# Citizen Threat Modeling and more data

DevFeed: [Citizen Threat Modeling and more data](<https://devfeed.tech/articles/citizen-threat-modeling-and-more-data-36729.md>)

Original publisher: [Read original article](<https://shostack.org/blog/citizen-threat-modeling/>)

Author: Adam

Published: 2018-03-14T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [data](<https://devfeed.tech/topics/data.md>), [audit](<https://devfeed.tech/topics/audit.md>)

Tags: [audit](<https://devfeed.tech/tags/audit.md>), [customer-service](<https://devfeed.tech/tags/customer-service.md>), [data](<https://devfeed.tech/tags/data.md>), [fraud](<https://devfeed.tech/tags/fraud.md>), [legal](<https://devfeed.tech/tags/legal.md>), [marketing](<https://devfeed.tech/tags/marketing.md>), [operational](<https://devfeed.tech/tags/operational.md>), [outsourcing](<https://devfeed.tech/tags/outsourcing.md>), [payment](<https://devfeed.tech/tags/payment.md>), [processors](<https://devfeed.tech/tags/processors.md>)

## AI overview

The article discusses citizen threat modeling and examines PayPal's disclosure of more than 600 companies it might share customer data with. It considers whether this level of disclosure is unusual and how PayPal's categories could inform analysis of secondary data flows, while noting ambiguities in some category names.

## Source excerpt

[no description provided]