Security, Privacy, and Data-sharing Trade-offs When Moving to the United States: Insights from a Qualitative Study

Security, Privacy, and Data-sharing Trade-offs When Moving to the United States: Insights from a Qualitative Study

Speakers: Mindy Tran; Collins W. Munyendo; Harshini Sri Ramulu; Rachel Gonzalez Rodriguez; Luisa Ball Schnell; Cora Sula

Conference: IEEE S&P

YouTube: https://www.youtube.com/watch?v=xiq1-LTdt7o

Overview

This talk, presented at IEEE S&P, delves into the multifaceted security, privacy, and data-sharing challenges encountered by individuals migrating to the United States. Led by co-first authors Mindy Tran and Collins W. Munyendo, and presented by Harshini Sri Ramulu, alongside supporting authors Rachel Gonzalez Rodriguez, Luisa Ball Schnell, and Cora Sula, the research unveils the complex landscape new immigrants must navigate. The study highlights how bureaucratic processes, technological barriers, and a lack of tailored guidance create significant vulnerabilities, often leading to feelings of unease and a compromised sense of safety.

The presentation underscores the critical importance of understanding these unique challenges, given that millions relocate to the US annually. Between 2019 and 2023 alone, the US Department of State issued approximately 2 million immigrant visas, signifying a vast population exposed to these risks. The speakers effectively articulate that the moving process is not merely logistical but deeply impacts an individual's ontological security – their fundamental feeling of safety and stability in their environment.

This work matters profoundly because it shifts the focus from purely technical vulnerabilities to the human experience within complex systems. By employing a qualitative research approach, the study provides rich insights into the lived experiences of immigrants, revealing systemic issues that often go unaddressed in traditional security discourse. The findings offer crucial recommendations for policymakers, employers, educational institutions, and technology providers to mitigate these risks and foster a more secure and private environment for those building new lives in the United States.

Background

▶ Watch: Introduction to study: security/privacy for US immigrants (0:00)

The journey of moving to the United States is fraught with intricate processes, demanding extensive personal data sharing and interactions with numerous entities, both official and unofficial. This inherent complexity creates a fertile ground for security and privacy vulnerabilities, making new arrivals particularly susceptible to scams and adverse experiences. The US government itself frequently issues warnings about visa-related scams, yet their prevalence remains a significant concern, indicating a gap between awareness and effective prevention.

The research was motivated by a desire to understand the specific security and privacy problems faced by this vulnerable population. The authors framed their investigation around several key research questions:

1. What are the threats, risks, and concerns encountered during the visa application process?
2. What scams and other adverse experiences do individuals face during the actual moving process?
3. How do bureaucratic and administrative challenges impact security and privacy?
4. What technical security, privacy, and access challenges arise after moving to the US?
5. What are the primary sources of security and privacy advice available throughout the relocation process?

To answer these questions, the research team conducted 25 semi-structured interviews with participants who had moved to the US in 2017 or later. Participants were recruited through diverse channels, including social media, personal networks, and the online research platform Prolific. The collected qualitative data was then rigorously analyzed using thematic analysis, a method well-suited for identifying patterns and overarching themes within rich textual data. This robust methodology allowed the researchers to delve deep into the subjective experiences of immigrants, uncovering nuanced perspectives on their security and privacy trade-offs. The study acknowledges that the inherent power imbalance during the visa application process often leaves individuals feeling they have no choice but to comply with extensive data demands, regardless of their discomfort or concerns about potential misuse.

