What is OSINT, and why should privacy professionals care about it?

OSINT, meaning Open Source Intelligence, is the systematic collection and analysis of publicly available information, and its core principle is that "publicly accessible" does not mean "harmless."

* The five-phase intelligence cycle underlying OSINT collection. *

OSINT sits at the critical interface between public information and personal privacy. It's not about hacking or breaking into systems. It's about systematically gathering and analyzing information that anyone can access.

Why it matters for three different fields:

• Data protection: understanding what personal information is publicly exposed and how it could be exploited.
• Cybersecurity: threat intelligence, vulnerability assessment, and understanding an organization's attack surface.
• Digital rights: understanding the limits of information collection and the boundaries between legitimate research and surveillance.

The critical insight is this: individual pieces of public data may seem completely harmless on their own. Your name on LinkedIn. A vacation photo on Instagram. A comment on a public forum. But when someone systematically collects and correlates these fragments... they can build a detailed profile that compromises your privacy in ways you never anticipated.

Go deeper:

• Open-source intelligence (Wikipedia) — definitions, the six source categories and history.