Acatech STUDY May 2013 Titel
Total Page:16
File Type:pdf, Size:1020Kb
> Internet Privacy Options for adequate realisation Johannes Buchmann (Ed.) acatech STUDY May 2013 Titel Editor: Prof. Dr. Dr. h.c. Johannes A. Buchmann Technische Universität Darmstadt Hochschulstraße 10 64289 Darmstadt E-Mail: [email protected] Recommended citation: acatech (Ed.): Internet Privacy. Options for adequate realisation (acatech STUDY), Heidelberg et al.: Springer Verlag 2013. © acatech – NATIONAL ACADEMY OF SCIENCE AND ENGINEERING 2013 Coordination: Dr. Karin-Irene Eiermann Edited by: Jaina Hirai Layout-Concept: acatech Conversion and typesetting: Fraunhofer Institute for Intelligent Analysis and Information Systems IAIS, Sankt Augustin The original version of this publication is available at www.springer.com > THE acatech STUDY SERIES This series comprises reports presenting the results of projects carried out by the National Academy of Science and Engineering. The studies are intended to provide informed assessments and future-oriented advice for policy-makers and society. Authors AUTHORS —P rof. Dr. Dr. h.c. Johannes Buchmann, Technische Universität Darmstadt/CASED/acatech —P rof. em. Dr. Rafael Capurro, formerly Hochschule der Medien (HdM), Stuttgart —P rof. Dr. Martina Löw, Technische Universität Darmstadt —P rof. Dr. Dr. h.c. Günter Müller, Albert-Ludwigs- Universität Freiburg —P rof. Dr. Alexander Pretschner, Technische Universität München —P rof. Dr. Alexander Roßnagel, Universität Kassel —P rof. Dr. Michael Waidner, Technische Universität Darmstadt/Fraunhofer SIT/CASED — Dr. Karin-Irene Eiermann, acatech office — Dr. Michael Eldred, Cologne — Florian Kelbert, Technische Universität München — Daniel Nagel, Stuttgart — Maxi Nebel, Universität Kassel — Carsten Ochs, Technische Universität Darmstadt — Martin Peters, Albert-Ludwigs-Universität Freiburg — Dr. Philipp Richter, Universität Kassel — Fatemeh Shirazi, Technische Universität Darmstadt — Hervais Simo, Technische Universität Darmstadt 5 KolumnentitelContents > CONTENts PROJECT 11 1 INTRODUCTION 13 1.1 Scope of project 13 1.2 Grounds for multidisciplinary analysis 13 1.3 Interdisciplinary synthesis 14 1.4 Description of our approach and methodology 14 1.5 Structure 14 2 CORE VALUES AND THEIR RELATION TO PRIVACY 17 2.1 Privacy 17 2.2 Our approach 18 2.3 Free self-determination 19 2.4 Privacy in relation to free self-determination 20 2.5 Democratic participation 21 2.6 Privacy in relation to democratic p articipation 21 2.7 Economic well-being 22 2.8 Privacy in relation to economic well-being 22 3 THE CHaracteristics AND BENEFits OF ONLINE SOCIAL NETWORKS 25 3.1 Technical perspective 25 3.1.1 OSN stakeholders 25 3.1.2 Social networking data 26 3.1.3 Data collection and usage 26 3.1.4 OSNs as the new desktop 27 3.2 Social-scientific and ethical perspective 27 3.2.1 Social interactions 27 3.2.2 User groups and purposes 28 3.3 Economic perspective 29 3.3.1 Marketing variants for personal data 29 3.3.2 Measures of economic effectiveness 30 3.4 Legal perspective 30 3.4.1 Data Protection Law 31 3.4.2 Existing regulations independent of ICT 33 3.4.3 Conclusion 35 3.5 Summary: An interdisciplinary view of OSNs 35 7 Internet Privacy 3.6 The benefits fo Online Social Networks 35 3.6.1 The benefits fo OSNs for free self-determination 36 3.6.2 The benefits fo OSNs for democratic participation 38 3.6.3 The benefits fo OSNs for economic well-being 40 3.6.4 Summary: The benefits of Online Social Networks 41 4 CHaracteriZatioN OF E-Commerce 43 4.1 E-commerce from an economic and technical perspective 43 4.1.1 E-commerce stakeholders 44 4.1.2 E-commerce: Co-evolution of technology and markets 45 4.1.3 Classical e-commerce: Market and technical transaction support 47 4.1.4 Cooperative e-commerce: Technology to coordinate markets 48 4.1.5 Data centric e-commerce: Technology for data 49 4.2 E-commerce from the legal perspective 51 4.3 E-commerce from a sociological and ethical perspective 53 4.3.1 Outside the market frame 53 4.3.2 Within market frame 54 4.4 The benefits fo e-commerce 55 4.4.1 The benefits fo e-commerce for free self-determination 56 4.4.2 The benefits fo e-commerce for democratic participation 57 4.4.3 The benefits fo e-commerce for economic well-being 58 5 Privacy THreats AND THEIR Impact ON THE CORE VALUES 61 5.1 Conditions for privacy protection in OSNs 61 5.1.1 Awareness 62 5.1.2 Control 62 5.1.3 Trustworthiness 63 5.2 Threats to privacy in OSNs 64 5.2.1 Threats regarding awareness 64 5.2.2 Threats regarding control 65 5.2.3 Threats regarding trustworthiness 66 5.3 The impact of privacy threats on the core values 67 5.3.1 Threats to free self-determination 68 5.3.2 Threats to democratic participation 69 5.3.3 Threats to economic well-being 69 5.4 Threats to privacy in e-commerce and their consequences for the core values 70 5.5 Conclusion 71 8 Contents 6 OPTIONS FOR ACHIEVING Privacy IN ONLINE SOCIAL NETWORKS AND E-Commerce 73 6.1 Awareness 74 6.1.1 Regulatory options for awareness 74 6.1.2 