Big Data & Privacy
Total Page:16
File Type:pdf, Size:1020Kb
Solutions to many pressing economic and societal challenges lie in better understanding data. New tools for analyzing disparate information sets, called Big Data, have revolutionized our ability to find signals amongst the noise. Big Data techniques hold promise for breakthroughs ranging from better health care, a cleaner environment, safer cities, and more effective marketing. Yet, privacy advocates are concerned that the same advances will upend the power relationships between government, business and individuals, and lead to prosecutorial abuse, racial or other profiling, discrimination, redlining, overcriminalization, and other restricted freedoms. On Tuesday, September 10th, 2013, the Future of Privacy Forum joined with the Center for Internet and Society at Stanford Law School to present a full-day workshop on questions surrounding Big Data and privacy. The event was preceded by a call for papers discussing the legal, technological, social, and policy implications of Big Data. A selection of papers was published in a special issue of the Stanford Law Review Online and others were presented at the workshop. This volume collects these papers and others in a single collection. These essays address the following questions: Does Big Data present new challenges or is it simply the latest incarnation of the data regulation debate? Does Big Data create fundamentally novel opportunities that civil liberties concerns need to accommodate? Can de-identification sufficiently minimize privacy risks? What roles should fundamental data privacy concepts such as consent, context, and data minimization play in a Big Data world? What lessons can be applied from other fields? We hope the following papers will foster more discussion about the benefits and challenges presented by Big Data—and help bring together the value of data and privacy, as well. TABLE OF CONTENTS Privacy & Big Data: Making Ends Meet Jules Polonetsky & Omer Tene .......................................................................................1 S-M-L-XL Data: Big Data as a New Informational Privacy Paradigm Michael Birnhack ...........................................................................................................7 Why Collection Matters: Surveillance as a De Facto Privacy Harm Justin Brookman & G.S. Hans ........................................................................................11 Consumer Subject Review Boards: A Thought Experiment Ryan Calo .....................................................................................................................15 Mo’ Data, Mo’ Problems? Personal Data Mining and the Challenge to the Data Minimization Principle Liane Colonna ...............................................................................................................19 Cloud Computing and Trans-border Law Enforcement Access to Private Sector Data. Challenges to Sovereignty, Privacy and Data Protection Paul de Hert & Gertjan Boulet ........................................................................................23 Taming the Beast: Big Data and the Role of Law Patrick Eggiman & Aurelia Tamò ....................................................................................27 Managing the Muddled Mass of Big Data Susan Freiwald .............................................................................................................31 Regulating the Man Behind the Curtain Christina Gagnier ..........................................................................................................35 Big Data in Small Hands Woodrow Hartzog & Evan Selinger .................................................................................39 The Glass House Effect: Why Big Data Is the New Oil, and What We Can Do About It Dennis Hirsch ...............................................................................................................44 How the Fair Credit Reporting Act Regulates Big Data Chris Jay Hoofnagle ......................................................................................................47 Buying and Selling Privacy: Big Data’s Different Burdens and Benefits Joseph W. Jerome .........................................................................................................51 Prediction, Preemption, Presumption Ian Kerr & Jessica Earle .................................................................................................55 Public v. Non-public Data: The Benefits of Administrative Controls Yianni Lagos & Jules Polonetsky .....................................................................................60 Big Data Analytics: Evolving Business Models and Global Privacy Regulation Peter Leonard ...............................................................................................................65 Big Data and Its Exclusions Jonas Lerman ...............................................................................................................70 Relational Big Data Karen E.C. Levy ............................................................................................................76 Privacy Substitutes Jonathan Mayer & Arvind Narayanan ..............................................................................81 Revisiting the 2000 Stanford Symposium in Light of Big Data William McGeveran ........................................................................................................86 Policy Frameworks to Enable Big Health Data Deven McGraw .............................................................................................................90 It’s Not Privacy & It’s Not Fair Deirdre K. Mulligan & Cynthia Dwork ..............................................................................94 Sensor Privacy as One Realistic & Reasonable Means to Begin Regulating Big Data Scott R. Peppet .............................................................................................................98 Three Paradoxes of Big Data Neil M. Richards & Jonathan H. King ..............................................................................102 Big Data: A Pretty Good Privacy Solution Ira S. Rubinstein ...........................................................................................................106 Big Data and the “New” Privacy Tradeoff Robert H. Sloan & Richard Warner .................................................................................110 Privacy in a Post-Regulatory World: Lessons from the Online Safety Debates Adam Thierer ................................................................................................................113 Has Katz Become Quaint? Use of Big Data to Outflank the 4th Amendment Jeffrey L. Vagle .............................................................................................................117 Big Data Threats Felix Wu .......................................................................................................................120 Jules Polonetsky & Omer Tene PRIVACY AND BIG DATA: MAKING ENDS MEET Jules Polonetsky & Omer Tene* Copyright 2013 The Board of Trustees of the Leland Stanford Junior University 66 STAN. L. REV. ONLINE 25 (2013) * INTRODUCTION efficient use of resources, on the one hand, and individuals’ rights to privacy, fairness, equality, and How should privacy risks be weighed against big freedom of speech, on the other hand. It requires data rewards? The recent controversy over leaked deciding whether efforts to cure fatal disease or documents revealing the massive scope of data eviscerate terrorism are worth subjecting human collection, analysis, and use by the NSA and individuality to omniscient surveillance and possibly other national security organizations has algorithmic decisionmaking.3 hurled to the forefront of public attention the delicate balance between privacy risks and big Unfortunately, the discussion progresses crisis by data opportunities.1 The NSA revelations crisis, often focusing on legalistic formalities while crystalized privacy advocates’ concerns of the bigger policy choices are avoided. Moreover, “sleepwalking into a surveillance society” even as the debate has become increasingly polarized, with decisionmakers remain loath to curb government each cohort fully discounting the concerns of the powers for fear of terrorist or cybersecurity other. For example, in the context of government attacks. surveillance, civil libertarians depict the government as pursuing absolute power, while law Big data creates tremendous opportunity for the enforcement officials blame privacy for child world economy not only in the field of national pornography and airplanes falling out of the sky. It security, but also in areas ranging from marketing seems that for privacy hawks, no benefit no and credit risk analysis to medical research and matter how compelling is large enough to offset urban planning. At the same time, the privacy costs, while for data enthusiasts, privacy extraordinary benefits of big data are tempered by risks are no more than an afterthought in the concerns over privacy and data protection. Privacy pursuit of complete information. advocates are concerned that the advances of the data ecosystem will upend the power relationships This Essay suggests that while the current privacy between government, business, and individuals, debate methodologically explores and lead to racial or other profiling, discrimination, the risks presented by big data, it fails to untangle over-criminalization, and other restricted freedoms. commensurate