, 2021).
Research indicates that online privacy awareness varies significantly among different demographic groups. For example, a study found that older adults are more vulnerable to online fraud due to their lack of privacy control skills compared to younger users (Park, 2011). Gender also plays a role, with female users performing worse in technical knowledge and actions. In Bangladesh, business entities often gather clients’ personal information, which raises privacy concerns (Faisal, 2022). Moreover, a security breach in a government website exposed the personal information of 50 million Bangladeshis (Billah & Shams, 2023).
Despite being aware of online scams and phishing, many individuals in Bangladesh share personal information online without reading privacy policies due to their complexity. A survey of Chittagong University students revealed that most participants are aware of social media security precautions but still experienced cybercrime (Das & Das, 2022). This indicates a gap between awareness and effective practices. Additionally, many participants are unaware of internet privacy laws and regulations in Bangladesh, which hinders their ability to protect their data (Billah & Shams, 2023).
The primary objective of this study is to acquire an in-depth understanding of the level of knowledge among the general population in Bangladesh regarding online privacy. Furthermore, this research aims to identify effective solutions for the difficulties associated with privacy on the internet.
Research Objectives
This study aims to:
- Assess the level of online privacy awareness among different demographic groups in Bangladesh.
- Identify common online behaviors and practices related to privacy.
- Explore the extent of digital literacy regarding online privacy laws and regulations.
- Examine the personal experiences of individuals with online privacy breaches.
- Evaluate the effectiveness of existing online privacy awareness initiatives.
- Identify barriers to improving online privacy awareness.
- Explore community-based approaches to enhance online privacy awareness.
Methodology
Research Design
This study employed a qualitative research methodology to gather in-depth insights into online privacy awareness among individuals in Bangladesh. The central research question was: What factors are associated with the level of online privacy awareness among individuals in Bangladesh and what approaches could potentially enhance this awareness for digital engagement?
Sampling and Data Collection
The research involved semi-structured interviews with 17 participants from diverse backgrounds, including university students, software engineers, bankers, medical students, pharmacists, and freelancers. Participants were selected using purposive and snowball sampling methods. Interviews were conducted via Zoom and in-person, and the data were transcribed and analyzed using ATLAS.ti software.
Data Analysis
Thematic analysis was used to identify key themes and patterns in the data. Codes were generated based on the transcriptions, and these were synthesized to answer the main research questions.
Ethical Considerations
This study followed strict ethical guidelines to protect participants and ensure research integrity. Participants were fully informed about the study’s purpose, procedures, risks, and benefits, and provided written consent. Confidentiality was maintained by anonymizing data and using secure storage. Data were protected through encryption. Sensitive topics were handled with care, and support resources were provided. Participation was voluntary, with no incentives, and participants could withdraw at any time. Transparency was ensured by debriefing participants and disclosing conflicts of interest. Cultural sensitivity was maintained throughout the research process, safeguarding participants’ rights and ensuring the research’s validity (American Psychological Association, 2017).
Findings
Evaluation of Awareness Level and Practices
Most participants perceive online privacy as the assurance that data or personal information shared online remains confidential and secure, believing they have complete control over their privacy. Some see it as the ability to browse or communicate online without leaving traces or having their information shared publicly. A minority view it as the collection of personal information for specific purposes only, while a few believe there is no real privacy online, implying that providing information authorizes websites to view it.
Despite their concerns, most participants do not read privacy policies of online platforms due to their complexity and length, often skipping them and simply pressing the accept button. This raises concerns about platforms actively gathering user data for marketing purposes.
The majority maintain strict privacy measures when sharing personal information online, such as using profile locks on social media and hiding birthdays and contact numbers. However, some users fail to uphold sufficient privacy practices.
Online Behaviors and Shared Information
Most participants share personal information on Facebook and Instagram, while some use Gmail, LinkedIn, Telegram, Snapchat, WhatsApp, Twitter, Dribble, GitHub, and Reddit. Commonly shared information includes personal or family photographs, contact numbers, success stories, videos, names, residential addresses, educational institutions, and email addresses. A few participants share birthdates, NID numbers, mail passwords, card numbers, workplaces, and certifications for verification or purchases.
Digital Literacy and Awareness of Privacy Features
Many participants are unaware of internet privacy laws and regulations in Bangladesh. Some are aware of digital legislation and the possibility of legal action but have not observed impartial judgment. Understanding of privacy features varies, with some aware that applications with end-to-end encryption, such as WhatsApp and Telegram, offer more security. Others use two-factor authentication to protect their accounts.
