The Times Australia
The Times World News

.

What do TikTok, Bunnings, eBay and Netflix have in common? They’re all hyper-collectors

  • Written by Brendan Walker-Munro, Senior Research Fellow, The University of Queensland
What do TikTok, Bunnings, eBay and Netflix have in common? They’re all hyper-collectors

You walk into a shopping centre to buy some groceries. Without your knowledge, an electronic scan of your face is taken by in-store surveillance cameras and stored in an online database. Each time you return to that store, your “faceprint” is compared with those of people wanted for shoplifting or violence.

This might sound like science fiction but it’s the reality for many of us. By failing to take our digital privacy seriously – as former human rights commissioner Ed Santow has warned – Australia is “sleepwalking[1]” its way into mass surveillance.

Privacy and the digital environment

Of course, companies have been collecting personal information for decades. If you’ve ever signed up to a loyalty program like FlyBuys then you’ve performed what marketing agencies call a “value exchange[2]”. In return for benefits from the company (like discounted prices or special offers), you’ve handed over details of who you are, what you buy, and how often you buy it.

Consumer data is big business. In 2019, a report[3] from digital marketers WebFX showed that data from around 1,400 loyalty programs was routinely being traded across the globe as part of an industry worth around US$200 billion[4]. That same year, the Australian Competition and Consumer Commission’s review of loyalty schemes[5] revealed how many of these loyalty schemes lacked data transparency and even discriminated against vulnerable customers.

But the digital environment is making data collection even easier. When you watch Netflix[6], for example, the company knows what you watch, when you watch it, and how long you watch it for. But they go further, also capturing data[7] on which scenes or episodes you watch repeatedly, the ratings of your content, the number of searches you perform and what you search for.

Netflix’s headquarters in Los Angeles
Data-miner: Netflix’s headquarters in Los Angeles. Jae C. Hong/AP

Hyper-collection: a new challenge to privacy

Late last year, the controversial tech company ClearView AI was ordered[8] by the Australian information commissioner to stop “scraping” social media for the pictures it was collecting in its massive facial recognition database. Just this month, the commissioner was investigating several retailers for creating facial profiles[9] of the customers in their stores.

This new phenomenon – “hyper-collection” – represents a growing trend by large companies to collect, sort, analyse and use more information than they need, usually in covert or passive ways. In many cases, hyper-collection is not supported by a truly legitimate commercial or legal purpose.

Digital privacy laws and hyper-collection

Hyper-collection is a major problem in Australia for three reasons.

First, Australia’s privacy law wasn’t prepared for the likes of Netflix and TikTok. Despite numerous amendments[10], the Privacy Act[11] dates back to the late 1980s. Although former Attorney-General Christian Porter announced a review[12] of the Act in late 2019, it has been held up by the recent change of government.

Second, Australian privacy laws are unlikely on their own to threaten the profit base of foreign companies, especially those located in China. The Information Commissioner has the power to order companies to take certain actions – like it did with Uber in 2021[13] – and can enforce these through court orders. But the penalties aren’t really big enough to discourage companies with profits in the billions of dollars.

Read more: 83% of Australians want tougher privacy laws. Now’s your chance to tell the government what you want[14]

Third, hyper-collection is often enabled by the vague consents we give to get access to the services these companies provide. Bunnings, for example, argued that its collection of your faceprint was allowed because signs at the entry to their stores[15] told customers facial recognition might be used. Online marketplaces like eBay, Amazon, Kogan and Catch, meanwhile, supply “bundled consents[16]” – basically, you have to consent to their privacy policies as a condition of using their services. No consent, no access.

TikTok and hyper-collection

TikTok (owned by Chinese company ByteDance) has largely replaced YouTube as a way of creating and sharing online videos. The app is powered by an algorithm has already drawn criticism[17] for routinely collecting data about users, as well as the ByteDance’s secretive approach to content moderation and censorship[18].

For years, TikTok executives have been telling governments that data isn’t stored in servers on the Chinese mainland[19]. But these promises might be hollow in the wake of recent allegations.

Man in front of ByteDance building
Behind closed doors: a security guard attempts to stop a photographer at the Beijing headquarters of TikTok’s owners, ByteDance, in August 2020. Wu Hong/EPA

Cybersecurity experts now claim that not only does the TikTok app routinely connect to Chinese servers[20], but that users’ data is accessible by ByteDance employees, including the mysterious Beijing-based “Master Admin”, which has access to every user’s personal information[21].

Then, just this week, it was alleged that TikTok (owned by Chinese company ByteDance) can also access almost all the data[22] contained on the phone it is installed on – including photos, calendars and emails.

Under China’s national security laws, the government can order tech companies to pass on that information[23] to police or intelligence agencies.

What options do we have?

Unlike a physical store, we don’t get a lot of choice about consenting to digital companies’ privacy policies and how they collect our information.

One option – supported by encryption expert Vanessa Teague at ANU – is for consumers simply to delete offending apps until their creators are willing to submit to greater data transparency[24]. Of course, this means locking ourselves out of those services, and it will only have a big impact in the company if enough Australians join in.

Read more: Facial recognition is on the rise – but the law is lagging a long way behind[25]

Another option is “opting-out” of intrusive data collection. We’ve done this before – when My Health records became mandatory in 2019, a record number of us opted out[26]. Though these opt-outs reduced the usefulness of that digital health record program[27], they did demonstrate that Australians can take their data privacy seriously.

But how exactly can Australians opt-out of a massive social app like TikTok? Right now, they can’t – perhaps the government needs to explore a solution as part of its review.

