|
|
|
Project 3a paper due now |
|
A review session is being scheduled for Saturday
March 15, probably at 1:30 |
|
|
|
|
No matter how exemplary your life is, there are
things you want to keep to yourself |
|
|
|
|
|
|
When you buy a book, the transaction creates
information … who owns it? |
|
Is the information yours or the business’s? |
|
|
|
|
|
|
When you buy a book, the transaction creates
information … who owns it? |
|
Is the information yours or the business’s? |
|
Four options on how to use it -- |
|
Store can’t use after business purpose over |
|
Store can use it, if you approve |
|
Store can use it, unless you object |
|
Store can use information no matter what |
|
|
|
|
|
|
|
|
Justices Brandeis & Warren wrote … |
|
The narrower doctrine [of privacy] may have
satisfied the demands of society at a time when the abuse to be guarded
against could barely have arisen without violating a contract or a special
confidence; but modern devices afford abundant opportunities for the
perpetration of wrongs without the participation of the injured party |
|
|
|
|
|
|
Brandeis & Warren wrote … |
|
The narrower doctrine [of privacy] may have
satisfied the demands of society at a time when the abuse to be guarded
against could barely have arisen without violating a contract or a special
confidence; but modern devices afford abundant opportunities for the
perpetration of wrongs without the participation of the injured party |
|
|
|
|
|
|
Brandeis & Warren wrote … |
|
The narrower doctrine [of privacy] may have
satisfied the demands of society at a time when the abuse to be guarded
against could barely have arisen without violating a contract or a special
confidence; but modern devices afford abundant opportunities for the
perpetration of wrongs without the participation of the injured party |
|
|
|
|
|
|
What does “privacy” mean in the modern world? |
|
Privacy, the right of people to choose
freely under what circumstances and to what extent they will reveal
themselves, their attitude, and their behavior to others |
|
|
|
Privacy is a right |
|
You control when & how much is revealed |
|
|
|
|
|
|
To “protect privacy” in IT, HEW created “fair
Info practices”; OECD expanded |
|
OECD principles are the “gold standard” |
|
Defined in 1980 |
|
|
|
|
|
|
|
|
|
Business & Government are separate cases |
|
|
|
|
|
|
|
EU, much of non-EU Europe, NZ, Hong Kong,
Australia, Canada use OECD |
|
US privacy law for government is (has been?)
strong |
|
US privacy law for business is “sectoral”,
meaning it is limited to sectors and specific business practices |
|
Very few industries/practices covered |
|
Almost anything goes, e.g. identity theft |
|
US has no fed law protecting med info |
|
|
|
|
|
|
EU law says, “Info on EU citizens must comply
with OECD on leaving EU” |
|
US privacy is so bad, EU information cannot come
here |
|
US-EU negotiations |
|
|
|
|
|
|
EU law says, “Info on EU citizens must comply
with OECD on leaving EU” |
|
US privacy is so bad, EU information cannot come
here |
|
US-EU negotiations stalled over |
|
-
Opt-in/Opt-out |
|
-
Enforcement |
|
|
|
|
|
|
How private is your information online? |
|
Reputable online business post Privacy Stmt |
|
The statement should understandable to you and
say what info they collect, what they will do with it, how to “opt-out”,
etc. |
|
But, there is little policing & few
penalties |
|
|
|
|
|
|
Cookie: a record stored by a Web server on a
client (your computer) |
|
The cookie is usually a unique ID that allows
the server to remember who you are |
|
Well known CS idea that improves Web use |
|
|
|
|
|
|
Cookies are used by many sites and they make Web
usage much better |
|
Many sites, e.g. Oxford English Dictionary use
cookies |
|
Banking and credit card applications cannot be
secure enough without cookies |
|
If there privacy laws met OECD standards,
cookies would be all good and no one but computer scientists would know
about them |
|
|
|
|
|
|
Cookies can be stored in your computer by sites
you have not visited: 3rd party |
|
3rd Party Cookies come from a site in business
with the site you visit, e.g. for ads |
|
3rd party cookies allow info to be correlated |
|
|
|
|
The 3rd party cookie becomes the key (literally,
in DB sense) to join (in DB sense) the info held by separate co.s |
|
|
|
|
|
|
You control whether your computer accepts
cookies -- look in browser |
|
If you don’t care about privacy, accept all
cookies |
|
If you greatly value your privacy, accept no
cookies |
|
If you want some privacy AND benefit from the
useful stuff on the Web, accept cookies but reject 3rd party cookies |
|
|
|
|
|
Notes
