NOTHING to HIDE: Tools for Talking (And Listening) About Data Privacy for Integrated Data Systems

Total Page:16

File Type:pdf, Size:1020Kb

NOTHING to HIDE: Tools for Talking (And Listening) About Data Privacy for Integrated Data Systems NOTHING TO HIDE: Tools for Talking (and Listening) About Data Privacy for Integrated Data Systems OCTOBER 2018 Acknowledgements: We extend our thanks to the AISP Network and Learning Community, whose members provided their support and input throughout the development of this toolkit. Special thanks to Whitney Leboeuf, Sue Gallagher, and Tiffany Davenport for sharing their experiences and insights about IDS privacy and engagement, and to FPF Policy Analyst Amy Oliver and FPF Policy Intern Robert Martin for their contributions to this report. We would also like to thank our partners at Third Sector Capital Partners and the Annie E. Casey Foundation for their support. This material is based upon work supported by the Corporation for National and Community Service (CNCS). Opinions or points of view expressed in this document are those of the authors and do not necessarily reflect the official position of, or a position that is endorsed by, CNCS or the Social Innovation Fund. TABLE OF CONTENTS Introduction ............................................................................................................................................................................................................................. 2 Why engage and communicate about privacy? ................................................................................................................................................. 2 Using this toolkit to establish social license to integrate data ...................................................................................................................... 2 Communicating about Integrated Data .......................................................................................................................................................................4 Sharing a clear and confident public message about integrated data and privacy .............................................................................4 Step 1) Set your communication goals ...................................................................................................................................................................4 Step 2) Develop your communications strategy .................................................................................................................................................4 Step 3) Develop specific messages that speak to your audience ................................................................................................................5 Step 4) Identify your communications channels and tools ............................................................................................................................6 Step 5) Mobilize your allies .......................................................................................................................................................................................... 7 Engaging Stakeholders around Integrated Data ......................................................................................................................................................8 Building strong and sustainable relationships with those who care about data and privacy ...........................................................8 Step 1) Establish your engagement strategy and resources ..........................................................................................................................8 Step 2) Identify and map your stakeholders ........................................................................................................................................................9 Step 3) Prepare for your engagement activities .................................................................................................................................................9 Step 4) Convene and engage your stakeholders .............................................................................................................................................. 10 Step 5) Follow through and follow up .................................................................................................................................................................. 10 Conclusion ...............................................................................................................................................................................................................................11 Appendix A – Understanding Data Privacy ...............................................................................................................................................................12 A.1: Privacy basics ...........................................................................................................................................................................................................12 A.2: Integrated data privacy .......................................................................................................................................................................................13 A.3: Privacy Fair Information Practice Principles (FIPPs) .............................................................................................................................. 14 A.4: Privacy tools and resources ..............................................................................................................................................................................15 Appendix B – Communications Talking Points and Exercises ............................................................................................................................17 B.1: Talking Points – Describing and distinguishing your IDS ........................................................................................................................17 B.2: Talking Points – Setting reasonable privacy expectations ....................................................................................................................18 B.3: Talking Points – Responding to others’ privacy expectations............................................................................................................. 19 B.4: Talking Points – Tips on language and privacy lingo ...............................................................................................................................21 B5: Exercise – Elevator Pitch .....................................................................................................................................................................................23 B6: Exercise – Advanced Elevator Pitch .............................................................................................................................................................. 24 B7: Exercise – Data Benefit Analysis ......................................................................................................................................................................25 Appendix C – Engagement Worksheets, Checklists and Sample Materials ................................................................................................ 26 C.1: Worksheet – Strategic Engagement Planning ........................................................................................................................................... 