How to Audit Your Own Digital Footprint, Step by Step

A simple step-by-step audit

Auditing your own footprint just means looking, in an orderly way, at the information about you that already exists online. You are reviewing your own data and deciding for yourself what it means — nothing here monitors other people or watches anything on your behalf. Set aside a quiet half hour and work through the steps below at your own pace.

There is no single "complete" view of a person online, so the goal is not to find everything. It is to build a clear, honest picture of where your personal data tends to appear, so you can decide what, if anything, you want to do next.

• Search your full name, and common variations, in a search engine — then look past the first page.
• Search the things that identify you alongside your name: an email address, a phone number, a username, or a former town. These are your online identifiers, the small details that link records back to you.
• Sign in to the accounts you already use — email, social, shopping — and open each one's privacy or data settings to see what is shared and with whom.
• Check what is visible when you are signed out, for example by viewing a public profile the way a stranger would.
• Write down where your personal data appears, in plain notes, so you have your own dated record to work from.

Reading what you find, without alarm

Most of what you find will be ordinary: a profile you set up, a comment you left, a listing from an organisation you dealt with. Seeing it gathered in one place can feel surprising, but a search result is not a verdict on you — it is simply a record that already existed, now visible to you.

Some of your personal data appears because you chose to publish it, and some is left behind by everyday activity. You may also come across a data-broker entry — a profile assembled by a company that collects and combines public records. Noticing one is normal; it is part of how the online data ecosystem works, and seeing it is the first step to deciding how you feel about it.

As you read, sort findings by how much they matter to you rather than by how unsettling they look. An out-of-date address you no longer care about is different from a detail you would genuinely prefer not to be public.

Deciding what to do next

Once you have your picture, you are the one who decides. For many entries the calm choice is simply to leave them, or to tighten a privacy setting on an account you already control. Small, deliberate changes you make yourself are often the most useful outcome of an audit.

For other entries, you may decide to ask an organisation what it holds about you, or to ask it to change or remove information. These data-protection rights belong to you and you exercise them yourself; the right place to start depends on your own jurisdiction, and a complaint, if it ever comes to that, goes to the Information Commissioner's Office (ICO). The system can suggest a next step, but you stay in control and choose whether to send anything.

Re-running a light version of this audit now and then is enough — there is no need to keep constant watch. This article is general information to help you review your own footprint, not legal advice; for advice about your specific situation, consider speaking to a qualified professional in your jurisdiction.

Frequently asked questions

Related terms

• Personal data
• Online identifier
• Data broker