Who We Are T he F uture o f Priva c y F o rum (F PF ) is a - - PDF document

1/12/2012 1

PE

RSONAL INF ORMAT ION: T HE BE NE F IT S AND R ISKS OF DE- IDE NT IF ICAT ION

Jule s Po lo ne tsky, Co -Cha ir & Dire c to r

Who We Are

 T he F uture o f Priva c y F

• rum (F

PF ) is a Wa shing to n, DC b a se d think ta nk tha t se e ks to a dva nc e re spo nsib le da ta pra c tic e s. T he fo rum is le d b y I nte rne t priva c y e xpe rts Jule s Po lo ne tsky a nd Christo phe r Wo lf a nd inc lude s a n a dviso ry b o a rd c o mprise d o f le a ding fig ure s fro m industry, a c a de mia , la w a nd a dvo c a c y g ro ups.

1/12/2012 2

Wha t a re the Risks? De - I de ntific a tio n a nd Re - I de ntific a tio n Risk Ana lysis

S i Wh th Att k “ i d  Swire : Who a re the Atta c ke rs o n “a no nymize d da ta ”?

 Inside rs “pe e ping ”  Outside ha c ke rs intruding  Pub lic

 Swe e ne y: F ind wa ys to sha re da ta wide ly b ut witho ut re -ide ntific a tio n  E ma m: Study re ve a le d ha lf o f a tta c ks o n he a lth  E ma m: Study re ve a le d ha lf o f a tta c ks o n he a lth da ta a nd o the r ha lf we re de mo nstra tio n a tta c ks b y re se a rc he rs  Ac q uisti: F a c ia l re c o g nitio n a nd risks a sso c ia te d with c o mb ining te c hno lo g ie s

Wha t a re the Be ne fits o f De - I de ntific a tio n?

 Da ta yie lds g re a t b e ne fits o f to so c ie ty  Slim c ha nc e o f re -ide ntific a tio n  Stro ng to o l to pro te c t priva c y

1/12/2012 3

Co mmo n Se c o nda ry Use s o f De -I de ntifie d Da ta : Ho w a re g o ve rnme nts using da ta ?

 Yu: Co urts ha ve re lie d o n pra c tic a l o b sc urity

 Co urt re c o rds ha ve SS# 's, info rma nts, c ritic a l info rma tio n  So me priva c y c o ntro ls imple me nte d  SS#, b irth ye a r, la st fo ur dig its o f fina nc ia l info , a ddre ss

R Pil t S ti l P j t ill t i ti  Ro c c a : Pilo t Se ntine l Pro je c t will a ug me nt e xisting sa fe ty syste ms  Ba rth-Jo ne s: So me me tho ds to de -ide ntify da ta c a n me ss ups sta ts a nd le a d to b a d de c isio ns

Da ta Use fo r Co nsume r Se rvic e s

 Ve nug o pa l: Go o g le tra nsla te ha s mo ve d fro m 3 la ng ua g e s to 63 la ng ua g e s pure ly o n g e ne ric , pub lic ly a va ila b le da ta  Co he n: Mic ro so ft lo c a tio n da ta b a se c o nta ins de -ide ntifie d info witho ut a ny info spe c ific to the use r

 Da ta de rive d fro m c ro wd so urc ing  Da ta de rive d fro m c ro wd so urc ing

 Supre me Co urt Ca se o n GPS tra c king , US v. Jo ne s

1/12/2012 4

Adve rtising a nd Ma rke ting Use s a nd Co nc e rns

i h d b i i  Ho : Priva c y c o nc e rns whe n I P da ta b a se s c o nta in Zip

• r Zip plus 4 o r ho use ho ld info rma tio n

 Be ring Me dia use o f do ub le -b lind a rc hite c ture

 Blum: Qua ntc a st a g g re g a te s pa tte rns o f surfing b e ha vio r, no PI I c o lle c te d  Ma g e e : F T C a c kno wle dg e d tha t the re wa s no lo ng e r a b rig ht line b e twe e n PI I a nd no n-PI I g

 Shifte d a ppro a c h to lo o k a t whe the r da ta c o uld b e linke d to a c o nsume r/ use r

 Bro o kma n: Co nside r pa rtie s invo lve d

 1st pa rty use  3rd pa rty a na lytic s firms  Cro ss-site da ta

L e g a l Pe rspe c tive s o n Ano nymiza tio n: Da nie l So lo ve L a w Re vie w Artic le : T he PI I Pro b le m Priva c y a nd a Ne w Co nc e pt o f Pe rso na lly I de ntifia b le I nfo rma tio n (PI I )

B i ti b hi d th l t t t t i th t th i  Ba sic a ssumptio n b e hind the re le va nt sta tute s is tha t the ir a pplic a b ility will turn o n whe the r PI I is pre se nt. (No te : no unifo rm de finitio n o f PI I in info rma tio n priva c y la w)  De finitio ns tha t do e xist a re unsa tisfa c to ry  Artic le intro duc e s a ne w c o nc e pt o f PI I  I ts mo de l o f PI I 2.0 pro te c ts info rma tio n tha t re la te s e ithe r to a n “ide ntifie d” o r “ide ntifia b le ” pe rso n, b ut tha t a sso c ia te s diffe re nt le g a l inte re sts with e a c h c a te g o ry  F le xib le a ppro a c h a lso pro vide s the sa fe g ua rd o f tre a ting ide ntifia b le info rma tio n with a sub sta ntia l risk o f b e ing ide ntifie d a s a fo rm o f ide ntifie d da ta  PI I 2.0 re pre se nts a wa y b e yo nd the re duc tio nist re a ding o f PI I in the U.S., a nd the e xpa nsio nist re a ding in the E U  PI I c a nno t b e a b a ndo ne d, a nd the PI I 2.0 c o nc e pt is e sse ntia l a s a wa y to de fine re g ula to ry b o unda rie s

1/12/2012 5

L e g a l Pe rspe c tive s o n Ano nymiza tio n

 Ya ko witz: Pro po sa l fo r a le g a l sa fe ha rb o r fo r re se a rc he rs to use da ta

 Da ta c o mmo ns is g re a t fo r "info rma tio n justic e "  Must b e a c c e ssib le  Re -ide ntific a tio n a tta c ks a re diffic ult a nd c o stly

 Ge ig e r: Co nc e rn with lo ng -te rm via b ility o f de - ide ntific a tio n sta nda rds ide ntific a tio n sta nda rds

Christo phe r Wo lf, F

• unde r

a nd Co -Cha ir Cwo lf@ future o fpriva c y.o rg Jule s Po lo ne tsky, E xe c utive Dire c to r a nd Co -Cha ir Jule sPo l@ future o fpriva c y.o rg Wa tc h the Confe re nc e he re : www.future ofpriva c y.org / de - ide ntific a tion- workshop/

• www.future o fpriva c y.o rg
• Applic a tio npriva c y.o rg
• F

a c e b o o k.c o m/ future o fpriva c y

• @ jule spo lo ne tsky
• @ priva c ywo lf
• GPlus.to / jule spo lo ne tsky