26 1. What are our objectives for this engagement? ....................................................................................................................................... 26 2. What is the environment for this engagement? .................................................................................................................................... 26 3. What are our resources for engagement? ................................................................................................................................................27 C.2: Worksheet – Stakeholder Mapping ............................................................................................................................................................... 29 1. Identify your potential stakeholders ............................................................................................................................................................ 29 2. Assess your potential stakeholders’ interests ......................................................................................................................................... 30 3. Prioritize your key stakeholders ................................................................................................................................................................... 30 C.3: Worksheet – Pre-Engagement Planning .......................................................................................................................................................31 1. Prepare answers to basic questions on process and substance .........................................................................................................31 2. Identify what informational or discussion materials you will need ..................................................................................................32 C.4: Worksheet – Convening Stakeholders .........................................................................................................................................................33 1. Deciding when to engage .................................................................................................................................................................................33
Recommended publications
  • Lewistown Borough 3
    GRANVILLE TOWNSHIP SUPERVISORS 100 HELEN STREET LEWISTOWN, PA 17044 717-242-2334 Mark M. Ellinger, Chairman William W. Page, Vice-Chairman James A. Smith, Supervisor □ Township Office □ Road Department □ Police Department □ Code Department □ Sewer & Water Department March 23, 2021 Lewistown Sentinel Lewistown, PA 17044 In response to Council President Shade’s recent article in The Sentinel, the Township would like to bring light to the untrue statements made by President Shade. Granville Township did abolish our Sewer Authority and in turn made it a Department within the Township. Her only factual statement. The rest of her comments in reference to Granville Township are all false. In our situation our Authority never functioned 100% independently like the Municipal Authority of the Borough of Lewistown (MABL). The Township since installing our first sewer line has always maintained the payroll, pension, insurances, etc. for our Sewer Department. We invoice the Sewer Dept. monthly for the costs. We have never raped, pillaged or stolen from our Sewer Department for the General Fund as she implies or as the Borough is planning to do with MABL dollars. We didn’t realize that another governmental body or constituents wanting to ask questions or disagreeing with public officials was an attack. It is not the intent of a Countywide Authority to “continue attacks”. We can’t continue something that never occurred. If it was, why would Lewistown Borough have three (3) seats at the table? We as a group of neighboring municipalities have never been “anti-Lewistown”. We have publicly asked for Lewistown Borough to come to the table to find a resolution that suits the entire County and Lewistown Borough has refused.
    [Show full text]
  • White Paper Swire US EU Surveillance
    December 17, 2015 US Surveillance Law, Safe Harbor, and Reforms Since 2013 Peter Swire1 Executive Summary: This White Paper is a submission to the Belgian Privacy Authority for its December 18, 2015 Forum on “The Consequences of the Judgment in the Schrems Case.”2 The Forum discusses the decision by the European Court of Justice in Schrems v. Data Protection Commissioner3 that the EU/US Safe Harbor was unlawful under the EU Data Protection Directive, particularly due to concerns about US surveillance law. For the Forum, I have been asked to comment on two issues: 1) Is US surveillance law fundamentally compatible with E.U. data protection law? 2) What actions and reforms has the US taken since the Snowden revelations began in June 2013? The White Paper draws on my background as a scholar of both EU data protection law and US surveillance law. It addresses serious misunderstandings of US national security law, reflected in official statements made in the Schrems case and elsewhere. It has three chapters: (1) The fundamental equivalence of the United States and EU member States as constitutional democracies under the rule of law. In the Schrems decision, the US was criticized for failing to ensure “a level of protection of fundamental rights essentially equivalent to that guaranteed in the EU legal order.” This chapter critiques that finding, instead showing that the United States has strict rule of law, separation of powers, and judicial oversight of law enforcement and national security 1 Peter Swire is the Huang Professor of Law and Ethics at the Georgia Tech Scheller College of Business and a Senior Fellow of the Future of Privacy Forum.
    [Show full text]
  • Who Freed Athens? J
    Ancient Greek Democracy: Readings and Sources Edited by Eric W. Robinson Copyright © 2004 by Blackwell Publishing Ltd The Beginnings of the Athenian Democracv: Who Freed Athens? J Introduction Though the very earliest democracies lildy took shape elsewhere in Greece, Athens embraced it relatively early and would ultimately become the most famous and powerful democracy the ancient world ever hew. Democracy is usually thought to have taken hold among the Athenians with the constitutional reforms of Cleisthenes, ca. 508/7 BC. The tyrant Peisistratus and later his sons had ruled Athens for decades before they were overthrown; Cleisthenes, rallying the people to his cause, made sweeping changes. These included the creation of a representative council (bode)chosen from among the citizens, new public organizations that more closely tied citizens throughout Attica to the Athenian state, and the populist ostracism law that enabled citizens to exile danger- ous or undesirable politicians by vote. Beginning with these measures, and for the next two centuries or so with only the briefest of interruptions, democracy held sway at Athens. Such is the most common interpretation. But there is, in fact, much room for disagree- ment about when and how democracy came to Athens. Ancient authors sometimes refer to Solon, a lawgiver and mediator of the early sixth century, as the founder of the Athenian constitution. It was also a popular belief among the Athenians that two famous “tyrant-slayers,” Harmodius and Aristogeiton, inaugurated Athenian freedom by assas- sinating one of the sons of Peisistratus a few years before Cleisthenes’ reforms - though ancient writers take pains to point out that only the military intervention of Sparta truly ended the tyranny.
