Cybersecurity Guidelines for E-commerce Consumers Sharing Indicator: White 4. Limit Sharing Your Personal Information 4-1 READ THE PRIVACY POLICY • Shop only with reputable e-commerce service providers who have a privacy policy posted. Read the policy and make sure it clearly explains how your data will be used and stored by the seller. • Avoid e-commerce service providers whose policy includes misuse of personal data (e.g. giving consumers’ personal information (without their consent) to advertisement agencies). 4-2 PROTECT YOUR PERSONAL INFORMATION • Do not give more personal information than needed when signing up for an e-commerce account or shopping online. • Only share the information that is required to enable the specific e-commerce transaction and do not choose to save or store your personal or financial information on the apps or website. • Avoid sharing your credit card details over non-secure communication channels such as email or social media messages. 4-3 IGNORE PHISHING MESSAGES • Avoid phishing messages by checking the sender’s identity carefully before opening the message. Phishing is a message that appears to be from a legitimate sender and intends to trick the recipient to reveal personal information such as username, password or credit card details. 4-4 LIMIT PERMISSIONS GRANTED TO APPS • Carefully consider whether it makes sense to give mobile apps or websites permissions to access a variety of data and functions on your device (e.g., location, camera, address book or microphone). Document Classification: Open 15