Posts in Technology
Privacy Policies: The Document Nobody Reads (But Everybody Signs)

You did it this morning. I did it yesterday. The popup appeared, the button was right there, and you clicked 'Agree' before you finished your coffee. You probably did not read a single line.

You are not alone, and you are not careless. A 2023 Pew Research Centre study found that 56% of American adults always or almost always accept privacy policies without reading them. Without conclusive data from the Caribbean, it is safe to say, the context may be the same. A separate analysis found that reading every privacy policy you encounter in a year of typical internet use would cost you roughly 76 full working days. That is not user negligence. That is a structural design failure.

Privacy policies govern what companies collect about you, who they share it with, how long they keep it, and what rights you hold over your own data. They are not fine print. They are the terms of a relationship you enter with every platform, application, and service you touch. And in the Caribbean, where digital services are rapidly scaling and data governance regulation is still evolving across CARICOM member states, the stakes of that unsigned bargain are rising.

Why Nobody Reads Them

The research is unambiguous. McDonald and Cranor's landmark Carnegie Mellon study calculated that reading the privacy policies of the top 75 US websites would take approximately 10 minutes per policy. Applied across the roughly 1,462 websites the average person visits annually, that amounts to 244 hours of reading time per year, or about 30 working days. Their study estimates the opportunity costs for the time spent reading privacy policies to be around $781 Billion.

By 2018, the problem had worsened. A follow-up study found that privacy policies for the 20 most-used mobile apps had grown 58% longer since 2008, averaging nearly 4,000 words each. Reading all 20 policies back-to-back would consume more than six and a half hours.

Length alone does not explain the avoidance. The 2023 Pew data also revealed that 67% of US internet users say they understand little to nothing about what companies actually do with their data, up from 59% in 2019. Comprehension is declining even as legal frameworks multiply. Research involving college and law students asked to review the privacy policies of five popular platforms found that 20 to 40% of 'easy' questions about those policies were answered incorrectly, even when participants could consult the policy before answering.

People are not skipping privacy policies because they do not care about their data. A 2024 Cassie survey found that 93% of consumers are concerned about the security of their personal information. They skip them because the documents, as currently designed, function less as communication and more as liability shields for the organisations issuing them.

What You Might Actually Be Agreeing To

A typical privacy policy will tell you, somewhere in its wall of text, that the company collects your IP address, device identifiers, browsing behaviour, location data, and purchase history. It will disclose that this data is shared with 'third-party service providers,' a category that can encompass advertising networks, analytics firms, data brokers, and government authorities upon request.

Some policies grant the issuing company the right to change those terms at any time, notifying you only by updating a webpage you will never voluntarily visit again. Others contain arbitration clauses that waive your right to pursue class-action legal remedies if the company misuses your data.

You agreed to all of that. Probably this morning.

The EU's General Data Protection Regulation (GDPR) recognised this problem and attempted to legislate its way to a solution. Article 12 of the GDPR requires that privacy notices be provided in 'a concise, transparent, intelligible and easily accessible form, using clear and plain language.' The regulation explicitly acknowledges that most individuals skip over long legal notices. Yet even with that mandate, many companies produce GDPR-compliant policies that remain practically incomprehensible to the average reader.

The Update Problem

Of all the failures in current privacy policy practice, the update notification may be the most cynical. You receive an email with a subject line like 'We've updated our Privacy Policy.' The body contains a link and one or two lines of generic reassurance that your experience is unchanged. What actually changed? Under what legal basis? What does it mean for you specifically? That information is buried, if present at all.

This matters because policy updates are often triggered by meaningful shifts: new data-sharing partnerships, changes to retention periods, expansions into new markets, or regulatory settlements. Those are precisely the moments when users deserve clear, specific communication. Instead, they receive a legal paper trail that protects the company's compliance record while delivering nothing intelligible to the person whose data is at stake.

What Better Looks Like

The good news is that the solution is not complicated. It requires will, not technology. Several approaches have demonstrated value, and regulators and design researchers have been advancing them for years.

Layered notices: The most practical reform involves offering a short, plain-language summary at the top covering what you collect, why, and with whom you share it, with the full legal document available to those who want it. This is not a workaround. GDPR and several national frameworks explicitly encourage this approach.

Change-only updates: When a policy changes, organisations should communicate only what changed, in plain language, with a before-and-after comparison if necessary. Not a link to 47 pages of reformatted legalese. The change. The reason. The impact on you.

Plain language standards: The GDPR benchmark of 'clear and plain language' needs to be operationalised. Some organisations write policies that their own legal teams cannot navigate without a search function. Plain language does not mean imprecision. It means precision that a non-lawyer can hold.

