12.4 Taking Action — Your Next Steps

You have reached the final lesson of this course. You now understand what personal data is, who collects it and why, what laws protect you, what rights you hold, and what tools you can use. Knowledge is the starting point — but privacy protection is a practice, not a destination. This lesson is about what comes next.

Immediate steps: start today

These actions take less than an hour and make a meaningful difference:

1. Run a digital footprint audit. Search for your name in multiple search engines; look for what data brokers hold about you (check Spokeo, Whitepages, BeenVerified, and similar sites). Understanding your existing exposure is the foundation of everything else (see Module 10.1).

2. Make a Subject Access Request. Pick one organisation you interact with regularly — your bank, a social media platform, your mobile provider — and exercise your right of access (SAR). Find out what they actually hold about you (see Module 9.1).

3. Opt out of data broker profiles. Most major data brokers offer an opt-out process. Services like DeleteMe can automate this across dozens of brokers. A single morning of opt-out requests can reduce your commercial data exposure significantly.

4. Enable two-factor authentication on critical accounts. Email, banking, and social media accounts compromised together are far more damaging than any individual data breach. 2FA is the single most effective account security step available.

5. Switch to a privacy-respecting browser. Firefox with uBlock Origin, or Brave, blocks most trackers by default. The change takes five minutes.

Medium-term: the next three months

Review privacy settings on all major platforms you use — Facebook, Google, Instagram, LinkedIn, TikTok. Use the privacy dashboard each platform is now required to provide under GDPR and similar laws. Consider switching your default search engine to DuckDuckGo or Startpage. Move your email to a provider like ProtonMail or Tutanota. Use a password manager if you do not already.

Long-term and civic: making privacy collective

Privacy is ultimately a social and political issue, not just a personal one. As long as others are unprotected, the ecosystem remains permissive. You can:

• Support digital rights organisations: the Electronic Frontier Foundation (EFF), noyb (Max Schrems' European privacy advocacy group), Privacy International, and Access Now all campaign, litigate, and lobby for stronger privacy protections.
• Contact your representatives: privacy legislation moves slowly. Constitünt contact matters — especially on issues like facial recognition bans, data broker regulation, and children's online privacy.
• Share what you know: the privacy paradox is partly driven by ignorance. Explaining what a SAR is, or how to opt out of tracking, to one person is one of the most scalable privacy actions you can take.

A closing thought

Privacy protection is not a one-time task. New technologies create new exposures; laws evolve; data collected today may be used in ways that are not yet imaginable. The people who fare best are those who treat privacy as an ongoing practice — checking in on their footprint, exercising their rights, and staying engaged with the organisations and advocates working on their behalf.

Your takeaway

You are not powerless. You have rights, tools, and a community of advocates. Start with one step — today.