Key Findings

▶ Watch: Participants felt compelled to share sensitive personal information (4:00)

The qualitative study yielded five overarching themes that illuminate the security, privacy, and data-sharing challenges faced by individuals moving to the United States:

1. Sharing Sensitive Information and Documents: Participants consistently reported feeling uncomfortable and having a lack of choice when compelled to share a vast array of sensitive documents. This discomfort extended beyond their own personal information to include documents containing data about family members. Concerns primarily revolved around the potential for misuse or leakage of this information. While some understood the necessity of financial disclosures, requests for highly personal items like wedding photos (as one participant, P07, described as a "silly thing") were perceived as intrusive and culturally inappropriate, leading to feelings of violation of personal privacy and sometimes cultural norms. A significant finding was the pervasive mistrust due to a lack of transparency regarding how their data would be used, stored, or accessed. Many participants, especially those whose applications were handled by employers or spouses, had no clear overview of who had access to their documents, as P21 noted, "I don't remember submitting those."

1. Exacerbated Online Threats: The unfamiliarity with new processes in a new country rendered individuals particularly vulnerable to online scams. Students, for instance, frequently faced rental scams because they were required to secure housing online without the ability to view properties in person. Participant P01 vividly described this as a gamble: "If you are lucky it's real and if you're unlucky you will lose your money." Beyond housing, participants reported a high incidence of scam calls, emails, and false online advertisements. These often involved impersonations of official entities, such as fake Immigration and Customs Enforcement (ICE) or DMV agents, who would threaten deportation or legal action to coerce individuals into divulging sensitive information. One participant recounted giving away license information to a fake DMV agent, only realizing it was a scam later. Scammers effectively preyed on the vulnerabilities and anxieties of new arrivals.

1. Bureaucratic and Administrative Barriers to Security and Privacy: The study identified numerous administrative hurdles that directly contributed to security and privacy violations. A common issue was the struggle to obtain assistance from embassies and a pervasive lack of transparency regarding visa processing status. Participants described unclear instructions on embassy websites and insufficient support, often leading to incorrectly completed forms and subsequent unwanted fees. A particularly striking finding was the design of visa interviews, which are often conducted in open spaces where other applicants can overhear sensitive personal details. P02 expressed discomfort, stating, "It is weird to be interviewed about this kind of stuff with other people around... so people can hear you." Furthermore, the reliance on postal services for delivering crucial documents like passports post-visa approval generated significant fear of loss or misplacement, as exemplified by P03's friend whose passport was "almost lost."

1. Technical Security, Privacy, and Access Challenges: Beyond administrative issues, participants encountered distinct technical challenges. Many faced geographically imposed restrictions on accessing systems, software, or telecommunication networks. P18 illustrated this by noting, "I want to keep my German settings and this is why I cannot enter us Services... I have to use another phone." This geofencing meant legitimate apps were unavailable in certain app stores, or existing accounts were inaccessible. Another prevalent issue was with multi-factor authentication (MFA), where security codes or one-time passwords were sent to old phone numbers that were no longer active. This highlighted how well-intended security measures, when not designed with the realities of international relocation in mind, could inadvertently inhibit legitimate user access.

1. Lack of Security and Privacy Advice: Despite the myriad challenges, participants reported a significant gap in tailored security and privacy advice. While employers, officials, and schools provided some guidance, it was often perceived as generic and not "life-altering." Consequently, individuals primarily sought advice from informal networks, such as communities and people who had previously moved to the US. A particular void was noted in specific advice concerning secure data-sharing practices, leaving individuals to navigate complex decisions without adequate guidance. This lack of clear, actionable advice exacerbated their confusion and unease throughout the moving process.

Technical Deep Dive

▶ Watch: Heightened vulnerability to online and rental scams (6:00)

While the study is qualitative, it uncovers several critical technical and systemic points where security and privacy fail for new immigrants. These are not necessarily vulnerabilities in software code, but rather design flaws and operational shortcomings in the technical and administrative infrastructure that underpin the immigration process and daily life in a new country.

One major area of technical concern relates to data handling and transparency. The sheer volume of sensitive personal information required for visa applications – financial records, family details, and even personal photographs – is immense. Technically, this implies vast databases managed by government agencies, employers, and legal firms. The lack of transparency reported by participants about who has access to this data, how it is stored, and for how long it is retained points to a systemic failure in data governance and access control mechanisms. For instance, when P21 mentioned that a hospital might have handled their documents, it highlights a complex chain of data custody where the data subject has lost visibility, making it impossible to audit or understand the full scope of their data exposure. The fear of data leakage is a direct consequence of this opacity and the perceived lack of control over their digital footprint.

