The National Directorate of Cybersecurity Published a Guide with Recommendations for Secure Purchases Through the Internet

In the Guide, the Directorate of Cybersecurity details precautions that users should consider when making a purchase through the Internet, based on the following three security levels:

1. The security of the device with which the purchase will be made. The Directorate recommends making purchases through devices and internet connections owned by the user, rather than third-party devices or in public places with open networks.

Moreover, the Guide suggests keeping the operative system and the antivirus updated, so that users  receive a warning when accessing sites not complying with adequate security standards.

2. The security of the website where the purchase is made. The Directorate recommends users to make sure that the website through which they make the purchase is the correct one and, if so, that it is a secure website (for instance, by checking if it is identified with the padlock symbol or with the acronym https and not just http).

Regarding personal data processing, the Guide recommends verifying that the information users provided is encrypted, and also warns users that their personal data may be used to create databases to send unsolicited marketing communications through spam emails.

3. The reputation of the company with which the user is contracting. The Directorate recommends users to research the company beforehand, highlighting the importance of learning about other users’ experiences and corroborating with whom they are contracting when the company only has virtual presence; or checking the address, phone number, and the existence of a channel to file claims when the company has physical presence as well.

The Guide also recommends reading the terms and conditions, so that the user can understand the company’s return and refund policies and its liability for the delivery of the products in non-acceptable conditions. In this sense, the Guide recommends reading the company’s privacy policy as well, to verify how the company will use the personal information provided.

Finally, the Directorate recommends deleting junk files automatically installed in computers when users browse the Internet, once the purchase is over.