Meaningful opt-out architecture: Consent should be as easy to withdraw as it was to give. If clicking 'Agree' takes one second, withdrawing that consent should not require navigating five menus and submitting a form to a data protection officer who responds in 30 days.

What This Means for Organisations in the Caribbean

For Caribbean organisations building digital platforms, deploying HR systems, or partnering with international technology vendors, this is not a distant problem. The data your staff, clients, and beneficiaries share through those platforms is governed by agreements most of them never read. As regional digital transformation accelerates and frameworks like the OECS Data Protection Act and national equivalents across CARICOM member states mature, organisational leadership will need to understand what they are asking people to agree to and whether those agreements reflect the values they claim to hold.

Ethical digital governance is not just about compliance. It is about whether the organisation you lead treats the people it serves with the honesty and respect they deserve.

The shoemaker in St. Julien who was my grandfather repaired both sides of a shoe even when the customer only brought one. He said it would save them 'a little change.' He was not contractually obligated to do that. He simply believed in doing quality work, even when no one was watching.

Privacy policies are a test of that same ethic. Not whether your legal team can defend the document in court, but whether the people who sign it actually understand what they agreed to.

Start there.

Uwàmìto Consulting advises Caribbean leaders and organisations on strategic resilience, ethical governance, and evidence-based programme design.

Connect: www.uwamito.com

Securing Your Work: A Knowledge Management Guide for Caribbean Professionals

You spent three weeks building a monitoring framework for a regional programme. Six months later, a new consultancy application asks for a sample of your past work. You know you created it, but you cannot find the file. The laptop you used has been replaced. The email thread is buried. You forgot to back up to your external hard drive.

This scenario plays out throughout the Caribbean every single week. Skilled professionals lose access to work they invested significant time and expertise to produce, not because the work was poor, but because they do not treat their outputs as assets worth protecting.

Knowledge management is not a luxury reserved for large organisations with dedicated IT departments. It is a survival skill for every consultant, project manager, coordinator, and advisor who wants to build a career on a foundation of demonstrable results.

Why Your Work Disappears

Most professionals store their work reactively rather than intentionally. Files land wherever they were last saved. Reports live in email attachments. Presentations sit on shared drives with no naming convention. When the project ends or the contract closes, the institutional memory walks out the door with the departing team.

In the Caribbean development sector, this problem carries additional weight. Many professionals work across multiple countries, organisations, and funding cycles. A health systems assessment completed for one ministry might directly inform a proposal for another territory two years later, but only if the professional can locate, access, and present that work when the opportunity arises.

The consultancy application process made this personal for me. When I sat down to compile a portfolio of past deliverables, I found gaps where complete projects should have been. The work existed at some point. I simply had not secured it.

Building a System That Works

Effective knowledge management for independent professionals does not require expensive software or complex databases. It requires a consistent system built on three principles: structured directories, redundant storage, and portfolio-ready organisation. This is what works for us. In fact some of our past clients often contact us for documents - when we walk them through the process they do have the documents but there is no system.

Structured Directories

Create a folder architecture that mirrors how you actually work. Organise by year, then by client or project, then by deliverable type. A consultant who works across health, governance, and education sectors might structure their drive as: 2026 > SHAMROCK Regional Assessment > Reports, Presentations, Data, Correspondence.

Name files with dates and descriptive titles rather than "Final_v3_REAL_final.docx." A file named "2025-09_SHAMROCK-Resilience-Assessment_Final-Report.pdf" tells you exactly what it is, when it was completed, and for whom, even three years from now.

This directory logic should be identical across your cloud storage and any local or external drives. When the structure matches, you reduce the cognitive load of remembering where anything lives.

Redundant Storage: The 3-2-1 Rule

Data protection professionals recommend the 3-2-1 backup rule: maintain three copies of your important files, stored on two different types of media, with one copy kept off-site or in the cloud. For most Caribbean professionals, this translates to keeping files on your computer, backing them up to an external hard drive, and syncing them to a cloud platform like Google Drive, OneDrive, or Dropbox.

Cloud storage alone is not sufficient. Internet connectivity across the Caribbean remains inconsistent, and service outages can lock you out of your own files at the worst possible moment. An external hard drive sitting in your home office provides insurance that no server outage can compromise.

Conversely, a hard drive alone carries its own risk. Hurricane season reminds us annually that physical assets can be damaged or lost. Cloud storage ensures that even if your hardware is compromised, your professional portfolio survives.

Portfolio-Ready Organisation

Beyond basic file storage, maintain a dedicated portfolio folder that contains polished, presentation-ready versions of your strongest work. When a consultancy application requires writing samples, evaluation reports, videos, pictures, or strategic plans, you should be able to pull from this folder immediately.

