Ann Cavoukian, Ph.D.Ann Cavoukian, Ph.D.
Executive Director
Privacy and Big Data Institute
Ryerson University
Let’s Get Real:
We Need Privacy AND Smart Data Analytics
De-identification Symposium
Ryerson University
October 21, 2014
Let’s Dispel Some Myths
Zero Risk Doesn’t Exist
Privacy ≠ Secrecy
Privacy is not about having
something to hide
Privacy = Personal Control
•User control is critical
•Freedom of choice
•Informational self-determination
Context is key!
Privacy is Essential to Freedom:
A Necessary Condition for Societal Prosperity
and Well-Being
• Innovation, creativity, and the resultant prosperity of a
society requires freedom;
• Privacy is the essence of freedom: Without privacy, individual
human rights, property rights and civil liberties – the conceptual
engines of innovation and creativity, could not exist in a meaningful
manner;
• Surveillance is the antithesis of privacy: A negative
consequence of surveillance is the usurpation of a person’s limited
cognitive bandwidth, away from innovation and creativity.
Landmark Resolution Passed to Preserve
the Future of Privacy
By Anna Ohlden – October 29th 2010 - http://www.science20.com/newswire/landmark_resolution_passed_preserve_future_privacy
JERUSALEM, October 29, 2010 – A landmark Resolution by Ontario's
Information and Privacy Commissioner, Dr. Ann Cavoukian, was approved by
international Data Protection and Privacy Commissioners in Jerusalem today at their
annual conference. The resolution recognizes Commissioner Cavoukian's concept of
Privacy by Design - which ensures that privacy is embedded into new technologies
and business practices, right from the outset - as an essential component of
fundamental privacy protection.
Full Article:
http://www.science20.com/newswire/landmark_resolution_passed_preserve_future_privacy
Adoption of “Privacy by Design”
as an International Standard
1. English
2. French
3. German
4. Spanish
5. Italian
6. Czech
7. Dutch
8. Estonian
9. Hebrew
10.Hindi
11.Chinese
12.Japanese
13. Arabic
14. Armenian
15. Ukrainian
16. Korean
17. Russian
18. Romanian
19. Portuguese
20. Maltese
21. Greek
22. Macedonian
23. Bulgarian
24. Croatian
25. Polish
26. Turkish
27. Malaysian
28. Indonesian
29. Danish
30. Hungarian
31. Norwegian
32. Serbian
33. Lithuanian
34. Farsi
35. Finnish
36. Albanian
37. Catalan
Privacy by Design:
Proactive in 37 Languages!
Privacy by Design’s Greatest Strength –
Positive-Sum: The Power of “And”
Change the paradigm from
the dated zero-sum (win/win)
to a “positive-sum” model:
Create a win/win scenario,
not an either/or (vs.)
involving unnecessary trade-offs
and false dichotomies …
replace “vs.” with “and”
Privacy by Design:
The 7 Foundational Principles
1. Proactive not Reactive:
Preventative, not Remedial;
2. Privacy as the Default setting;
3. Privacy Embedded into Design;
4. Full Functionality:
Positive-Sum, not Zero-Sum;
5. End-to-End Security:
Full Lifecycle Protection;
6. Visibility and Transparency:
Keep it Open;
7. Respect for User Privacy:
Keep it User-Centric.
Big Data
Big Data
• 90% of all data was created within the last 2 years;
• Big Data analysis and data analytics promise new
opportunities to gain valuable insights and benefits –
new predictive modes of analysis;
• But, it will also enable expanded surveillance, increasing
the risk of unauthorized use and disclosure, on a scale
previously unimaginable.
Big Data Technology is Not Foolproof
• “Despite rampant interest from enterprise
leaders and often sizeable investments in
Big Data technologies, many programs still
sputter or fail completely.”
— Evanta Leadership Network,
May 29, 2014.
Big Data is moving from its
“inflated expectations” phase
to a “trough of disillusionment.”
— Gartner Hype Cycle,
April, 2014
— Commissioner Cavoukian
“Privacy is just as Big as
Big Data. The tools exist to
systemically protect personal
information and bring about
the benefits of Big Data.
Together we can ensure that
Big Data and ‘Big Privacy’
can both be accomplished to
enable win-win scenario.”
“The success of data
analytics will depend on the
ability to ensure that
individuals’ privacy is
respected. One of the most
effective ways in which to do
this is through strong
“de-identification” of the
data — in essence, storing
and sharing the data without
revealing the identity of the
individuals involved.”
— Commissioner Cavoukian
“There are considerable
risks in abandoning
de-identification efforts,
including the fact that
individuals and
organizations may simply
cease disclosing de-
identified information for
secondary purposes, even
those seen to be in the
public interest.”
— Commissioner Cavoukian
Big Data
Needs
Big Privacy!
