Online Safety Awareness

Put my big girl pants on today… …and found myself on Channel 5 News talking about a deeply sensitive issue: the ransomware attack on a UK nursery (Kido), where children’s photos and personal data were leaked. As a parent whose children attended nursery and a cybersecurity professional, this one hit hard. In just a few minutes on-air, we unpacked some critical questions: Q. What’s the real risk to the children involved? A. It’s not just digital — the threat of future ID fraud. It’s emotional too. Parents are dealing with the trauma (shame, anger, worry etc) of not knowing where their child’s image or data may end up, especially in the wrong hands. Q. What can parents do now? ✔️ Ask for transparency from the nursery ✔️ Monitor for unusual activity online ✔️ Report concerns to the ICO ✔️ Don’t be afraid to seek legal advice ✔️ Increase their cyber hygiene ✔️ Lockdown their credit in case they’re targeted so criminals can’t take out a loan or open a bank account. Q. Could this have been prevented? A. Probably. Basic cybersecurity hygiene — encrypted data, trained staff, adequate technology to detect, contain and respond — makes all the difference. And being prepared for it so they can control the narrative and be responsible in regard to their customers. This isn’t an IT problem. It’s a safeguarding issue. Q. Should nurseries store this data digitally at all? A. Maybe, although I don’t think it’s needed as the nurseries my children went to never needed photos of them. That said, if they do store it it must only be with strict safeguards, clear consent, and transparency. Convenience is never an excuse for complacency. And no — small organisations aren’t safe from attacks. In fact, they’re often more vulnerable. That has to change. This incident is a reminder that data protection is also child protection. You can’t outsource it. Insurance doesn’t solve it. No excuses. No shortcuts. Thanks to Channel 5 for opening the space for this important conversation. Photo is not glam or of me in the TV studio. Instead it’s of me under a rainbow to remind folk that the storm will always pass and after it, often comes the rainbow. All is well. #CyberSecurity #DataPrivacy #Safeguarding #Ransomware #Channel5News #DigitalSafety #ChildProtection

I was invited to speak on the recent initiative by #AndhraPradesh government to ban social media for children under 16 years at ET Now Swadesh The biggest gap in managing children’s social media use today is that parenting itself is slowly being replaced by social media. Time that should be spent between parents and children is now being taken over by platforms like Instagram and YouTube. In many homes, parenting is being unintentionally substituted by screens. When children are watching reels, parents often have no idea what the child is clicking on or where one link may lead. This is one of the most concerning gaps. A single click can redirect a child to another site, including adult or inappropriate content. Children do not have the understanding to process this and continue clicking out of curiosity. Even when parents want to monitor or control this, they often cannot, simply because they do not know what their child is being exposed to. Phones are inevitable today, and access is easy. Since complete control is not realistically possible, what matters most is parental involvement. No one can replace parents. It is important to be involved in a child’s life and to create a non-judgemental space at home where children feel safe to talk. Parents should observe changes in behaviour and initiate conversations rather than waiting. This kind of environment allows parents to monitor better. Banning social media is not the solution. The parenting style needs to shift. Right now, many parents are focused on control, but control alone does not work. Children will always find other ways to access social media. What is needed is a shift from control to connection. If you control, children will find different avenues for social media. If you connect, bonding between the parents and child will increase. It is also important to delay social media exposure as much as possible and to have clear conversations about screens, cyberbullying, and the fake or curated lives shown online. I see many cases where very young children, in senior kindergarten or grade one, are having spa parties and focusing on hair, nails, designs, and face structure. Much of this influence comes from platforms like Instagram and Pinterest. At an age when children should be playing outside, they are already being exposed to things that are not developmentally appropriate. Instead, children should be encouraged to engage in real-world activities. Parties can be at the beach, in gardens, play zones, or include pottery, movement-based activities, or free play at home. These experiences are far more appropriate and beneficial for their development. As parents, it is important to draw boundaries, stay involved, and focus on building connection. That is where real monitoring and guidance begin. #parenting #etnow #psychologyinsightsbyriddhi