    [Show full text]
  • Shared Place Names Hide Different Meanings
    Shared Place Names Hide Different Meanings There are 170 streams in Montana named Spring Creek, and three of them are in Jefferson County. One contributes to Little Whitetail Creek, just below where the McClusky Fire burned for two months last summer; another is a small tributary to Turnley Creek and its beaver dams just west of the town of Elkhorn; the third is the longest, running from the Montana Tunnels Mine to Jefferson City, where it pours into Prickly Pear Creek. When a space on earth is given a name it becomes more than just the sum of its parts, and it becomes a place. Why a chunk of earth is named what it is can serve different purposes. It can be descriptive, like Rock Creek. Some names are attempts to etch on the map a permanent reminder of the namer or someone who first turned that space into a place, such as Wilson Creek. Others, and perhaps the most beautiful, are attempts to put to paper the way a place makes one feel, as with The Angels Bathing Pool in Montana’s Mission Mountains. No matter the origin, it is important for geographic features to have standardized names. It was just a function of how Anglo-Americans moved across the landscape that the names of modern features were not all configured at once, and so while one pioneer came across a creek in northeast Montana that had cottonwood trees on it and so proclaimed it Cottonwood Creek, a miner in southwest Montana came across a similar creek and did the same thing.
    [Show full text]
  • 7 October 2019 Dear Mr. Zuckerberg, OPEN LETTER
    7 October 2019 Dear Mr. Zuckerberg, OPEN LETTER: FACEBOOK’S END-TO-END SECURITY PLANS The organizations below write today to encourage you, in no uncertain terms, to continue increasing the end-to-end security across Facebook’s messaging services. We have seen requests from the United States, United Kingdom, and Australian governments ​ asking you to suspend these plans “until [Facebook] can guarantee the added privacy does not reduce public safety”. We believe they have this entirely backwards: each day that platforms do not support strong end-to-end security is another day that this data can be breached, mishandled, or otherwise obtained by powerful entities or rogue actors to exploit it. Given the remarkable reach of Facebook’s messaging services, ensuring default end-to-end security will provide a substantial boon to worldwide communications freedom, to public safety, and to democratic values, and we urge you to proceed with your plans to encrypt messaging through Facebook products and services. We encourage you to resist calls to create so-called ​ “backdoors” or “exceptional access” to the content of users’ messages, which will fundamentally weaken encryption and the privacy and security of all users. Sincerely, 1. 7amleh-The Arab Center for Social Media Advancement 2. Access Now 3. ACM US Technology Policy Committee 4. ACT | The App Association 5. AfroLeadership 6. Alternatives 7. American Civil Liberties Union 8. Americans for Prosperity 9. APADOR-CH 10. ARTICLE 19 11. Asociación Argentina de Usuarios de Internet - Internauta Argentina 12. Asociación Colombiana de Usuarios de Internet 13. Asociación por los Derechos Civiles (ADC), Argentina 14.
    [Show full text]
  • January 11, 2015 President Barack Obama the White House 1600 Pennsylvania Avenue NW Washington, DC 20500 Access Now 1110 Vermont
    January 11, 2015 President Barack Obama The White House 1600 Pennsylvania Avenue NW Washington, DC 20500 Access Now 1110 Vermont Avenue NW Suite 500 Washington, DC 20005 Dear President Obama, We urge you to protect the security of your citizens, your economy, and your government by supporting the development and use of secure communications tools and technologies, rejecting policies that would prevent or undermine the use of strong encryption, and urging other leaders to do the same. Encryption tools, technologies, and services are essential to protect against harm and to shield our digital infrastructure and personal communications from unauthorized access. The ability to freely develop and use encryption provides the cornerstone for today’s global economy. Economic growth in the digital age is powered by the ability to trust and authenticate our interactions and communicate and conduct business securely, both within and across borders. Some of the most noted technologists and experts on encryption recently explained that laws or policies that undermine encryption would “force a U-turn from the best practices now being deployed to make the Internet more secure,” “would substantially increase system complexity” and raise associated costs, and “would create concentrated targets that could attract bad actors.”1 The absence of encryption facilitates easy access to sensitive personal data, including financial and identity information, by criminals and other malicious actors. Once obtained, sensitive data can be sold, publicly posted, or used
    [Show full text]
  • Kids & the Connected Home
