Protecting your digital privacy requires neither electromagnetic shielding nor giving up the connected world: it comes down to a few sober, documented and proportionate measures. The most effective are also the simplest — enabling two-factor authentication, using a password manager, encrypting your devices, and limiting the data you leave behind. The goal is not total, unrealistic concealment, but autonomy: deciding, as far as possible, who sees what. The right reflex is to rank your actions by benefit/effort ratio, and to start with those whose return is the highest.
Definition. Data minimisation is the principle that you collect, keep and share only the information strictly necessary for a specific purpose. Enshrined in Article 5 of the General Data Protection Regulation (GDPR), it applies first to organisations, but is also the best personal rule: the best-protected data is the data you have never transmitted.
The majority of account compromises come not from a sophisticated hack but from weak, reused or breach-exposed passwords. Two low-cost measures address most of the risk.
First, a password manager. This software generates and remembers a long, unique password for each service, behind a single master password. You thus stop reusing the same key everywhere — the mistake that turns an isolated leak into a chain compromise. Serious solutions exist, some of them open source and audited (for example Bitwarden or KeePassXC), which lets you publicly verify their guarantees.
Then, two-factor authentication (2FA or MFA), which adds a second factor to the password. Not all second factors are equal, from least to most robust:
The French cybersecurity agency (ANSSI) and its Cybermalveillance.gouv.fr service have long recommended these two actions — unique passwords and a second factor — as the foundation of digital hygiene. These are not specialist precautions: they are the foundations.
Encryption turns readable data into text that is unreadable without the key. It protects what matters on the day a device is lost, stolen or seized — a far more likely situation than a targeted attack.
Three concrete uses, all accessible without technical skill:
An honest clarification is needed here, for consistency: protecting your digital privacy is a matter of encryption, settings and habits — never of any shielding against "waves" that would capture data at a distance. The real threat is software-based and organisational (passwords, phishing, advertising tracking), not electromagnetic. Aiming your worry at the wrong target means spending your energy where it protects nothing.
The most powerful action is also the most discreet: producing and transmitting less data. Article 5 of the GDPR imposes on organisations the principles of minimisation, purpose limitation, and storage limitation. At the individual scale, this framework translates into simple reflexes.
The logic is constant: the best-protected data is the data that does not exist on others' servers. No security measure rivals the absence of collection.
The browser is the main point of contact with advertising tracking. A few settings sharply reduce exposure, without disrupting everyday use.
A warning about expectations: a browser's "private browsing" only erases the session's history and cookies locally; it makes you neither anonymous to the sites you visit, nor invisible to your internet provider. Likewise, a VPN shifts trust onto its operator without encrypting or hiding everything. Even the Tor network, designed for anonymity, does not guarantee perfect anonymity and depends largely on the user's behaviour. Understanding what each tool does — and does not do — avoids false security, more dangerous than the absence of precaution.
Not all these measures are equal in return. To act without scattering your effort, here is a reasonable order, from most cost-effective to most fine-grained:
None of these steps requires a costly purchase or a rare skill. Taken together and sustained over time, they considerably raise the level of protection for a modest effort — exactly the opposite of spectacular, useless solutions.
What is the most effective measure to protect your privacy? For the benefit/effort ratio, two-factor authentication on critical accounts and the use of a password manager. These two actions neutralise the vast majority of account compromises, which rest on weak, reused, or breach-exposed passwords.
Does the GDPR protect me personally? Indirectly and genuinely. It compels organisations established in the EU to minimisation, purpose limitation, and security (Article 5), and grants you exercisable rights: access, rectification, erasure, objection. Knowing these rights and exercising them is part of active protection.
Do I need to protect myself from waves or electromagnetic fields to preserve my privacy? No. Data protection is a matter of encryption, settings and habits — not shielding. The threat is software-based and organisational (phishing, tracking, weak passwords); investing in electromagnetic protections protects no data.
To place these actions in the bigger picture — digital identity, surveillance, and the constant boundary between what simplifies life and what exposes it to scrutiny — read the pillar article: Digital identity, panopticon or simplification. And if you want the full investigation, marked out level of certainty by level of certainty and backed by sources, Tome 2 — The Architecture of Control takes up each piece of the file.
For the benefit/effort ratio, two-factor authentication on critical accounts and the use of a password manager. These two actions neutralise the vast majority of account compromises, which rest on weak, reused, or breach-exposed passwords.
Indirectly and genuinely. It compels organisations established in the EU to minimisation, purpose limitation, and security (Article 5), and grants you exercisable rights: access, rectification, erasure, objection. Knowing these rights and exercising them is part of active protection.
No. Data protection is a matter of encryption, settings and habits — not shielding. The threat is software-based and organisational (phishing, tracking, weak passwords); investing in electromagnetic protections protects no data.
Dossier : Monnaie & identité numérique : l'architecture du contrôle
TOME 2: L'Architecture du Contrôle
Accueil · Collection · Journal · Dossiers · Sources