A further option being explored by the Privacy Act review is whether to create new laws that would allow individuals to sue companies for damages for breaches of privacy[28]. While lawsuits are expensive and time-consuming, they might just deliver the kind of financial damage to big companies that could change their behaviour.

No matter which option we take, Australians need to start getting more savvy with their data privacy. This might just mean we actually read those terms and conditions before agreeing, and being prepared to “vote with our feet” if companies won’t be honest about what they’re doing with our personal information.

References

  1. ^ sleepwalking (www.theage.com.au)
  2. ^ value exchange (www.choice.com.au)
  3. ^ report (www.webfx.com)
  4. ^ worth around US$200 billion (clearcode.cc)
  5. ^ review of loyalty schemes (www.accc.gov.au)
  6. ^ watch Netflix (onlinemasters.ohio.edu)
  7. ^ capturing data (seleritysas.com)
  8. ^ ordered (www.oaic.gov.au)
  9. ^ creating facial profiles (www.abc.net.au)
  10. ^ numerous amendments (www.oaic.gov.au)
  11. ^ Privacy Act (www.oaic.gov.au)
  12. ^ announced a review (www.ag.gov.au)
  13. ^ did with Uber in 2021 (www.afr.com)
  14. ^ 83% of Australians want tougher privacy laws. Now’s your chance to tell the government what you want (theconversation.com)
  15. ^ signs at the entry to their stores (ia.acs.org.au)
  16. ^ bundled consents (www.accc.gov.au)
  17. ^ criticism (theconversation.com)
  18. ^ content moderation and censorship (www.lowyinstitute.org)
  19. ^ data isn’t stored in servers on the Chinese mainland (www.aspistrategist.org.au)
  20. ^ routinely connect to Chinese servers (www.smartcompany.com.au)
  21. ^ access to every user’s personal information (www.buzzfeednews.com)
  22. ^ almost all the data (www.abc.net.au)
  23. ^ pass on that information (www.sbs.com.au)
  24. ^ willing to submit to greater data transparency (www.sbs.com.au)
  25. ^ Facial recognition is on the rise – but the law is lagging a long way behind (theconversation.com)
  26. ^ opted out (www.yourlifechoices.com.au)
  27. ^ digital health record program (www.theguardian.com)
  28. ^ sue companies for damages for breaches of privacy (www.ag.gov.au)

Read more https://theconversation.com/what-do-tiktok-bunnings-ebay-and-netflix-have-in-common-theyre-all-hyper-collectors-187274

Times Magazine

Headless CMS in Digital Twins and 3D Product Experiences

Image by freepik As the metaverse becomes more advanced and accessible, it's clear that multiple sectors will use digital twins and 3D product experiences to visualize, connect, and streamline efforts better. A digital twin is a virtual replica of ...

The Decline of Hyper-Casual: How Mid-Core Mobile Games Took Over in 2025

In recent years, the mobile gaming landscape has undergone a significant transformation, with mid-core mobile games emerging as the dominant force in app stores by 2025. This shift is underpinned by changing user habits and evolving monetization tr...

Understanding ITIL 4 and PRINCE2 Project Management Synergy

Key Highlights ITIL 4 focuses on IT service management, emphasising continual improvement and value creation through modern digital transformation approaches. PRINCE2 project management supports systematic planning and execution of projects wit...

What AI Adoption Means for the Future of Workplace Risk Management

Image by freepik As industrial operations become more complex and fast-paced, the risks faced by workers and employers alike continue to grow. Traditional safety models—reliant on manual oversight, reactive investigations, and standardised checklist...

From Beach Bops to Alpine Anthems: Your Sonos Survival Guide for a Long Weekend Escape

Alright, fellow adventurers and relaxation enthusiasts! So, you've packed your bags, charged your devices, and mentally prepared for that glorious King's Birthday long weekend. But hold on, are you really ready? Because a true long weekend warrior kn...

Effective Commercial Pest Control Solutions for a Safer Workplace

Keeping a workplace clean, safe, and free from pests is essential for maintaining productivity, protecting employee health, and upholding a company's reputation. Pests pose health risks, can cause structural damage, and can lead to serious legal an...

The Times Features

Prefab’s Second Life: Why Australia’s Backyard Boom Needs a Circular Makeover

The humble granny flat is being reimagined not just as a fix for housing shortages, but as a cornerstone of circular, factory-built architecture. But are our systems ready to s...

Melbourne’s Burglary Boom: Break-Ins Surge Nearly 25%

Victorian homeowners are being warned to act now, as rising break-ins and falling arrest rates paint a worrying picture for suburban safety. Melbourne residents are facing an ...

Exploring the Curriculum at a Modern Junior School in Melbourne

Key Highlights The curriculum at junior schools emphasises whole-person development, catering to children’s physical, emotional, and intellectual needs. It ensures early year...

Distressed by all the bad news? Here’s how to stay informed but still look after yourself

If you’re feeling like the news is particularly bad at the moment, you’re not alone. But many of us can’t look away – and don’t want to. Engaging with news can help us make ...

The Role of Your GP in Creating a Chronic Disease Management Plan That Works

Living with a long-term condition, whether that is diabetes, asthma, arthritis or heart disease, means making hundreds of small decisions every day. You plan your diet against m...

Troubleshooting Flickering Lights: A Comprehensive Guide for Homeowners

Image by rawpixel.com on Freepik Effectively addressing flickering lights in your home is more than just a matter of convenience; it's a pivotal aspect of both home safety and en...