Personal Experiences with Privacy Breaches
Many participants have experienced online privacy breaches, including Facebook account hacks and unauthorized access to business accounts. Some faced Instagram profile and Gmail account hacks or bank card fraud, leading to financial losses. Victims of hacks experienced mental distress and social judgment, with many terminating their accounts temporarily. Following incidents, many participants adopted two-factor authentication and genuine software, while some continued using alternate software or antivirus security software. Victims often remain unaware of the reasons behind their hacking incidents, with some reporting clicking suspicious links or using pirated software as potential causes.
Evaluation of Existing Initiatives and Barriers
Most participants have not participated in privacy awareness campaigns or programs. Some attended seminars or training, gaining knowledge about internet scams and phishing. Participants who attended awareness programs reported increased awareness and skills to prevent and navigate online scams. However, an IT specialist noted that these programs have not effectively reached the general public, often focusing on high-ranking officials.
Common barriers to enhancing knowledge of online privacy include inadequate knowledge, insufficient resources, lack of training, and the absence of a comprehensive education system on internet usage. Few participants managed to overcome these barriers, typically by seeking information on online security from Google.
Recommendations for Community-Based Approaches
Participants suggested several ways to increase online privacy awareness in Bangladesh:
- Organize more awareness programs, workshops, courses, seminars, and training sessions at educational institutions.
- Implement measures to raise public awareness of internet privacy laws and regulations.
- Provide training in online privacy for professionals in technology or software sectors.
- Educate individuals on the consequences of revealing personal information online and the use of pirated software.
- Launch government advertising campaigns to enhance awareness among all age groups, using media such as films, series, dramas, and talk shows.
- Encourage regular reading to develop critical thinking and awareness of personal privacy.
These findings highlight the need for comprehensive educational initiatives and robust privacy policies to improve online privacy awareness and practices in Bangladesh.
Discussion
Our qualitative data collection procedure is a significant strength of this study. By gathering data from diverse categories of individuals, we were able to capture a broad spectrum of perspectives on online privacy awareness in Bangladesh, which enhances the practical value of our findings.
Our findings suggest a pervasive neglect of online privacy among Bangladeshi internet users. Despite the widespread use of multiple online platforms, many individuals share personal information without reading privacy policies due to their complexity and length. This behavior underscores a critical gap in privacy awareness and a false sense of security regarding online activities.
The use of encrypted applications like WhatsApp and Telegram is common among those familiar with online privacy; however, even these platforms are not foolproof, as encryption can sometimes be decrypted. Research shows that sophisticated attacks can exploit flaws in key exchange processes, making encryption vulnerable (Penney & Schneier, 2022; Prasad & Neogi, 2022). Two-factor authentication is effective against hacking, yet many users are unaware of its importance (Grassi et al., 2017). Additionally, sharing close-up photographs or voice recordings online poses significant risks due to metadata that can lead to identity theft (Mayer-Schönberger & Cukier, 2013).
A majority of individuals in Bangladesh opt for pirated software, primarily due to the high cost of genuine software and a lack of awareness about the risks associated with pirated versions. This choice exposes them to increased vulnerability to scams and cyberattacks, often resulting in financial losses and internet harassment. A study found that pirated software is a significant source of malware infections, greatly increasing cybersecurity risks (National University of Singapore, 2017). Additionally, users’ awareness of cybersecurity issues is inconsistent, with varying attitudes and practices indicating a need for more comprehensive knowledge.
Our findings highlight those females are more frequently victims of online abuse, although males are also targeted. Careless disclosure of personal information is a common factor leading to victimization. Previous research supports this, showing that women are more engaged on social networking sites, while men often use weaker privacy settings (Dhawan et al., 2014). Individuals across various age groups face online privacy consequences, driven by limited knowledge and awareness.
Participants who had attended privacy awareness campaigns or training reported better privacy practices and awareness of internet scams. However, these initiatives often focus on high-ranking officials rather than the general public, limiting their effectiveness. Formal education programs on privacy and security have been shown to increase awareness significantly (Zwilling et al., 2022).
To improve online privacy awareness, our research suggests the need for early education on internet use. Organizing workshops, courses, seminars, and training sessions at educational institutions can enhance understanding. Regular use of platforms like Facebook has been linked to misunderstandings, emphasizing the need for educational institutions to improve students’ information literacy (Lin, 2015).