    KIDS & THE CONNECTED HOME: PRIVACY IN THE AGE OF CONNECTED DOLLS, TALKING DINOSAURS, AND BATTLING ROBOTS DECEMBER 2016 Acknowledgements Future of Privacy Forum (FPF) and Family Online Safety Institute (FOSI) would like to thank the participants and attendees of "Kids and the Connected Home" (July 20, 2016), as well as the following individuals who contributed to the research and analysis in this paper: Carolina Alonso, Legal & Policy Fellow, Future of Privacy Forum Stacey Gray, Policy Counsel, Future of Privacy Forum Emma Morris, Global Policy Manager, Family Online Safety Institute Jennifer Hanley, Director, Legal & Policy Family Online Safety Institute Steven Anderson, Legal Intern, Future of Privacy Forum Hengyi Jiang, Legal Intern, Future of Privacy Forum Emily S. Tabatabai, Of Counsel, Orrick Herrington & Sutcliffe TABLE OF CONTENTS Executive Summary ............................................................................................................................................... 1 I. The Landscape: Connected Toys Are Increasingly Popular and Often Use Children's Data to Enable Interactive Play ................................. ....................................................................................................... 2 Connected Toys Differ from Other Toys Because They Collect, Use, and Share Data Via the Internet. ................................ ................................................................................................................ 2 Connected Toys Use a Variety of Technical Methods
    [Show full text]
  • Designing Privacy for You a Practical Approach for User-Centric Privacy
    Designing Privacy for You A Practical Approach for User-Centric Privacy Awanthika Senarath1, Nalin A.G. Arachchilage2, and Jill Slay3 1 Australian Centre for Cyber Security University of New South Wales - Canberra Australian Defence force Academy, Australia Email: [email protected] 2 Email: [email protected] 3 Email: [email protected] Abstract. Privacy directly concerns the user as the data owner (data- subject) and hence privacy in systems should be implemented in a man- ner which concerns the user (user-centered). There are many concepts and guidelines that support development of privacy and embedding pri- vacy into systems. However, none of them approaches privacy in a user- centered manner. Through this research we propose a framework that would enable developers and designers to grasp privacy in a user-centered manner and implement it along with the software development life cycle. 1 Introduction Donald Trump’s presidential campaign was seriously damaged, when a personal conversation he had with a friend ten years ago (in 2005) was recorded and re- leased to the public during his run in the elections in 2016 in the USA. The recording had been done without the knowledge of the two people engaged in the conversation and was released at a very critical moment in the presidential campaign [1]. This is not much different to the situation users face on a daily basis when using on-line applications to network, communicate, shopping and banking on-line, and for many other personal tasks [9]. Due to the pervasiveness of Information and Communication Technology on-line applications have be- come an integral part of users [7].
    [Show full text]
  • The Forgotten Fifth: Rural Youth and Substance Abuse
    THE FORGOTTEN FIFTH: RURAL YOUTH AND SUBSTANCE ABUSE Lisa R. Pruitt* This Article seeks to raise the visibility of the roughly twenty percent of the U.S. population who live in rural places—an often forgotten fifth—in rela- tion to the particular challenges presented by adolescent substance abuse. De- spite popular notions that substance abuse is essentially an urban phenomenon, recent data demonstrate that it is also a significant problem in rural America. Rural youth now abuse most substances, including alcohol and tobacco, at higher rates and at younger ages than their urban peers. The Article assesses the social, economic and spatial milieu in which rural adolescent substance abuse has burgeoned. Features of some rural communi- ties, such as a tolerance for youth and lenient and informal law enforcement responses, appear to benefit youth. Indeed, these are consistent with juvenile justice trends, such as diversion programs. Yet other characteristics of rural communities, such as limited social service and healthcare infrastructures, un- dermine the efficacy of such programs. Arguing that national drug policies often reflect urban agendas and leave rural communities disserved, this Article calls for policies that are more sensi- tive to rural contexts. It advocates nuanced empirical research that will provide a more comprehensive understanding of rural risk factors and, in turn, inform rural prevention, treatment, and diversion programs. Finally, it argues that fed- eral, state, and local responses to adolescent substance abuse must tackle defi- ciencies in rural infrastructure, while keeping in mind factors that differentiate rural places from what has become the implicit urban norm in law- and policy- * Professor of Law, University of California, Davis.
