Why it matters

An individual access decision can create consequences outside that individual’s account.

Exposure without participation

In a hypothetical family-matching service, a participant's profile reveals a relationship to someone else. That other person may not have chosen to join the service. The relevant security question is what the relationship allows a viewer to infer, and how strongly the evidence supports that inference.

“Leakage” here describes information crossing the boundary of one person's participation. It does not automatically mean a technical intrusion occurred. Distinguish an intended matching feature, an unexpected disclosure, and unauthorized access before explaining the consequences.

Sources