Millions of kids unwrap their very 1st tech gifts. And while the excitement is real… so are the risks. With winter break around the corner, kids spend more hours online with less supervision & the data should make every parent pause: + 90% of kids 8+ are online daily + 67% of U.S. kids (8–18) have experienced at least one cyber risk + Kids are 51x more likely than adults to experience identity theft Home doesn’t automatically mean safe especially online. As a mom of 4, cybersecurity practitioner, author, & TEDx speaker teaching families how to stay safe, here are the biggest threats this winter break /holiday season: 1. Cyberbullying & Deepfakes 65% of kids 8–14 have experienced cyberbullying.
AI deepfakes make harmful content spread faster than ever. 2. “Holiday Sharenting” Oversharing kids' photos can expose them to identity theft & unwanted digital trails. Pause before posting. (I talked about this in my TEDx talk) 3. Inappropriate Content Exposure More screen time = more chances to encounter harmful content.
Filters & parental controls are essential. 4. Online Predators Predators become more active during long breaks.
Anonymity online makes kids vulnerable to manipulation. So how do we protect our kids? ✨ Create open communication
Normalize talking about online experiences. Regular check-ins build trust. ✨ Set healthy tech boundaries
Know their apps, review screen time, prioritize safety tools. ✨ Teach online privacy early
Explain why personal info should never be shared with strangers. ✨ Choose age-appropriate tech
If gifting devices, set up privacy settings together. Our kids deserve a joyful & safe holiday/winter break. 
Let’s build homes where curiosity & wonder thrive without cyber risks following them into the new year. P.s. What tech gifts are your kids asking for this year & what safety tips would you add? #cybersecurity

How to get kids to actually care about being safe online? Well as a “Zillennial,” who grew up with the first wave of smartphones….it took me a while to listen to online safety advice as a teen. Looking back, I realize kids (yes, teens too) are just like us: they focus on what really matters to them. Think about it: losing game progress, missing out on group chats, or being locked out of favorite apps actually matters to them. So when we connect security tips to what they love most, they pay more attention. Ask them what they would hate to lose if someone hacked their account. Then show them how a strong password or tighter privacy settings helps protect what they care about. You can even share how you have been doing (or trying) the same for yourself. It shows them that online safety is a lifelong habit, not just a rule for “paranoid parents” or “little kids.” 👀 When children see online safety as a way to stay connected and protect the things they love, they take it more seriously. It’s not about fear, it is about giving them a real reason to care. How do you frame online safety so your child truly listens? Any strategies or mindsets that worked well for you?

My dad almost sent 50,000 to "me" yesterday. Except it wasn't me. It was a deepfake. AI scams aren't coming, they're already here. And our parents are the most vulnerable targets. The technology is now so good that even tech-savvy people can't detect deepfake videos or voice clones. If YOU can't tell, your parents definitely can't. Here's what I told my parents (please share this with yours or post this screenshot): If you EVER get a video, voice call or message from your family member asking for money: → Stop. Take 10 seconds. Ask ONE deeply personal question. Not their birthday. Not their address. Scammers can find that online. Ask something only you two would know: • What did we fight about at Diwali party 2019? • What's the name of your childhood pet that we never posted about? • What was the last meal we cooked together? The rule in our family now: No money moves without the secret question. Even in "emergencies." I know it feels awkward. I know in a crisis, we don't think rationally. But that's exactly what scammers count on. Sit with your parents THIS WEEK. Create 2-3 questions together. Write them down. Make it a pact. This 5-minute conversation could save them from losing their life savings. Let's protect the people who protected us. #CyberSecurity #DeepfakeSafety #AIScams

