Module 1: Foundational Principles of Privacy in Technology

Question 1

Data Lifecycle

Answer 1

Collection, Use, Disclosure, Retention, Destruction

Question 2

Data Life Cycle for Privacy

Answer 2

Consent/notice before collection and disclosure and use and retention and ensuring destruction

Question 3

First Party Collection

Answer 3

Individual provides PII directly to data collector

Question 4

Surveillance

Answer 4

Individual’s data stream behavior observed though activities, including searches and websites engaged without interrupting activity.

Question 5

Repurposing

Answer 5

Previously collected data used for different purpose other than what it was initially collected for. Also called secondary use

Question 6

Third Party Collection

Answer 6

Previously collected data is shared with a third party to enable new data collection

Question 7

Active Collection vs. Passive Collection

Answer 7

Active: Customer has to do something to give data
Passive: Customer doesn’t do anything but data is still collected

Question 8

Explicit vs Implied Consent

Answer 8

Explicit: have to actively give consent
Implied: noted in privacy link

Question 9

Retention

Answer 9

Business Continuity Planning must be taken into account but also respect privacy standards

Question 10

Destruction Methods

Answer 10

Overwriting, Degaussing, Incinerating

Question 11

PbD Principle 1

Answer 11

Proactive, not Reactive; Preventative, not Remedial

Question 12

PbD Principle 2

Answer 12

Privacy as the Default Setting

Question 13

Contextual Integrity (Nissenbaum)

Answer 13

The preservation of situational expectations where there is an understanding between participants on societal norms or past interactions

Actors: the senders and receivers of personal information
Attributes: the types of information being shared
Transmission principles: those that govern the flow of information

Steps:
Identify relevant, existing norms
Determine how a system may disrupt those norms
Interpret and design for vulnerabilities

Question 14

PbD Principle 3

Answer 14

Privacy Embedded into Design in online forms, logging systems, and encryption

Question 15

PbD: Principle 4

Answer 15

Full functionality - Positive Sum, Not Zero Sum; have desired performance and functionality and protecting information privacy

Question 16

PbD: Principle 5

Answer 16

End-to-End Security during full life cycle protection through collecting, processing, storing, sharing, destroying

Question 17

PbD: Principle 6

Answer 17

Visibility and Transparency - Keep it Open

Question 18

PbD: Principle 7

Answer 18

Respect for User Privacy; Keep it User Centric

Question 19

How to measure risk (programmatic and technical)

Answer 19

Potential threat or issue + Impact of threat or issue + Likelihood

Question 20

Privacy risk model management options

Answer 20

Accept, Transfer, Mitigate, Avoid

Question 21

Fair Information Practice Principles (FIPPS)

Answer 21

Work alongside compliance models to mandate:

• notice, choice, and consent
• access to information
• controls on information
• how information is managed

Question 22

Calo’s Harm Dimensions

Answer 22

Objective: privacy has been violated; direct harm known to exist; forced or unanticipated use of personal information (measurable, observable)
Loss of business opportunity; loss of consumer trust; social detriment

Subjective: expects or perceives harm; may not be observable or measurable; can cause fear, anxiety, embarrassment
Psychological, behavioral

Question 23

NIST Frameworks

Answer 23

Risk Management Framework
Cybersecurity Framework
Privacy Framework: voluntary risk management tool; assist organizations in communicating and organizing privacy risk; rationalize privacy to build or evaluate privacy governance programs

Question 24

National Initiative for Cybersecurity Education’s Cybersecurity Workforce Framework (NICE Framework)

Answer 24

Published by NIST; categorizes and describes cybersecurity work; establishes common terminology; intended to be applied in all sectors

Question 25

Factors Analysis in Information Risk (FAIR) model

Answer 25

How often will a violation occur and over what time period?

What impact will that violation have?

Question 26

Value-sensitive design

Answer 26

Design approach accounts for moral and ethical values: trust, fairness, informed consent, freedom from bias

Question 27

Direct and indirect stakeholders

Answer 27

Direct stakeholders: Interact with system

Indirect stakeholders: Affected by system

Question 28

Conceptual

Answer 28

Identifies direct and indirect stakeholders, attempts to establish what those stakeholders might value and determines how those stakeholders may be affected by design

Question 29

Empirical Investigation

Answer 29

Focuses on how stakeholders configure, use, or are otherwise affected by the technology

Question 30

Technical Investigation

Answer 30

Examines how existing technology supports or hinders human values and how the technology might be designed to support the values identified in the conceptual investigation

Question 31

Value-Sensitive Design Methods

Answer 31

• Direct and indirect stakeholder analysis
• Value source analysis
• the co-evolution of technology and social structure
• Value scenarios
• Value sketches
• Value-oriented semi-structured interviews
• Scalable information dimensions
• Value-oriented coding manuals
• Value-oriented mock-ups, prototypes, or field deployments
• Ethnographically-informed inquiries regarding values and technology
• The model of informed consent online
• Value dams and flows
• The value sensitive action reflection model
• Envisioning Cards

Question 32

Strategies for skillful practice

Answer 32

Clarify project values
Identify direct and indirect stakeholders
Identify benefits and harms for stakeholders
Identify and elicit potential values
Develop working definitions of key values
Identify potential value tensions

Question 33

Design Thinking Process

Answer 33

Empathize, Define, Ideate, Prototype, Test

Value-sensitive design + Design thinking process