National Privacy Research Strategy
Total Page:16
File Type:pdf, Size:1020Kb
NATIONAL PRIVACY RESEARCH STRATEGY National Science and Technology Council Networking and Information Technology Research and Development Program June 2016 National Privacy Research Strategy About the National Science and Technology Council The National Science and Technology Council (NSTC) is the principal means by which the Executive Branch coordinates science and technology policy across the diverse entities that make up the Federal research and development (R&D) enterprise. One of the NSTC’s primary objectives is establishing clear national goals for Federal science and technology investments. The NSTC prepares R&D packages aimed at accomplishing multiple national goals. The NSTC’s work is organized under five committees: Environment, Natural Resources, and Sustainability; Homeland and National Security; Science, Technology, Engineering, and Mathematics (STEM) Education; Science; and Technology. Each of these committees oversees subcommittees and working groups that are focused on different aspects of science and technology. More information is available at www.whitehouse.gov/ostp/nstc. About the Office of Science and Technology Policy The Office of Science and Technology Policy (OSTP) was established by the National Science and Technology Policy, Organization, and Priorities Act of 1976. OSTP’s responsibilities include advising the President in policy formulation and budget development on questions in which science and technology are important elements; articulating the President’s science and technology policy and programs; and fostering strong partnerships among Federal, state, and local governments, and the scientific communities in industry and academia. The Director of OSTP also serves as Assistant to the President for Science and Technology and manages the NSTC. More information is available at www.whitehouse.gov/ostp. About the Subcommittee on Networking and Information Technology Research and Development The Subcommittee on Networking and Information Technology Research and Development (NITRD), also known as the NITRD Program, is a body under the Committee on Technology (CoT) of the NSTC. The NITRD Subcommittee coordinates multiagency research and development programs to help assure continued U.S. leadership in networking and information technology, satisfy the needs of the Federal Government for advanced networking and information technology, and accelerate development and deployment of advanced networking and information technology. It also implements relevant provisions of the High-Performance Computing Act of 1991 (P.L. 102-194), as amended by the Next Generation Internet Research Act of 1998 (P.L. 105-305), and the America Creating Opportunities to Meaningfully Promote Excellence in Technology, Education and Science (COMPETES) Act of 2007 (P.L. 110-69). For more information, see www.nitrd.gov. Copyright Information This document is a work of the United States Government and is in the public domain (see 17 U.S.C. §105). Subject to the stipulations below, it may be distributed and copied with acknowledgement to OSTP. Copyrights to graphics included in this document are reserved by the original copyright holders or their assignees and are used here under the government’s license and by permission. Requests to use any images must be made to the provider identified in the image credits or to OSTP if no provider is identified. Printed in the United States of America, 2016. National Privacy Research Strategy June 24, 2016 Dear Colleagues: Advances in networking and information technologies are among key elements for U.S. economic growth and are essential to progress in many domains. Underpinning this progress are often large-scale collection, processing, and archiving of information. However, the vast increase in the quantity of personal information that is being collected and retained, combined with the increased ability to analyze it and fuse it with other information, is creating valid concerns about privacy. Given these concerns, the Federal Government supports the need to increase research and development in privacy-enhancing technologies and related science. We are pleased to transmit with this letter the National Science and Technology Council’s (NSTC) National Privacy Research Strategy (NPRS), developed by the Networking and Information Technology Research and Development (NITRD) Program. It was developed in light of the government’s recognition of the challenges to personal privacy from large-scale deployment of information technology systems and from the challenges presented by “Big Data.” The strategy responds to the 2014 reports, Big Data: Seizing Opportunities, Preserving Values by the White House and Big Data and Privacy: A Technological Perspective by the President’s Council of Advisors on Science and Technology (PCAST). This strategy establishes objectives and priorities for Federally-funded privacy research, provides a framework for coordinating privacy research and development, and encourages multi- disciplinary research that recognizes privacy needs of individuals and society and the responsibilities of the government. The science and technology advances established by this strategy will enable individuals, commercial entities, and the government to benefit from technological advancements and provide meaningful protections for personal information and individual privacy. We are pleased to commend this National Privacy Research Strategy as part of the Administration’s comprehensive effort to protect fundamental values such as privacy and fairness, while advancing innovative information technologies. We look forward to working with Federal agencies, the private sector, and the public to realize that goal. National Privacy Research Strategy National Science and Technology Council Chair Staff John P. Holdren Afua Bruce Assistant to the President for Science and Executive Director Technology and Director, Office of Science and Office of Science and Technology Policy Technology Policy Subcommittee on Networking and Information Technology Research and Development Co-Chair Co-Chair James Kurose Keith Marzullo Assistant Director, Computer and Information Director, National Coordination Office for Science and Engineering Directorate Networking and Information Technology Research National Science Foundation and Development National Privacy Research Strategy Working Group Marjory Blumenthal, Office of Science and Naomi Lefkovitz, National Institute of Standards Technology Policy and Technology Sean Brooks, National Institute of Standards and Jessica Lyon, Federal Trade Commission Technology David Marcos, National Security Agency Chris Clifton, National Science Foundation Keith Marzullo, National Coordination Office for Milton Corn, National Institutes of Health NITRD Lorrie Cranor, Federal Trade Commission Gregg Motta, Federal Bureau of Investigation Ed Doray, Department of Defense Tristan Nguyen, Air Force Office of Scientific Simson Garfinkel, National Institute of Standards Research and Technology Eugene Sullivan, National Security Agency Marc Groman, Office of Management and Budget Tomas Vagoun, National Coordination Office for Karyn Higa-Smith, Department of Homeland NITRD Security Ralph Wachter, National Science Foundation Christa Jones, Census Bureau Heng Xu, National Science Foundation Anthony Kelly, National Science Foundation Erin Kenneally, Department of Homeland Security Staff Eva Kleederman, Office of the Director of Tomas Vagoun National Intelligence National Coordination Office for Networking and Information Technology Research and Carl Landwehr, National Security Agency Development John Launchbury, Defense Advanced Research Projects Agency National Privacy Research Strategy National Privacy Research Strategy Table of Contents 1. Summary ..................................................................................................................................... 1 2. Introduction ................................................................................................................................ 2 2.1 Privacy Research Purpose ................................................................................................................ 2 2.2 Privacy Characterization .................................................................................................................. 4 2.3 Key Challenges for Privacy ............................................................................................................... 6 2.3.1 Influence of Context on Privacy ............................................................................................... 6 2.3.2 Transparency in Data Collection, Use, and Retention ............................................................. 6 2.3.3 Data Aggregation, Analysis, and Release ................................................................................. 7 2.4 Desired Outcome ............................................................................................................................. 7 3. National Privacy Research Priorities .......................................................................................... 9 3.1 Foster multidisciplinary approach to privacy research and solutions ............................................. 9 3.2 Understand and measure privacy desires and impacts ................................................................. 10 3.3 Develop system design methods to incorporate privacy desires, requirements, and controls .... 12 3.4 Increase transparency of data collection, sharing,