The major danger on shipping labels: Personal data may be handed over to thieves!
The Personal Data Protection Authority has published an article stating that personal information on shipping labels poses a privacy risk, recommending security measures such as QR codes and end-to-end encryption. Measures to be taken against data breaches in cargo transportation were also addressed.
12punto
An article in the latest issue of the Personal Data Protection Journal, published by the Personal Data Protection Authority, has brought to light the privacy risks that arise during cargo transportation following online shopping.
The article emphasized that the inclusion of recipients' names, surnames, ID numbers, addresses, phone numbers, and other sensitive information clearly on shipping labels creates a serious security vulnerability.
According to a report by Milliyet, the article stated that the use of barcodes on shipping labels that openly display personal information is a "flawed and careless practice."
WHAT SHOULD BE DONE AS A SOLUTION?
As a solution, it was proposed that a QR code containing no personal data be added to barcodes, and that this code be accessible only through a system where the relevant courier logs in.
Furthermore, it was stated that user codes consisting of letters and numbers should be preferred instead of recipient information. It was argued that these methods would increase data security in transportation processes and prevent privacy violations.
END-TO-END ENCRYPTION PROPOSAL
Another suggestion for ensuring data security was end-to-end encryption technology. It was stated that through this method, communication between the sender and the recipient would be accessible only to the parties involved, thereby significantly reducing privacy violations.
The article pointed out that current sanctions for personal data breaches are not sufficiently deterrent. Considering the transaction volumes of online marketplaces and the earnings cargo companies derive from these platforms, it was noted that the penalties are viewed as insignificant by the companies committing the violations. It was emphasized that heavier sanctions would be effective in preventing such violations.