Chapter 1: Foundational Principles

Question 1

Secondary use is also referred to what when collecting data?

Answer 1

repurposing

Question 2

What is required when collecting data

Answer 2

consent

Question 3

What are the two methods of data collection

Answer 3

active and passive data collection

Question 4

what are the four types of data collection

Answer 4

first party
surveillance
repurposing
third party

Question 5

What is first party data collection

Answer 5

occurs when individuals provides their personal information directly to the data collectors

Question 6

What is surveillance data collection

Answer 6

• individuals data stream behaviour is overed through their activities, including online searches, or websites they engage with, while the individual activity is not interrupted

Question 7

what is repurposing data collection

Answer 7

previously collected data may be used for a different purpose other than that for which was intality collected such as mailing address collected for shipping purposes later be used for sending marketing materials
o repurposing is also sometimes referred to as secondary

Question 8

what is third party data collection

Answer 8

previously collected information is transferred to a third party to enable a new data collection

Question 9

what are the two forms of consent

Answer 9

implicit and explicit

Question 10

What is implied consent

Answer 10

Implied consent does not require the user to take an action. An example might be presenting the user with terms of service that state the individual’s use of the service means they agree with those terms

Question 11

What is explicit

Answer 11

Explicit consent requires the user to take an action, such as selecting an option to allow the collection of information that the application provider wants to use to improve services and functionality

Question 12

What is privacy notice?

Answer 12

statement made to data subjects that describes how an organization collects, uses, retains and discloses personal information. Notices should also indicate what information will be collected.

Question 13

What does organization need when collecting personal information ?

Answer 13

privacy notice

Question 14

What are the requirements developing business continuity planning?

Answer 14

sufficiently timely, relevant, accurate and complete for their purposes

Question 15

What are the three potential issues that impact data destruction?

Answer 15

o digital content - Disks should be appropriately formatted before use to ensure that all data placed on them eventually can be deleted.
o Portable media- Portable media, such as CDs, DVDs and flash drives, have unique challenges precisely because they are portable and therefore harder to regulate, monitor and track.
o Hard copy-the primary challenge with “hard copy” documents, such as paper records, lies in determining what documents need to be destroyed and when.

Question 16

What are the 7 privacy design?

Answer 16

Principle 1: Proactive, Not Reactive Preventative, Not Remedial Privacy
Principle 2: Privacy as the Default Setting
Principle 3: Privacy Embedded into Design
Principle 4: Full Functionality
Principle 5: End to End security
Principle 6: Visibility and Transparency
Principle 7: Respect for User Privacy; Keep it User Centric

Question 17

What is risk?

Answer 17

is defined as a potential threat or issue, along with the impact the threat or issue could cause, and the likelihood that it will occur

Question 18

What is contextual integrity?

Answer 18

as maintaining personal information in alignment with the informational norms that apply to a particular context.

Question 19

What are they key components of contextual integrity

Answer 19

• actors: the senders and receivers of personal
• information attributes: the types of information being shared
• transmission principles: those that govern the flow of information

Question 20

What is the difference between subject and objective harm

Answer 20

Objective harm occurs when privacy has been violated and direct harm is known to exist. It involves the forced or unanticipated use of personal information and is generally measurable and observable while Subjective harm exists when an individual expects or perceives harm, even if the harm is not observable or measurable.

subjective privacy harms amount to discomfort and other negative feelings, while objective privacy harms involve actual adverse consequences

Question 21

What are the two dimensions of harm?

Answer 21

subjective and objective harm

Question 22

What does the value sensitive design account for?

Answer 22

morals, ethical

Question 23

What is value- sensitive design?

Answer 23

• Value-sensitive design is a design approach that accounts for moral and ethical values and should be considered when assessing the overall “value” of a design these values might include things such as trust, fairness, informed consent, courtesy or freedom from bias.

Question 24

What are the three investigations of value sensitive design? Explain

Answer 24

o Conceptual
 identifies the direct and indirect stakeholders, attempts to establish what those stakeholders might value, and determines how those stakeholders may be affected by the design.
o Empirical
 focuses on how stakeholders configure, use, or are otherwise affected by the technology.
o Technical
 examines how the existing technology supports or hinders human values and how the technology might be designed to support the values identified in the conceptual investigation

Question 25

What is the difference between direct and indirect stakeholders in value sensitive design?

Answer 25

o Direct stakeholders are those who directly interact with a system.
o Indirect stakeholders are any others who are affected by the system.