I ran an experiment with AI and my 5- & 8-year-olds. Here’s why I had to abort after 15 minutes. And what you can learn from it. I introduced them to a “friendly” AI. Personalized stories. Space adventures. Fun facts about ancient Egypt. Their favourites. No red flags. Just connection, curiosity, and rapid trust. Then they offered our address. Holiday plans. Security details. It was all voluntary. All unprompted. And it happened really fast. I ended the session. And started a crash course in digital trust. Because kids aren’t careless. And AI isn’t malicious. And rapport? It is programmable. So let’s bust a few myths 👇 𝑴𝒚𝒕𝒉 1: AI with voice and warmth is safe for kids AI builds rapport fast, faster than real humans. And kids mistake it for friendship. 𝑴𝒚𝒕𝒉 2: Safety = encryption + permissions Trust isn’t built through backend systems. It’s built, and misbuilt, in dialogue. 𝑴𝒚𝒕𝒉 3: Critical thinking protects young users Caution fades fast when the AI sounds like a friend. Oversharing becomes natural. 𝑴𝒚𝒕𝒉 4: Personal AI = personal boundaries AI remembers. But it doesn’t forget. It mirrors attention, not context. 𝑴𝒚𝒕𝒉 5: Design makes it helpful by default No. It makes it persuasive by default. Helpfulness comes from intent. 📘 How to engage safely, and lead wisely: For everyone using AI tools: ↳Don’t assume “kid-friendly” means safe. ↳Ask what data is stored and how “memory” works. ↳Use AI in shared spaces with kids. ↳Keep usage visible, not behind closed screens. Debrief after use. Ask: What did it say? What did you tell it? Treat over-trusting behavior as a teachable moment, not a failure. Curiosity is natural. Guardrails are the fix. For product leaders and creators: ↳Design for disclosure: make memory and context transparent. ↳Add friction: slow down sensitive topics, even with kids. ↳Randomize or rotate voice personas; over-familiarity drives oversharing. ↳Create companion guides for parents, caregivers, and teachers. For policymakers and ethics leads: ↳Push for minimum design standards: age-aware interactions, trust signals, exit points. ↳Regulate based on behavior, not category. ↳An “educational AI” that harvests secrets isn’t safe. ↳Fund digital literacy early, before it’s urgent. AI is not our friend. It’s a tool that talks like one. Know the difference. It's not just about kids. One in six adults feels lonely.  AI already fills that gap, and more... But at what cost? Are we okay with that?

A child in Araria, Bihar, is sharing a phone with three siblings right now. She might be doing homework. She might be playing a game. She might be talking to someone she has never met. 𝗧𝗵𝗲 𝗱𝗲𝘃𝗶𝗰𝗲 𝗱𝗼𝗲𝘀 𝗻𝗼𝘁 𝗱𝗶𝘀𝘁𝗶𝗻𝗴𝘂𝗶𝘀𝗵. 𝗧𝗵𝗲 𝗮𝗹𝗴𝗼𝗿𝗶𝘁𝗵𝗺 𝗰𝗲𝗿𝘁𝗮𝗶𝗻𝗹𝘆 𝗱𝗼𝗲𝘀 𝗻𝗼𝘁 𝗰𝗮𝗿𝗲. Shireen Vakil and I wrote a piece in TheWire.in this week on AI and online gaming and why child safety cannot be stitched in at the end like an afterthought. It came from a place of real worry... because we have spent years on the ground watching harm arrive faster than any protection ever does. And the numbers are brutal. Not the kind you skim!  • 300 million children worldwide experienced some form of technology-facilitated abuse in 2024  • AI-generated child sexual abuse material rose by 1,325% in a single year  • In India, 99% of children in the remotest parts of Bihar are online... but 50% of them are on shared devices These are not abstract statistics. These are children. Real ones. Many of them have no adult who understands what a gaming chat room even is! Here is what years of this work teach you. When a platform launches, child safety rarely makes the first meeting. It makes the fifth... usually after something has already gone wrong. By then, the architecture is set. The defaults are locked in. Trying to retrofit safety onto a live product is like fitting seatbelts to a car already doing 80 on the highway. We are at a moment, though... genuinely. At the 𝗔𝗜 𝗜𝗻𝗱𝗶𝗮 𝗜𝗺𝗽𝗮𝗰𝘁 𝗦𝘂𝗺𝗺𝗶𝘁 𝘁𝗵𝗶𝘀 𝘄𝗲𝗲𝗸, policymakers and technologists and civil society are in the same room, and the conversation is different. Less defensive. More honest. The ask has moved from "child safety as a checkbox" to "child well-being built into the design itself." That is not a small thing! 𝗪𝗲 𝘀𝘂𝗯𝗺𝗶𝘁𝘁𝗲𝗱 𝗿𝗲𝗰𝗼𝗺𝗺𝗲𝗻𝗱𝗮𝘁𝗶𝗼𝗻𝘀 𝘁𝗼 Ministry of Electronics and Information Technology. An AI and child safety working group is reviewing them. It is slow. It is imperfect. But it is real movement, and I will take it. What we cannot afford is more acknowledgement without action. Platforms need reporting mechanisms in the product before launch, not after a scandal forces their hand. Age-appropriate defaults should not be opt-ins that assume a ten-year-old will navigate a settings menu. And India has a genuine opportunity to lead here, especially for the Global South, where the devices are shared, the families are large and the Western playbooks simply do not fit our ground realities. 𝗧𝗵𝗲 𝗰𝗵𝗶𝗹𝗱 𝗶𝗻 𝗔𝗿𝗮𝗿𝗶𝗮 𝗶𝘀 𝗻𝗼𝘁 𝘄𝗮𝗶𝘁𝗶𝗻𝗴 𝗳𝗼𝗿 𝘁𝗵𝗲 𝗽𝗼𝗹𝗶𝗰𝘆 𝗰𝘆𝗰𝗹𝗲 𝘁𝗼 𝗰𝗮𝘁𝗰𝗵 𝘂𝗽. 𝗡𝗲𝗶𝘁𝗵𝗲𝗿 𝘀𝗵𝗼𝘂𝗹𝗱 𝘄𝗲. Full piece linked in the comments below. Space 2 Grow Anuj Singhal

