Tools & Resources / Personal data / A practical privacy guide
Why Protecting Personal Data Privacy Is More Urgent Than Ever
Understand your exposure, find your personal data and reduce the footprint you leave behind.
Read the context, then move into practical action.
01 / Personal data
Overview
In today’s hyperconnected world, growing up online has become the norm. But with that convenience comes a hidden cost—personal data has become the currency that fuels an unprecedented wave of fraud, identity theft, and AI-powered scams.
The stakes aren’t just financial. They’re emotional, psychological, and potentially lifelong. What you post, what you sign up for, and what you leave behind online can all be weaponised against you—often by criminals using sophisticated AI tools that make deception nearly undetectable.
The Scale of the Problem: UK fraud prevention services consistently report record-breaking fraud levels year on year. Identity fraud accounts for the majority of all cases, with account takeover and SIM swap fraud growing at alarming rates. The global data broker industry is now worth hundreds of billions of pounds—and continues to expand rapidly.
Personal data / Your digital footprint
Your data leaves a trail.
Search results, public profiles and forgotten accounts can reveal more than you intend. Start by seeing what is visible, then reduce the information you leave exposed.
- Find Look for your publicly visible details.
- Reduce Remove unnecessary information and unused accounts.
- Review Check again as your footprint changes.
The UK Fraud Landscape
Fraud in the UK has reached unprecedented levels and continues to grow in both scale and sophistication. According to Cifas and UK Finance data, the trends are clear:
| Fraud Type | Trend | Key Insight |
|---|---|---|
| Identity fraud | 📈 Consistently rising | Accounts for the majority of all fraud cases filed to the National Fraud Database |
| Account takeover | 📈 Rapid growth | Criminals use stolen personal details to access bank accounts and financial products |
| SIM swap fraud | 📈 Explosive growth | Criminals hijack phone numbers to intercept two-factor authentication codes |
| AI-enabled fraud | 📈 Emerging threat | Deepfakes, voice cloning, and synthetic identities making scams harder to detect |
| APP fraud | ⚠️ Significant | Authorised Push Payment fraud remains one of the most common attack types |
Who Is Most At Risk?
| Demographic | Risk Profile |
|---|---|
| Over 60s | Most frequently targeted for identity fraud and account takeover; often higher individual losses |
| Millennials (25-44) | Tend to experience the highest average financial losses when targeted |
| Young people (under 21) | Increasingly targeted; significant emotional impact; low reporting rates; vulnerable to money mule recruitment |
| 18-24 year olds | Less likely to think about data security than older age groups; lower adoption of security tools |
The AI-Powered Threat Revolution
Artificial intelligence has fundamentally transformed the fraud landscape. Criminals now use AI to create deepfakes, synthetic identities, and voice clones that are nearly indistinguishable from reality.
| AI Threat | How It Works | Impact |
|---|---|---|
| 🎭 Deepfake video | AI-generated video that impersonates real people in video calls | Used to authorise fraudulent payments by impersonating executives |
| 🎤 Voice cloning | Only seconds of audio needed to create convincing voice replicas | Bypasses voice authentication; enables phone-based impersonation scams |
| 🆔 Synthetic identities | AI combines real and fake data to create entirely new identities | Extremely difficult to detect; used to open fraudulent accounts |
| 📄 Forged documents | AI generates convincing fake IDs, passports, and official documents | Defeats traditional identity verification processes |
| 🎯 Personalised phishing | AI analyses victim data to craft highly targeted, convincing attacks | Much higher success rates than generic phishing |
Real-World Example: A finance worker at a multinational firm was tricked into transferring over £20 million after a video call where every participant—except the victim—was an AI-generated deepfake of senior colleagues, including the CFO. Such attacks are becoming increasingly common as the technology becomes more accessible.
Why AI Makes Traditional Detection Harder
| Challenge | Implication |
|---|---|
| Human detection of high-quality deepfakes is extremely poor | Staff cannot reliably spot AI-generated video or audio |
| Deepfakes account for a growing share of biometric fraud attempts | Facial recognition and voice authentication becoming less reliable |
| AI tools are cheap and increasingly accessible | Low barrier to entry for criminals; attacks at scale |
The Hidden Danger: Your Personal Data Online
While fraudsters use increasingly sophisticated tactics, their weapon of choice is often simple—your personal information. The more data exposed about you online, the easier it is for criminals to build convincing synthetic profiles, bypass security questions, and impersonate you.
Why Should You Care?