    [Show full text]
  • OECD Regions at a Glance Regions Are High on the Policy Agenda of OECD Countries
    OECD Regions at a Glance Regions are high on the policy agenda of OECD countries. And it is no wonder. Just 10% of regions accounted for more than half of total employment creation in most OECD countries between 1998 and 2003. This means that national growth tends to be driven by the dynamism of a small number of regions. Policy makers need sound statistical information on the source of regional competitiveness, OECD Regions but such information is not always available. Sub-national data are limited and regional indicators are difficult to compare between countries. OECD Regions at a Glance aims to fill this gap by analysing and comparing major territorial patterns and regional trends across OECD countries. It assesses the at a Glance impact of regions on national growth. It identifies unused resources that can be mobilised to improve regional competitiveness. And it tackles more intangible factors that can make the difference: it shows how regions compete in terms of well-being (access to higher education, health services, safety, etc.). This publication presents over 30 indicators in a reader-friendly format. Each indicator is illustrated by graphs and maps. A dynamic link (StatLink) is provided for each graph and map, which directs the user to a web page where the corresponding data are available in Excel®. OECD Regions at a Glance The full text of this book is available on line via these links: www.sourceoecd.org/governance/9789264009875 www.sourceoecd.org/regionaldevelopment/9789264009875 Those with access to all OECD books on line should use this link: www.sourceoecd.org/9789264009875 SourceOECD is the OECD’s online library of books, periodicals and statistical databases.
    [Show full text]
  • The Internet of Audio Things: State-Of-The-Art, Vision, and Challenges Carlo Fischione, Luca Turchet, György Fazekas, Mathieu Lagrange, Hossein Ghadikolaei
    The Internet of Audio Things: state-of-the-art, vision, and challenges Carlo Fischione, Luca Turchet, György Fazekas, Mathieu Lagrange, Hossein Ghadikolaei To cite this version: Carlo Fischione, Luca Turchet, György Fazekas, Mathieu Lagrange, Hossein Ghadikolaei. The Internet of Audio Things: state-of-the-art, vision, and challenges. IEEE internet of things journal, IEEE, 2020, 7 (10), pp.10233-10249. 10.1109/JIOT.2020.2997047. hal-02930053v2 HAL Id: hal-02930053 https://hal.archives-ouvertes.fr/hal-02930053v2 Submitted on 8 Jan 2021 HAL is a multi-disciplinary open access L’archive ouverte pluridisciplinaire HAL, est archive for the deposit and dissemination of sci- destinée au dépôt et à la diffusion de documents entific research documents, whether they are pub- scientifiques de niveau recherche, publiés ou non, lished or not. The documents may come from émanant des établissements d’enseignement et de teaching and research institutions in France or recherche français ou étrangers, des laboratoires abroad, or from public or private research centers. publics ou privés. IEEE INTERNET OF THINGS JOURNAL, VOL. XX, NO. X, NOVEMBER 2020 1 The Internet of Audio Things: state-of-the-art, vision, and challenges Luca Turchet, Gyorgy¨ Fazekas, Mathieu Lagrange, Hossein S. Ghadikolaei, and Carlo Fischione, Senior Member, IEEE, Abstract—The Internet of Audio Things (IoAuT) is an emerg- the emerging field of the Internet of Musical Things (IoMusT) ing research field positioned at the intersection of the Internet [7], where a number of devices for music production and of Things, sound and music computing, artificial intelligence, consumption are connected within ecosystems that multiply and human-computer interaction.
    [Show full text]
  • Idioms-And-Expressions.Pdf
    Idioms and Expressions by David Holmes A method for learning and remembering idioms and expressions I wrote this model as a teaching device during the time I was working in Bangkok, Thai- land, as a legal editor and language consultant, with one of the Big Four Legal and Tax companies, KPMG (during my afternoon job) after teaching at the university. When I had no legal documents to edit and no individual advising to do (which was quite frequently) I would sit at my desk, (like some old character out of a Charles Dickens’ novel) and prepare language materials to be used for helping professionals who had learned English as a second language—for even up to fifteen years in school—but who were still unable to follow a movie in English, understand the World News on TV, or converse in a colloquial style, because they’d never had a chance to hear and learn com- mon, everyday expressions such as, “It’s a done deal!” or “Drop whatever you’re doing.” Because misunderstandings of such idioms and expressions frequently caused miscom- munication between our management teams and foreign clients, I was asked to try to as- sist. I am happy to be able to share the materials that follow, such as they are, in the hope that they may be of some use and benefit to others. The simple teaching device I used was three-fold: 1. Make a note of an idiom/expression 2. Define and explain it in understandable words (including synonyms.) 3. Give at least three sample sentences to illustrate how the expression is used in context.
    [Show full text]