The prevalence of online scams reveals weaknesses in platform vetting and user education. Rental scams, for example, exploit the inability of international movers to physically verify properties. This suggests a failure in online housing platforms (and potentially university/employer support systems) to implement robust verification mechanisms for listings or to provide secure transaction channels. The impersonation of Immigration and Customs Enforcement (ICE) and DMV agents through phone calls (vishing) or emails (phishing) leverages social engineering tactics. Technically, this implies a need for better caller ID authentication technologies (e.g., STIR/SHAKEN for calls, DMARC/SPF/DKIM for emails) and more advanced fraud detection systems on telecommunication networks and email providers. Critically, it also points to a gap in specific, easily digestible information provided to new immigrants on how to identify and report such scams, and the official channels through which government agencies communicate.

Geographically imposed technical restrictions pose significant barriers. Participants reported issues with app store availability, where apps accessible in their home country were unavailable in the US store, or vice-versa, preventing access to essential services. This is a direct consequence of geo-filtering policies implemented by app developers and platform providers (e.g., Apple App Store, Google Play Store) often based on IP address, billing address, or SIM card region. While intended for licensing or regulatory compliance, these restrictions create legitimate usability problems for immigrants. Similarly, issues with multi-factor authentication (MFA), particularly SMS-based two-factor authentication (2FA), tied to old international phone numbers, highlight a critical flaw in security design for mobile populations. Many online services default to SMS 2FA, which becomes unusable once a user switches carriers or countries. This necessitates the adoption of more flexible and resilient MFA methods, such as authenticator apps (e.g., Google Authenticator, Authy), hardware security keys (e.g., YubiKey), or email-based verification as robust alternatives that accommodate geographical shifts.

Finally, the bureaucratic processes themselves, while not purely technical, have significant technical implications. The lack of transparency in visa processing status suggests underdeveloped or inaccessible online tracking systems. The practice of open-space visa interviews is a privacy violation that could be mitigated by designing interview spaces with soundproofing and individual booths, a basic architectural and operational control. The reliance on postal services for sensitive documents like passports introduces a physical security risk that could be addressed by offering secure digital alternatives for document delivery or highly secure, trackable courier services with robust chain-of-custody protocols. These are not "technical vulnerabilities" in the software sense, but rather systemic design flaws in how technology and physical processes are integrated to manage sensitive personal information.

Demo / Proof of Concept

▶ Watch: Bureaucratic and administrative barriers to security/privacy (8:00)

This qualitative study focused on gathering and analyzing the lived experiences of individuals through semi-structured interviews. As such, the presentation did not include a technical demonstration or a proof of concept in the traditional sense of a security conference talk. Instead, the "proof" lies in the rich, thematic data derived from the participant interviews, which vividly illustrates the real-world impact of security and privacy challenges on people moving to the United States. The researchers effectively used direct quotes and anonymized participant accounts to demonstrate the pervasive nature and specific manifestations of these issues.

Defensive Implications

▶ Watch: Privacy concerns in open-space visa interviews (9:40)

The findings from this study offer critical insights for various stakeholders to enhance the security and privacy posture for individuals moving to the United States. Defensive strategies must be multi-layered, addressing administrative, technical, and educational gaps.

For Government Agencies and Embassies:

• Increase Transparency: Implement clear, easily accessible online portals that provide detailed, real-time updates on visa application status. This would reduce anxiety and the need for applicants to seek unofficial, potentially misleading information.
• Respect Cultural Norms & Enhance Privacy: Redesign visa interview processes to ensure private interview spaces, such as individual booths with soundproofing, to protect sensitive personal discussions from being overheard.
• Secure Document Handling: Offer highly secure and traceable digital alternatives for sharing and receiving documents, or partner with trusted, auditable courier services for physical documents, reducing reliance on less secure postal systems.
• Clear Guidance on Scams: Provide explicit, multi-lingual warnings and educational materials on common scams targeting new immigrants, including examples of official communication channels vs. fraudulent ones.

