20
Ann Cavoukian, Ph.D. Ann Cavoukian, Ph.D. Executive Director Privacy and Big Data Institute Ryerson University Let’s Get Real: We Need Privacy AND Smart Data Analytics De-identification Symposium Ryerson University October 21, 2014

The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Embed Size (px)

DESCRIPTION

How can we enable the responsible use of data analytics while ensuring the strongest protection of personally identifiable data? By building the necessary protections in as an essential design feature … enter Privacy by Design. By embedding privacy protective measures such as strong de-identification protocols, into the design of much-needed research and data analytics, we will succeed in accomplishing multiple goals, thereby abandoning dated zero-sum paradigms.

Citation preview

Page 1: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Ann Cavoukian, Ph.D.Ann Cavoukian, Ph.D.Executive Director

Privacy and Big Data InstituteRyerson University

Let’s Get Real:We Need Privacy AND Smart Data Analytics

De-identification SymposiumRyerson UniversityOctober 21, 2014

Page 2: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Let’s Dispel Some Myths

Page 3: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Zero Risk Doesn’t Exist

Page 4: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Privacy ≠ Secrecy

Privacy is not about having something to hide

Page 5: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Privacy = Personal Control

•User control is critical•Freedom of choice•Informational self-determination

Context is key!

Page 6: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Privacy is Essential to Freedom:A Necessary Condition for Societal Prosperity

and Well-Being

• Innovation, creativity, and the resultant prosperity of a society requires freedom;

• Privacy is the essence of freedom: Without privacy, individual human rights, property rights and civil liberties – the conceptual engines of innovation and creativity, could not exist in a meaningful manner;

• Surveillance is the antithesis of privacy: A negative consequence of surveillance is the usurpation of a person’s limited cognitive bandwidth, away from innovation and creativity.

Page 7: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Landmark Resolution Passed to Preserve the Future of Privacy By Anna Ohlden – October 29th 2010 - http://www.science20.com/newswire/landmark_resolution_passed_preserve_future_privacy

JERUSALEM, October 29, 2010 – A landmark Resolution by Ontario's Information and Privacy Commissioner, Dr. Ann Cavoukian, was approved by international Data Protection and Privacy Commissioners in Jerusalem today at their annual conference. The resolution recognizes Commissioner Cavoukian's concept of Privacy by Design - which ensures that privacy is embedded into new technologies and business practices, right from the outset - as an essential component of fundamental privacy protection.

Full Article:http://www.science20.com/newswire/landmark_resolution_passed_preserve_future_privacy

Adoption of “Privacy by Design” as an International Standard

Page 8: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

1. English2. French3. German4. Spanish5. Italian6. Czech7. Dutch8. Estonian9. Hebrew10.Hindi11.Chinese12.Japanese

13. Arabic14. Armenian15. Ukrainian16. Korean17. Russian18. Romanian19. Portuguese20. Maltese21. Greek22. Macedonian23. Bulgarian24. Croatian25. Polish

26. Turkish27. Malaysian28. Indonesian29. Danish30. Hungarian31. Norwegian32. Serbian33. Lithuanian34. Farsi35. Finnish36. Albanian37. Catalan

Privacy by Design:Proactive in 37 Languages!

Page 9: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Privacy by Design’s Greatest Strength –Positive-Sum: The Power of “And”

Change the paradigm fromthe dated zero-sum (win/win)

to a “positive-sum” model:Create a win/win scenario,

not an either/or (vs.)involving unnecessary trade-offs

and false dichotomies …

replace “vs.” with “and”

Page 10: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Privacy by Design:The 7 Foundational Principles

1. Proactive not Reactive: Preventative, not Remedial;

2. Privacy as the Default setting;

3. Privacy Embedded into Design;

4. Full Functionality: Positive-Sum, not Zero-Sum;

5. End-to-End Security: Full Lifecycle Protection;

6. Visibility and Transparency: Keep it Open;

7. Respect for User Privacy: Keep it User-Centric.

Page 11: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Big Data

Page 12: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Big Data

• 90% of all data was created within the last 2 years;

• Big Data analysis and data analytics promise new opportunities to gain valuable insights and benefits – new predictive modes of analysis;

• But, it will also enable expanded surveillance, increasing the risk of unauthorized use and disclosure, on a scale previously unimaginable.

Page 13: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Big Data Technology is Not Foolproof

• “Despite rampant interest from enterprise leaders and often sizeable investments in Big Data technologies, many programs still sputter or fail completely.”

— Evanta Leadership Network,May 29, 2014.

Page 14: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Big Data is moving from its “inflated expectations” phase to a “trough of disillusionment.” — Gartner Hype Cycle,

April, 2014

Page 15: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design
Page 16: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

— Commissioner Cavoukian

“Privacy is just as Big as Big Data. The tools exist to systemically protect personal information and bring about the benefits of Big Data. Together we can ensure that Big Data and ‘Big Privacy’ can both be accomplished to enable win-win scenario.”

Page 17: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

“The success of data analytics will depend on the ability to ensure that individuals’ privacy is respected. One of the most effective ways in which to do this is through strong “de-identification” of the data — in essence, storing and sharing the data without revealing the identity of the individuals involved.”

— Commissioner Cavoukian

Page 18: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

“There are considerable risks in abandoning de-identification efforts, including the fact that individuals and organizations may simply cease disclosing de-identified information for secondary purposes, even those seen to be in the public interest.”

— Commissioner Cavoukian

Page 19: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Big DataNeeds

Big Privacy!

Page 20: The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

Contact Information

Ann Cavoukian, Ph.D.Ann Cavoukian, Ph.D.Executive DirectorPrivacy and Big Data Institute Ryerson University

285 Victoria Street Toronto, Ontario M5B 2K3

Phone: (416) 979-5000 ext. [email protected]

[email protected]

twitter.com/PrivacyBigData