While our findings align with previous research, differences exist due to varying methodologies and participant demographics. This qualitative research provides a comprehensive analysis of internet usage knowledge among general internet users in Bangladesh, offering valuable insights for future initiatives.
Recommendations
- Increase Knowledge and Decrease Oversharing: Individuals must understand their personal information, including family and financial details, and avoid sharing it online. Improving online privacy knowledge, taking precautions, and understanding permissible data types are crucial. Reducing shared data can help protect personal and financial information and prevent identity theft (Acquisti et al., 2015).
- Government Initiatives: The Bangladeshi government should launch internet privacy-related advertising campaigns to raise awareness among different age groups, particularly children. These campaigns could use cartoon shows or instructional events. Privacy awareness films, series, dramas, or talk shows can effectively educate various age groups (Solove, 2011).
- Educational Initiatives: Organizing awareness-raising initiatives, such as workshops, courses, seminars, and training sessions at educational institutions, can promote online privacy awareness. Authorities should also raise public awareness about internet privacy laws and regulations. Bangladesh can learn from developed countries’ efficient internet approaches (Hoofnagle et al., 2019).
- Personal Practices: Regular reading enhances critical thinking abilities and helps shape individual identities. This habit can help distinguish between personal and basic aspects, leading to a more private life (Livingstone, 2008).
- Digital Approaches: Investing in antivirus security software is crucial for preventing dangerous internet browsing. There is a need for affordable and user-friendly cybersecurity software available to ordinary internet users nationwide. Online platforms should simplify their privacy policy explanations to enable users to quickly perceive key elements (Schneier, 2015).
These recommendations aim to enhance online privacy awareness and practices in Bangladesh, ensuring a safer digital environment for all users.
Conclusion
This study highlights the significant challenges faced by individuals in Bangladesh due to their growing dependency on the internet. Our findings reveal a pervasive lack of understanding and awareness regarding online privacy, compounded by the negligence of authorities in providing adequate educational initiatives and regulatory enforcement. Despite awareness of online scams, phishing, and suspicious links, many individuals continue to share personal information without reading privacy policies, indicating a critical gap in privacy practices.
The study underscores the need for comprehensive educational initiatives to enhance online privacy awareness. Early education on internet use, regular workshops, seminars, and training sessions at educational institutions, and targeted government campaigns are essential steps to address this issue. Moreover, improving the accessibility and simplicity of privacy policies and promoting the use of genuine software can help mitigate risks associated with online activities.
Future research should explore the effectiveness of these recommended initiatives and examine their impact on improving online privacy awareness and practices among different demographic groups in Bangladesh. By addressing these gaps, we can work towards a safer digital environment for all users.
Limitations and Future Research
Limitations
This study has several limitations that should be acknowledged. First, the sample size was relatively small and may not fully represent the diverse population of Bangladesh. The use of qualitative methods, while providing in-depth insights, limits the generalizability of the findings. Additionally, the reliance on self-reported data may introduce bias, as participants might not accurately recall or report their behaviors and experiences.
Future Research
Future research should aim to address these limitations by employing larger, more representative samples and incorporating quantitative methods to enhance generalizability. Longitudinal studies could provide insights into how online privacy awareness evolves over time. Furthermore, exploring the effectiveness of specific educational interventions and policies in improving online privacy practices could offer valuable guidance for policymakers and educators. Investigating the impact of cultural factors on privacy perceptions and behaviors in different regions of Bangladesh could also enrich the understanding of this complex issue.
Acknowledgements
The authors express their gratitude to Userhub for their support and resources, which made this study possible. We also extend our heartfelt thanks to all the participants of the study for their valuable time and insights, without which this research would not have been possible.
Declaration of Interest
The authors of this article confirm that there are no conceivable conflicts of interest with the study’s findings, authorship, as well as publication of this paper.