Review and update this portfolio quarterly. Remove outdated materials that no longer represent your current skill level. Add recent deliverables that showcase your evolving expertise. Keep a running log that notes the project name, client (where confidentiality allows), deliverable type, and the competencies each piece demonstrates.

This single habit, maintaining a curated portfolio folder, will save you hours of frantic searching every time an opportunity arises. More importantly, it shifts your relationship with your work from transactional to cumulative. Each project becomes a building block rather than a standalone event.

Practical Steps to Start Today

Begin by auditing what you currently have. Search your email for attachments with common file extensions. Check old USB drives and forgotten downloads folders. Retrieve files from shared drives before access expires. Gather everything into one temporary location.

Next, build your directory structure. Create a master folder on your cloud platform with subfolders organised by year and project. Mirror this structure on an external hard drive. Move your recovered files into their proper locations using clear, date-based naming conventions.

Then, set a recurring monthly reminder to back up new files and review your portfolio folder. Consistency matters more than perfection here. A simple system that you maintain regularly will outperform an elaborate system that you abandon after the first month.

Finally, share this practice with your colleagues and teams. Knowledge management improves when it becomes a shared norm rather than an individual habit. Encourage your project teams to adopt consistent naming conventions and shared storage protocols from day one of every new engagement.

The Bigger Picture

For professionals operating in the Caribbean development landscape, documenting and securing your work represents more than personal organisation. It contributes to regional institutional memory. When consultants protect their deliverables, they preserve knowledge that might otherwise vanish between project cycles.

This matters because our region faces recurring challenges that demand cumulative learning rather than starting from scratch with each new funding cycle. Every assessment, every strategic plan, every evaluation report holds lessons that future work can build upon, but only if those documents remain accessible.

Securing your work is an act of professional stewardship. It respects the time you invested, serves the communities that benefited from the work, and positions you to respond with confidence the next time an opportunity calls for evidence of what you have accomplished.

Start today. Your future self will thank you.

About Uwàmìto Consulting: We partner with leaders and organisations across the Caribbean to build resilient systems, strengthen capacity, and create lasting impact. If your organisation needs support with knowledge management systems, strategic planning, or capacity building, reach out at uwamito.consultancy@gmail.com or melliot@uwamito.com or visit www.uwamito.com.

When Digital Government Becomes Digital Exclusion: The Caribbean's Growing Access Crisis

Across the Caribbean, government services are rapidly moving online. Benefits applications, healthcare appointments, court filings, and payment systems now demand digital access as the default entry point. Ministries frame these changes as efficiency gains, but beneath the shiny platforms and streamlined interfaces, a quiet challenge unfolds: thousands of Caribbean citizens are being systematically locked out of essential public services because they cannot navigate the digital systems designed to serve them.

This is not a technology problem. It is an implementation problem. When governments digitise services without building the infrastructure, skills, and support systems that enable universal participation, they replace one form of exclusion with another.

Who Gets Left Behind?

The digital divide in the Caribbean cuts along predictable lines of vulnerability. Research from the Economic Commission for Latin America and the Caribbean shows that in Latin America and the Caribbean region, only 46.4% of low-income households have fixed internet connections compared to 84.6% of wealthier households. The urban-rural divide compounds this disparity further.

Trinidad and Tobago's National Digital Inclusion Survey 2021 confirms what frontline workers already know: digital development varies dramatically across geographic areas and demographic groups. The country's own digital transformation project acknowledges that "providing internet and mobile connections for vulnerable and underserved populations (i.e., rural, physically challenged, youth, and elderly) remains difficult."

Older adults face compounded barriers. They report low confidence using devices, require assistance setting up technology, and struggle with interfaces designed for digital natives. When health services moved online during COVID-19, older adults from minoritised ethnic backgrounds faced particular challenges navigating remote appointments, understanding digital platforms, and explaining symptoms without in-person interaction.

People with disabilities encounter accessibility barriers that designers often fail to anticipate. Screen readers break on poorly coded forms. Visual or motor impairments make complex navigation impossible. Cognitive differences clash with rigid, unforgiving interfaces.

Rural communities face infrastructure gaps that no amount of digital literacy training can overcome. Unreliable connectivity, expensive data packages, and limited device access create fundamental barriers before questions of skill even arise.

Migrants navigating government systems in their non-native language find digital platforms particularly unforgiving. Unlike human counter staff who can clarify misunderstandings, automated systems offer no flexibility for language barriers or cultural confusion about administrative processes.

The Hidden Costs of Online-Only Systems

When governments shift services online without maintaining alternative access points, the consequences extend far beyond inconvenience.

Benefits go unclaimed. When applying for social assistance requires online submission, those without reliable access or digital skills simply cannot apply. They miss deadlines, fail to navigate multi-step verification processes, or abandon applications when error messages provide no clear path forward. The system counts these failures as reduced demand rather than systemic exclusion.