Every year, 350,000 Nigerian graduates leave their hometowns and arrive in cities they've never lived in. They have three weeks to find housing. And they're surrounded by landlords who know exactly how desperate they are. The scams are not rare. They're routine. When I started working on CozzyConnect, I thought the brief was about housing. Find rooms, list prices, done. But the more I dug in, the clearer it became: the real problem wasn't the lack of listings. It was the lack of trust. A corp member doesn't just need a room, they need to know the person they're paying won't disappear with their money. They need to know someone in that new city has their back. That's a completely different design problem. So instead of just building a listing platform, we built for psychological safety first. Facial verification for both landlords and tenants not just to prevent fraud, but to make both sides feel seen and accountable. We added location-based community hubs because isolation after camp is real, and a housing app that also connects you to other corp members in Lagos is suddenly much more than a housing app. We integrated job boards and deals specifically for the NYSC financial reality because a corp member's budget is not a regular adult budget, and designing without acknowledging that is just bad research. Design is most powerful when it's solving for safety and belonging not just functionality. Anyone can build a listing page. Very few people sit with the actual fear of a 22-year-old arriving alone in a strange city with ₦33,000 allawee and three weeks to find somewhere to sleep. Have you ever designed for a user whose biggest barrier wasn't the product, it was trust? How did you handle it? 👇 #ProductDesign #NYSC #mobileapp

If you want to build great products, they need to meet the needs of the actual humans using them. Those actual humans have wildly different needs -- and thus for fields like security/privacy/trust different threat models. Handling safety for at-risk users is both important for those users and awfully helpful in solving these problems for everyone else. My team at Google spent over 9 years learning how to do this effectively and wrote a paper explaining how (and were kind enough to make me a coauthor). I hope it'll be useful to you. https://lnkd.in/gqSvV2Z6

Ever tried setting a password with uppercase letters, numbers, symbols, and maybe even a secret handshake—only to give up in frustration? 🔐 You're not alone! Now, imagine if cybersecurity wasn’t just a chore but something you actually enjoyed. How? Through thoughtful design. Good design goes beyond aesthetics. It’s about making interactions smoother and more intuitive—especially when it comes to security. The easier and friendlier security features are, the more likely users are to embrace them. 🤝 ✅ Take two-factor authentication (2FA). Instead of a confusing, jargon-filled process, imagine being guided step-by-step with clear, encouraging prompts. No stress, no hassle—just seamless security. 🛠️ Or consider password managers. What if they didn’t feel like a burden, but a helpful assistant? With gentle reminders and an easy-to-navigate interface, they could nudge users to update passwords without sounding like the usual security nag. Design can also educate. Subtle visual cues, animations, and concise microcopy can teach users about online safety without them even realizing they’re learning. It’s a bit like sneaking vegetables into a child’s meal—sneaky, but incredibly effective. In a world of rising cyber threats, user-friendly design isn't a luxury; it's a necessity. It not only protects users but empowers them to take control of their digital safety. After all, the best security features are useless if no one knows how to use them. 🛡️ So, let’s start designing for security. Safety can—and should—be delightful. #Cybersecurity #UXDesign #DigitalSafety #DesignInnovation