Who bears responsibility for the OSINT threat landscape? Is it purely a technical problem to solve?

Question

Accepted Answer

Everyone shares responsibility, from platform operators to individual users, and the concept of Privacy by Behaviour means each person must understand and manage their own OSINT exposure.
The strategic approach combines three layers:

Technical design. Privacy-preserving architectures and PETs that limit what data is exposed in the first place.
Policies. Organizational rules, compliance frameworks, and data handling procedures.
Individual behavior. Personal awareness and digital hygiene practices.

Privacy by Behaviour is the human counterpart to Privacy by Design. While PbD targets developers and system architects, Privacy by Behaviour targets every individual who uses digital services. It means consciously managing what you share, understanding how fragments can be combined, and making informed decisions about your digital footprint.
Platform responsibility.
Social media companies, search engines, and data brokers all profit from the data ecosystem. They have an obligation to protect their users, not just monetize their attention and information. Default privacy settings, clear data controls, and responsible API policies are the minimum.
Security awareness integration.
OSINT risks should be part of corporate security training programs and academic curricula. Every employee who shares company information online is a potential intelligence source. Every student who posts without thinking is building a permanent digital dossier.