Healthcare delays become dangerous. Online appointment booking seems efficient until you consider the person who cannot secure a slot because they lack internet access, the elderly patient who misses follow-up care because email notifications disappeared into spam folders, or the diabetic who cannot refill prescriptions through the new portal.

Informal fixers emerge. A shadow economy develops around digital access. People pay neighbours or relatives to complete online forms, creating dependencies that compromise privacy and agency. Some turn to storefront businesses charging fees to navigate government websites, introducing costs that defeat the purpose of free public services.

Dignity erodes. Being unable to independently access services your taxes support diminishes citizenship. The message received is clear: you do not count in this modernised system unless you can keep up.

The False Assumption: Phone Ownership Equals Digital Access

Policy makers often confuse device ownership with digital capability. Yes, high mobile phone penetration exists across Trinidad and Tobago, exceeding Latin American and Caribbean averages. But owning a smartphone and successfully navigating complex government portals are entirely different capabilities.

Digital literacy research consistently demonstrates that merely having access to devices does not translate to effective use. People need information navigation literacy to access the internet safely. They require culturally appropriate content in plain language. They need confidence overcoming fear of making mistakes. Research shows that digital skills shape people's digital experience, helping them overcome fear of using electronic devices and navigate digital spaces effectively.

When governments assume "everyone has a phone now" and design accordingly, they systematically exclude those whose phone skills extend to calls and WhatsApp but not to multi-factor authentication, PDF uploads, or government portal navigation.

What Inclusive Digital Government Actually Requires

Moving services online can genuinely improve access and efficiency, but only when implementation considers how citizens will actually use these systems. Caribbean governments pursuing digital transformation can learn from both successes and failures across the region and globally.

Maintain assisted digital channels. Not everyone will successfully use digital services independently. Trinidad and Tobago's digital transformation project explicitly aims to "improve efficiency and reduce transaction costs to government and citizens, while expanding the inclusiveness of the provision of such services to the elderly, the poor, persons with disabilities, women and girls and residents of rural communities." This requires trained staff who can guide users through digital processes, help desks in community locations, and phone support that does not simply redirect to websites.

Design for offline alternatives. Essential services should never exist only online. Paper forms, in-person appointments, and telephone submission options must remain available, particularly for services affecting basic rights and entitlements. Research on European digital public services shows that barriers such as limited digital skills, access to technology, and inadequate service design disproportionately affect vulnerable groups including the elderly and low-income populations.

Build digital skills as social protection. Digital literacy cannot be treated as a personal responsibility separate from service delivery. When governments require digital access for benefits, healthcare, or civic participation, they must provide structured pathways to acquiring necessary skills. Community-engaged learning approaches that bring trained facilitators into communities show promise for reducing digital divides experienced by underserved populations.

Test with actual users before launch. Caribbean governments pursuing digital transformation initiatives can incorporate user testing with vulnerable populations before rolling out new systems. What works for a ministry official with reliable internet and university education may fail completely for a rural resident with intermittent connectivity and primary school completion. Implementation science frameworks like the Consolidated Framework for Implementation Research (CFIR) emphasise assessing characteristics of individuals including their knowledge, beliefs, and self-efficacy before expecting adoption.

Create feedback mechanisms that capture exclusion. When people cannot access services, they often disappear from official view. Systems should track abandonment rates, failed attempts, and requests for assistance as signals of exclusion rather than simply measuring successful completions. This data should drive iterative improvement rather than being dismissed as user error.

The Urgency of Now

Governments are moving quickly. The UN E-Government Survey shows Latin American and Caribbean countries are highly committed to pursuing digital government strategies. Multiple regional initiatives from UN DESA, ECLAC, the World Bank, and the IDB are actively supporting Caribbean digital transformation.

But speed without inclusion creates harm. Every month that services exist only online is a month that vulnerable citizens cannot access what they need. Every poorly designed portal is another barrier to healthcare, income support, or civic participation.

Progress should be measured not by platforms launched or services digitised, but by whether all citizens can actually access what they need. When a rural grandmother can apply for her pension, when a migrant can renew their work permit, when a person with disabilities can complete a form independently, when anyone needing government services can do so with dignity, then we will have achieved digital transformation worth celebrating.

Until then, what governments are building is not modernisation. It is another way to leave people behind.

Need support implementing inclusive digital government services? Uwàmìto Consulting works with Caribbean governments and development organisations to design and implement digital transformation initiatives that genuinely serve all citizens. Our implementation science expertise helps you navigate the complex human factors that determine whether technological investments create value or create new barriers. Get in touch to discuss how we can support your inclusive digital transformation journey.