Even if you’re not a celebrity or high-ranking official, your online data puts you at risk for:
| Risk | How Your Data Enables It |
|---|---|
| 🆔 Identity theft | Name, DOB, address used to open accounts or take loans in your name |
| 🎭 Impersonation scams | Voice clips from social media enable AI voice cloning |
| 📍 Doxxing and harassment | Home address, workplace, family details exposed |
| 📱 SIM swap attacks | Personal details used to convince carriers to port your number |
| 🔐 Account takeover | Security question answers often found in social media posts |
| 🎯 Targeted phishing | AI uses your data to craft personalised, convincing attacks |
How Does Your Info End Up Online?
Your personal data doesn’t need to be hacked—it’s often given away legally and freely:
| Source | What’s Exposed |
|---|---|
| 📋 Public records | Property purchases, electoral roll, company directorships, court records |
| 📝 Online forms | Warranties, newsletter signups, quiz apps, loyalty programmes |
| 📱 Social media | Photos, voice clips, location check-ins, birthday posts, family details |
| 🏢 Data brokers | Compile and sell aggregated profiles from multiple sources |
| 💔 Data breaches | Leaked credentials, personal details sold on dark web |
Data Point: The average person’s online profile now contains hundreds of pieces of personal data—and this figure continues to grow. This data enables the AI-powered personalisation that makes modern scams so effective.
Youth-Targeted Fraud: A Growing Crisis
Young people are increasingly becoming targets of digital fraud, often with devastating emotional consequences beyond financial loss.
Research by Cifas, in collaboration with Crest Advisory, the City of London Police, and the national fraud reporting service, reveals an unsettling trend:
| Finding | Insight |
|---|---|
| The vast majority of young people (13-21) have been targeted by fraud | Fraud has become a near-universal experience for young people online |
| Tens of millions of pounds stolen from under-21s annually | Financial impact is substantial and growing |
| Nearly half of victims experience emotional distress | Impact goes far beyond financial loss |
| Only a minority report incidents | True scale of youth fraud significantly underreported |
| Young adults less likely to think about data security | Lower awareness creates higher vulnerability |
As Cifas states: “Fraud is becoming a part of growing up – and young people are paying the price.”
The Money Mule Danger
Criminals increasingly target young people to act as “money mules”—allowing their bank accounts to be used to transfer illegally obtained funds. Most people don’t understand what money muling is, making them vulnerable to recruitment via social media.
Warning: Being involved in money muling is illegal. Consequences include being filed on the Cifas National Fraud Database for up to 6 years, difficulty opening bank accounts, and potential criminal prosecution.
Fighting Back: Education and Advocacy
Recognising the urgency, several initiatives are pushing for a national, youth-focused fraud strategy:
| Initiative | Focus |
|---|---|
| ✅ Fraud Pledges | Presented to UK Government to integrate fraud awareness into PSHE curriculum (Key Stages 3 & 4) |
| ✅ “Don’t Be Fooled” campaign | Partnership with UK Finance teaching about money muling dangers; school resources |
| ✅ Parent Zone / Nominet | Addressing broader child financial harms online |
| ✅ Stop! Think Fraud | UK Government campaign with guidance and resources |
| ✅ Cifas Young People Hub | Dedicated fraud awareness resources for young people |
Your Legal Rights: UK & EU Data Protection
Under UK GDPR, the Data Protection Act 2018, and subsequent reforms, you have significant rights over your personal data:
| Right | What It Means |
|---|---|
| 🗑️ Right to erasure | Ask organisations to delete your data in certain circumstances (also known as “right to be forgotten”) |
| 📋 Subject access requests | See what data organisations hold about you (organisations must respond within one month) |
| 🔒 Data broker restrictions | Brokers cannot use data from removal requests for other purposes |
| ⚖️ Enforcement | The ICO can impose significant penalties for non-compliance |
| 📢 Complaints | Right to complain to the ICO if organisations don’t respect your rights |
Data Brokers & UK Law: Under UK GDPR and the Data Protection Act 2018, data brokers must have a lawful basis to collect and process your data, and must obtain consent where required. They cannot keep data from removal requests for any purpose other than processing the request itself.
02 / Personal data
🔍 Want to See What’s Out There?