Technical options 75 6.1.3 Educational options 76 6.2 Control 79 6.2.1 Control by regulation 79 6.2.2 Technical options for control 81 6.2.3 Educational measures regarding control 84 6.3 Trustworthiness 86 6.3.1 Trustworthiness by regulation and rules 86 6.3.2 Technical options regarding trustworthiness 89 6.3.3 Educational measures regarding trustworthiness 90 6.4. Conclusion 90 LiteraturE 93 9 Project PROJECT > PROJECT MANAGEMENT > PROJECT COORDINATION Prof. Dr. Dr. h.c. Johannes Buchmann, Technische Univer- Dr. Karin-Irene Eiermann, acatech sität Darmstadt/CASED/acatech > PROJECT PROCESS > PROJECT GROUP 07/2011 – 06/2013 —P rof. em. Dr. Rafael Capurro, formerly Hochschule der Medien (HdM), Stuttgart > FUNDING —P rof. Dr. Martina Löw, Technische Universität Darmstadt The project was financed by the Federal Ministry of —P rof. Dr. Dr. h.c. Günter Müller, Albert-Ludwigs- Education and Research (support code 01/08/2011 – Universität Freiburg 30/09/2012: 01BY1175, 01/10/2012 – 31/01/2013: —P rof. Dr. Alexander Pretschner, Technische Universität 16BY1175). München —P rof. Dr. Alexander Roßnagel, Universität Kassel —P rof. Dr. Michael Waidner, Technische Universität Darmstadt/Fraunhofer SIT/CASED — Dr. Wieland Holfelder, Google Germany — Dr. Göttrik Wewer, Deutsche Post DHL — Michael Bültmann, Nokia GmbH — Dirk Wittkopp, IBM Deutschland GmbH > ASSIGNMENTS/STAFF Project administrator: 01/08/2011 - 30/09/2012: Project Management Agency – part of the German Aerospace Center — Dr. Karin-Irene Eiermann, acatech (PT-DLR) — Martin Peters, Albert-Ludwigs-Universität Freiburg — Carsten Ochs, Technische Universität Darmstadt 01/10/2012 - 31/01/2013: VDI/VDE Innovation + Technik — Fatemeh Shirazi, Technische Universität Darmstadt GmbH — Hervais Simo, Technische Universität Darmstadt — Florian Kelbert, Technische Universität München acatech would also like to thank the following companies — Maxi Nebel, Universität Kassel for their support: — Dr. Philipp Richter, Universität Kassel — Daniel Nagel, Stuttgart, Independent Google Germany, Deutsche Post AG, Nokia GmbH, — Dr. Michael Eldred, Cologne, Independent IBM Deutschland GmbH 11 Introduction 1 INTRODUCTION 1.1 SCOPE OF PROJECT practical business perspectives of the Internet and com- munication companies involved.1 The strategic decision The present book is the second publication in a large- to involve corporate players in the project enhanced the scale, interdisciplinary research project on Internet Privacy quality and practical reference points of the academic re- which was launched in mid-2011.The origin of the project search and added relevance as discussions evolved around is a condition frequently called the “privacy paradox”. This practical business cases. paradox refers to the fact that people use the Internet ex- tensively and often relinquish their data all too willingly, We apply a normative, value-based approach to a culture yet simultaneously harbor significant fears and worries of privacy and trust on the Internet. This value-based ap- – some justi fied,some exaggerated – that their privacy proach helps to structure the complex system of economic will be compromised. In short, we observe a coexistence stakeholders, technical framework conditions, legal re- of acceptance and fear with regard to Internet usage. quirements and dynamic societal parameters that come This paradox may hinder the enormous potential of the together on the Internet and utilises the main pillars of Internet for users, businesses, and the economy, as users a democratic society, including free individuals and eco- may be reluctant to use services that could benefit them nomic well-being for all. significantly. To reduce complexity and ensure thorough scientific ex- The goal of our interdisciplinary project was to develop re- amination, we limited the number of application fields. commendations (including technical prototypes) for policy In the challenge to identify and select representative ap- makers and legislators, businesses, industry, researchers, plication areas for our options and recommendations, we and academia that promote a culture of privacy and inspire were guided by an individual perspective and the ques- trust in Internet applications and online data transmission. tion: what are people currently using? What are the sourc- These recommendations apply to the fields of education, es of insecurities and legal disputes at the present time? business ethics, technology development, legal matters, We identified online social networks and e-commerce as and research demands. Following are proposed social rules the most widely used and therefore the digital spaces/ and norms, a clear economic and legal framework, as well areas most affected by insecurities and privacy concerns. as technical solutions describing how an adequate measure Due to the near-universal nature of these two application of privacy can be evaluated and implemented in various areas and their successive convergence, we surmise that Internet contexts.