Financial Crime World

Data Privacy Concerns in Lebanon: A Growing Issue

Lebanon has faced numerous instances of compromised personal data, highlighting a pressing need for enhanced data protection and user privacy measures. This article summarizes some of the notable cases:

Cookies and Data Collection

  • Double-click and Facebook Pixels cookies: The LDV website used cookies without informing users or providing any disclosure about how this data would be used.

Government Data Breaches

  • Lebanese Embassy data breach: In April 2018, it was reported that Lebanese embassies had exposed the personal data of Lebanese citizens abroad by emailing spreadsheets containing sensitive information to expats who registered to vote in the upcoming election. This data included full names, addresses, and other personal details.
  • American University of Beirut (AUB) data breach: In 2014, a hacker leaked information about the mismanagement of AUB, including data from American University Hospital (AUH). The hacker confirmed that they had access to medical files from AUH.

Commercial Data Misuse

  • Personal cell phone numbers: Alfa and touch, Lebanon’s two state-owned mobile phone operators, sell users’ data to businesses and advertising agencies without providing a service to opt-out from these messages.
  • License plates information: The vehicle registration center leaks information linked to license plate numbers on an annual basis, including names, addresses, phone numbers, dates of birth, and license plate numbers.

Government Applications and Services

  • Eye Police: A mobile application launched by the Ministry of Information in June 2018 allows users to report issues or incidents but has raised concerns about data protection and user privacy.
  • WhatsApp hacking: Lebanese WhatsApp users have been hacked, with hackers gaining access to accounts by using SMS activation codes and demanding payment to relinquish control.

Conclusion

These instances underscore the need for better data protection and privacy measures in Lebanon. By addressing these concerns, we can create a safer digital environment for citizens and promote trust in government institutions and private organizations.