Here’s how to check your exposure:
| Method | How To |
|---|---|
| 🔎 Search for yourself | Search your name in quotes + location on major search engines. Check “Tools” for older results. |
| 📊 Google “Results About You” | Free tool at myactivity.google.com/results-about-you — proactive monitoring and removal requests |
| 📋 Data removal services | Services that scan data broker sites and submit removal requests on your behalf |
| 🔐 Breach checking | Check haveibeenpwned.com for leaked credentials |
Google “Results About You”
Google offers a free tool to help manage your personal information in search results:
| Feature | Capability |
|---|---|
| Proactive monitoring | Automatically scans for your personal info in search results |
| Alert notifications | Email or app alerts when your data appears |
| Removal requests | Request removal directly from search results |
| Coverage | Addresses, phone numbers, emails, government IDs, bank details |
Important Limitation: Google’s tool only removes content from Google Search results—it doesn’t delete the underlying data from the original websites. For comprehensive protection, you’ll also need to contact data brokers directly or use a removal service.
03 / Personal data
🧹 How to Start Cleaning Up Your Digital Footprint
You have two options: DIY or use a removal service.
Option 1: DIY Opt-Out
You can manually request removal from people-search websites and data brokers:
| Step | Best Practice |
|---|---|
| 1. Find opt-out pages | Search for “[data broker name] opt out” or use published opt-out guides |
| 2. Mask sensitive info | Redact ID numbers when submitting verification |
| 3. Use burner contacts | Disposable email/phone for opt-out requests |
| 4. Document everything | Keep records of requests and responses |
| 5. Be patient | Removal can take weeks or months per site |
Option 2: Use a Privacy Removal Service
Various services offer automated data broker removal:
| Benefit | Description |
|---|---|
| 🔍 Comprehensive scanning | Identify your data across dozens or hundreds of broker sites |
| 📤 Automated requests | Submit opt-out requests on your behalf |
| 🔄 Ongoing monitoring | Monitor and resubmit as data reappears |
| 🛡️ Extra tools | Disposable contact info, breach alerts |
Reality Check: Removal isn’t permanent. Data brokers often recollect the same information, so continuous monitoring is essential. This is why subscription-based services can be more effective than one-time removals.
04 / Personal data
🛡️ Long-Term Habits for Digital Privacy
Here are smart habits you can adopt today:
| Priority | Habit | Why It Matters |
|---|---|---|
| HIGH | Use authenticator apps, not SMS | SIM swap fraud is growing rapidly—SMS 2FA is vulnerable |
| HIGH | Enable account PIN with mobile carrier | Extra verification before number porting |
| HIGH | Limit voice/video on social media | Only seconds of audio needed for voice cloning |
| MEDIUM | Use burner emails for signups | Keep primary email private |
| MEDIUM | Use alternative details for non-critical accounts | DOB is a key identity verification data point |
| MEDIUM | Review privacy settings regularly | Platforms frequently change defaults |
| MEDIUM | Search for yourself periodically | Monitor what’s publicly visible |
| BASIC | Use privacy-focused browser settings | Enable Do Not Track; use private browsing where appropriate |
| BASIC | Delete unused accounts | Reduce exposure surface |
| BASIC | Register with TPS | Opt out of telemarketing calls (UK Telephone Preference Service) |
05 / Personal data
Protecting Your Business
For business leaders, the stakes are even higher. AI-powered fraud threatens both your organisation and your employees:
| Business Action | Implementation |
|---|---|
| 🎓 Update staff training | Train beyond traditional phishing—include deepfake video and voice cloning awareness |
| 🔐 Implement verification protocols | Multi-channel verification for payment requests; callback on known numbers |
| 🤔 Foster healthy scepticism | Empower employees to question unusual requests regardless of apparent source |
| 🧪 Regular simulations | Periodic tests with AI-generated content to maintain awareness |
| 📢 Clear reporting channels | Make it easy to report suspicious requests without blame culture |
| 💰 Invest in detection | Budget for fraud detection and prevention tools appropriate to your risk profile |
06 / Personal data
Key Resources (UK)
| Resource | Purpose | Link |
|---|---|---|
| Google Results About You | Free tool to monitor and remove personal data from Google Search | myactivity.google.com |
| Stop! Think Fraud | UK Government fraud prevention guidance | stopthinkfraud.campaign.gov.uk |
| Cifas Young People Hub | Fraud awareness resources for young people | cifas.org.uk/youngpeople |
| Have I Been Pwned | Check if your credentials have been leaked in breaches | haveibeenpwned.com |
| ICO Right to Erasure | Guidance on requesting data deletion under UK GDPR | ico.org.uk |
| Report Fraud | UK national fraud and cyber crime reporting service | report-fraud.police.uk |
| Cifas Protective Registration | Extra identity protection layer for those at risk | cifas.org.uk |
| Telephone Preference Service | Opt out of unsolicited marketing calls (UK) | tpsonline.org.uk |