For Employers and Educational Institutions:

• Comprehensive Support Programs: Develop robust onboarding programs that include detailed information on security and privacy risks specific to new immigrants. This should cover vetting legitimacy of housing advertisements, common online scams, and safe data-sharing practices.
• Advocate for Transparency: When handling visa applications on behalf of employees or students, maintain strict transparency, providing individuals with a complete overview of what documents are shared, with whom, and for what purpose.
• Technical Assistance: Offer support for navigating technical challenges, such as assistance with switching app store locations or configuring alternative MFA methods beyond SMS-based 2FA.

For Technology Providers and Online Platforms:

• Flexible MFA Options: Implement and promote alternate authentication methods beyond SMS-based 2FA (e.g., authenticator apps, hardware tokens, email verification) to accommodate users who change phone numbers or countries.
• Improved Geo-flexibility: Design services and app stores with greater flexibility for international users, enabling easier switching of regional settings or providing access to essential apps regardless of current geographical location.
• Enhanced Fraud Detection: Strengthen identification and verification techniques on online platforms, particularly for housing and job postings, to better vet legitimacy and flag potential scams.

For Individuals and Communities:

• Community-Based Knowledge Sharing: While official advice improves, new immigrants should continue to leverage community networks for practical, nuanced advice, but also be equipped to critically evaluate information for accuracy and safety.
• Empowerment Through Education: Provide accessible resources that educate new immigrants on their data rights, how to identify phishing/vishing attempts, and secure online behaviors. This includes understanding the implications of sharing various types of personal information.

Ultimately, a holistic defensive strategy requires acknowledging that administrative processes and bureaucratic policies can amplify security and privacy concerns. By integrating user-centric design principles into immigration processes and leveraging technology to enhance transparency and flexibility, the vulnerabilities highlighted in this study can be significantly mitigated, fostering a safer and more secure environment for those building new lives in the US.

Key Takeaways

• Administrative processes and bureaucratic policies often amplify security and privacy concerns rather than mitigating them, leaving individuals feeling compelled to share sensitive data without transparency or choice.
• Moving to a new country significantly increases vulnerability to scams (e.g., rental scams, fake government agents) and introduces technical barriers (e.g., geo-restrictions on apps, unusable SMS-based MFA).
• A critical lack of specific, tailored security and privacy advice from official sources forces immigrants to rely on informal networks, often leaving them ill-equipped to navigate complex data-sharing decisions.
• Practical recommendations include increasing transparency in data sharing, respecting cultural norms (e.g., private interview spaces), offering secure document exchange methods, and providing better support for technical transitions (e.g., flexible MFA, app store assistance).
• The findings underscore the need for systemic changes by government agencies, employers, and technology providers to design processes and tools that are culturally sensitive, transparent, and technically accommodating for international movers.
• The challenges faced by US immigrants extend to other populations experiencing similar transitions, highlighting the broader applicability of the study's insights for enhancing security and privacy in diverse contexts.

About the Speaker(s)

The research was a collaborative effort. The talk was presented by Harshini Sri Ramulu, who is listed as one of the supporting authors. The work was done in collaboration with co-first authors Mindy Tran and Collins W. Munyendo, indicating their significant contributions to the study's conception and execution. Additional supporting authors include Rachel Gonzalez Rodriguez, Luisa Ball Schnell, and Cora Sula, along with Lucy and Yasman (whose full names were not provided in the transcript). The collective expertise of this team, spanning potentially various disciplines, enabled a comprehensive qualitative study into the complex human-centered security and privacy challenges faced by immigrants.