Digitalization has given us a multitude of services to satisfy all the needs we (may) have. Privacy, while using these services, has long-since been recognized as a valuable good.

Nonetheless we find operators and vendors often neglecting their responsibility, and—more critically—the potential impact insufficiently protecting their customers data has.

In this talk, we will first explore some of the more extreme cases in this context and use these to identify less extreme, but disturbingly more frequent cases.

Subsequently, we will think about the operational security requirements of operating data handling systems, and how operators should live up to their responsibilities.