References
Acquisti, A., Brandimarte, L., & Loewenstein, G. (2015). Privacy and human behavior in the age of information. Science, 347(6221), 509–514. https://doi.org/10.1126/SCIENCE.AAA1465
American Psychological Association. (2017). Ethical principles of psychologists and code of conduct. American Psychological Association. https://www.apa.org/ethics/code/
Bangladesh in the age of digital privacy. (2020, February 14). The Daily Star. https://www.thedailystar.net/supplements/29th-anniversary-supplements/lifestyle-evolutions/news/bangladesh-the-age-digital-privacy-1867735
Billah, M., & Shams, A. (2023). Sound the alarm bell: Inside the leak of 50 million Bangladeshis’ personal data. The Business Standard. https://www.tbsnews.net/bangladesh/inside-leak-50-million-bangladeshis-personal-data-662174
Das, M. C., & Das, M. C. (2022). Data Privacy on the Internet: A Study on Awareness and Attitudes among the Students of the University of Chittagong in Bangladesh. Advances in Journalism and Communication, 10(2), 70–80. https://doi.org/10.4236/AJC.2022.102006
Dhawan, S., Singh, K., & Goel, S. (2014). Impact of privacy attitude, concern and awareness on use of online social networking. Proceedings of the 5th International Conference on Confluence 2014: The Next Generation Information Technology Summit, 14–17. https://doi.org/10.1109/CONFLUENCE.2014.6949226
Faisal, K. (2022). The problem with Bangladesh’s data protection framework and its solutions | The Business Standard. The Business Standard. https://www.tbsnews.net/thoughts/problem-bangladeshs-data-protection-framework-and-its-solutions-480030
Grassi, P. A., Fenton, J. L., Newton, E. M., Perlner, R. A., Regenscheid, A. R., Burr, W. E., Richer, J. P., Lefkovitz, N. B., Danker, J. M., Choong, Y.-Y., Greene, K. K., & Theofanos, M. F. (2017). Digital identity guidelines: authentication and lifecycle management. https://doi.org/10.6028/NIST.SP.800-63b
Hasan, I. (2023). Digital trust and awareness are key to ensuring safe online space for women | The Business Standard. The Business Standard. https://www.tbsnews.net/thoughts/digital-trust-and-awareness-are-key-ensuring-safe-online-space-women-604362
Hoofnagle, C. J., Sloot, B. van der, & Borgesius, F. Z. (2019). The European Union general data protection regulation: what it is and what it means*. Information & Communications Technology Law, 28(1), 65–98. https://doi.org/10.1080/13600834.2019.1573501
Lin, K. M. (2015). Understanding Undergraduates’ Information Literacy from their Facebook Usage. 2015 IEEE 15th International Conference on Advanced Learning Technologies (ICALT), 256–257. https://doi.org/10.1109/ICALT.2015.48
Livingstone, S. (2008). Taking risky opportunities in youthful content creation: Teenagers’ use of social networking sites for intimacy, privacy and self-expression. New Media and Society, 10(3), 393–411. https://doi.org/10.1177/1461444808089415
Mayer-Schönberger, V., & Cukier, K. (2013). Big Data: A Revolution That Will Transform How We Live, Work, and Think. Eamon Dolan/Houghton Mifflin Harcourt.
National University of Singapore. (2017, June 21). NUS Study: Cybercriminals exploit pirated software to fuel malware infections in Asia Pacific. https://news.nus.edu.sg/nus-study-cybercriminals-exploit-pirated-software-to-fuel-malware-infections-in-asia-pacific/
Park, Y. J. (2011). Digital Literacy and Privacy Behavior Online. Communication Research, 40(2), 215–236. https://doi.org/10.1177/0093650211418338
Penney, J., & Schneier, B. (2022). Platforms, Encryption, and the CFAA: The Case of WhatsApp v NSO Group. 36 Berkeley Technology Law Journal 469 (2022) DOI: Https://Doi.Org/10.15779/Z384B2X554. https://digitalcommons.osgoode.yorku.ca/scholarly_works/3079
Prasad, P., & Neogi, G. (2022). A Dive into WhatsApp’s End-to-End Encryption. https://arxiv.org/abs/2209.11198v1
Schneier, B. (2015). Data and Goliath: The Hidden Battles to Collect Your Data and Control Your World. W. W. Norton & Company.
Shah, N. A. (2021, December 19). Is your privacy at risk? Dhaka Tribune. https://www.dhakatribune.com/opinion/op-ed/317391/is-your-privacy-at-risk
Solove, D. J. (2011). Nothing to hide : the false tradeoff between privacy and security. Yale University Press. https://yalebooks.yale.edu/9780300172331/nothing-to-hide
Zwilling, M., Klien, G., Lesjak, D., Wiechetek, Ł., Cetin, F., & Basim, H. N. (2022). Cyber Security Awareness, Knowledge and Behavior: A Comparative Study. Journal of Computer Information Systems, 62(1), 82–97. https://doi.org/10.1080/08874417.2020.1712269