01
Social networks and public profiles
Posts, biographies, photographs, comments, follows and older information made visible by privacy settings.
Privacy · Online safety · French law
How is personal information found online?
Understand how public profiles, directories, data brokers, data breaches and search engines can expose personal information.
02 · Digital footprint
Information can come from many different sources
One isolated detail may seem harmless. When information published in different places is combined, it can sometimes reveal much more about a person than they intended.
02
Directories and public sources
Professional directories, registers, listings, publicly accessible records and organisation websites may contain identifying information.
03
Data brokers
Some businesses aggregate information from different sources and provide profiles or contact details, subject to the laws that apply in each country.
04
Data breaches and security incidents
A data breach may expose information held by a service, such as contact details, account identifiers or other records, depending on the incident.
05
Photographs and metadata
An image may reveal context, a recognisable place or personal details. Some files may also contain metadata, depending on their format and how they are processed.
06
Search engines and archives
Search engines index accessible pages and may temporarily retain results or snippets. Copies and archives may remain elsewhere.
Key point: the fact that information is publicly accessible does not automatically make every collection, reuse, combination or disclosure legitimate. Context, purpose, applicable rules and risks to individuals all matter.
Why can combining information be sensitive?
A single post may contain only a limited detail: a first name, a photograph, an activity or the name of an organisation. Other pages may provide additional clues. Bringing them together can make it easier to identify someone, infer their routines or recognise places and people close to them.
This is sometimes called information aggregation or cross-referencing. It does not necessarily involve access to secret data: separate pieces of accessible information can create a new level of exposure when combined.
Search engines do not show everything
A result missing from a search engine does not prove that the information has disappeared from the internet. The original page may still exist, be available through a direct link or appear in another service. Conversely, a displayed result may point to a page that has since been removed or changed.
It is therefore important to distinguish between removal at the source, de-indexing a result from a search engine, and the possible disappearance of copies hosted elsewhere. These actions do not have the same effect.
How can you reduce your exposure?
Review your profiles and privacy settings
Check what is publicly visible, including older posts, photographs, contact lists and the search settings of your accounts.
Reduce unnecessary personal information
Where possible and appropriate, remove contact details or personal information that does not need to be public. Remember old pages and accounts you no longer use.
Check which services hold your data
Review privacy policies and the access, correction or deletion procedures offered by the services concerned. In France, the CNIL explains individual rights and procedures relating to personal data.
Respond to a breach or malicious disclosure
Keep relevant evidence, record URLs and dates, report the content to the platform and seek advice if there are threats or a risk to your safety.
If you are in immediate danger: move to a safe place and contact emergency services in France on 17 or 112. The 114 service is available to people who are deaf or hard of hearing and people who cannot speak, subject to the service's arrangements.
Which procedures and resources can help?
To understand your rights and possible actions, prioritise official sources and procedures suited to your situation:
- CNIL – understand and exercise your rights over personal data;
- Cybermalveillance.gouv.fr – advice and support for digital risks in France;
- De-indexing: procedures with search engines;
- Report harmful online content;
- Victim of doxxing: practical steps and support.
This page provides general prevention information. It is not an individual audit, legal advice or a method for finding information about a specific person. Applicable rules and remedies depend on the country, the service concerned and the circumstances.