Contact Information
Ann Cavoukian, Ph.D.Ann Cavoukian, Ph.D.
Executive Director
Privacy and Big Data Institute
Ryerson University
285 Victoria Street
Toronto, Ontario
M5B 2K3
Phone: (416) 979-5000 ext. 3138
ann.cavoukian@ryerson.ca
ann.cavoukian@
ryerson.ca
twitter.com/Pri
acyBigData

The Myth of Zero-Risk Solutions; The Benefits of Privacy by Design

  • 1.
    Ann Cavoukian, Ph.D.AnnCavoukian, Ph.D. Executive Director Privacy and Big Data Institute Ryerson University Let’s Get Real: We Need Privacy AND Smart Data Analytics De-identification Symposium Ryerson University October 21, 2014
  • 2.
  • 3.
  • 4.
    Privacy ≠ Secrecy Privacyis not about having something to hide
  • 5.
    Privacy = PersonalControl •User control is critical •Freedom of choice •Informational self-determination Context is key!
  • 6.
    Privacy is Essentialto Freedom: A Necessary Condition for Societal Prosperity and Well-Being • Innovation, creativity, and the resultant prosperity of a society requires freedom; • Privacy is the essence of freedom: Without privacy, individual human rights, property rights and civil liberties – the conceptual engines of innovation and creativity, could not exist in a meaningful manner; • Surveillance is the antithesis of privacy: A negative consequence of surveillance is the usurpation of a person’s limited cognitive bandwidth, away from innovation and creativity.
  • 7.
    Landmark Resolution Passedto Preserve the Future of Privacy By Anna Ohlden – October 29th 2010 - http://www.science20.com/newswire/landmark_resolution_passed_preserve_future_privacy JERUSALEM, October 29, 2010 – A landmark Resolution by Ontario's Information and Privacy Commissioner, Dr. Ann Cavoukian, was approved by international Data Protection and Privacy Commissioners in Jerusalem today at their annual conference. The resolution recognizes Commissioner Cavoukian's concept of Privacy by Design - which ensures that privacy is embedded into new technologies and business practices, right from the outset - as an essential component of fundamental privacy protection. Full Article: http://www.science20.com/newswire/landmark_resolution_passed_preserve_future_privacy Adoption of “Privacy by Design” as an International Standard
  • 8.
    1. English 2. French 3.German 4. Spanish 5. Italian 6. Czech 7. Dutch 8. Estonian 9. Hebrew 10.Hindi 11.Chinese 12.Japanese 13. Arabic 14. Armenian 15. Ukrainian 16. Korean 17. Russian 18. Romanian 19. Portuguese 20. Maltese 21. Greek 22. Macedonian 23. Bulgarian 24. Croatian 25. Polish 26. Turkish 27. Malaysian 28. Indonesian 29. Danish 30. Hungarian 31. Norwegian 32. Serbian 33. Lithuanian 34. Farsi 35. Finnish 36. Albanian 37. Catalan Privacy by Design: Proactive in 37 Languages!
  • 9.
    Privacy by Design’sGreatest Strength – Positive-Sum: The Power of “And” Change the paradigm from the dated zero-sum (win/win) to a “positive-sum” model: Create a win/win scenario, not an either/or (vs.) involving unnecessary trade-offs and false dichotomies … replace “vs.” with “and”
  • 10.
    Privacy by Design: The7 Foundational Principles 1. Proactive not Reactive: Preventative, not Remedial; 2. Privacy as the Default setting; 3. Privacy Embedded into Design; 4. Full Functionality: Positive-Sum, not Zero-Sum; 5. End-to-End Security: Full Lifecycle Protection; 6. Visibility and Transparency: Keep it Open; 7. Respect for User Privacy: Keep it User-Centric.
  • 11.
  • 12.
    Big Data • 90%of all data was created within the last 2 years; • Big Data analysis and data analytics promise new opportunities to gain valuable insights and benefits – new predictive modes of analysis; • But, it will also enable expanded surveillance, increasing the risk of unauthorized use and disclosure, on a scale previously unimaginable.
  • 13.
    Big Data Technologyis Not Foolproof • “Despite rampant interest from enterprise leaders and often sizeable investments in Big Data technologies, many programs still sputter or fail completely.” — Evanta Leadership Network, May 29, 2014.
  • 14.
    Big Data ismoving from its “inflated expectations” phase to a “trough of disillusionment.” — Gartner Hype Cycle, April, 2014
  • 16.
    — Commissioner Cavoukian “Privacyis just as Big as Big Data. The tools exist to systemically protect personal information and bring about the benefits of Big Data. Together we can ensure that Big Data and ‘Big Privacy’ can both be accomplished to enable win-win scenario.”
  • 17.
    “The success ofdata analytics will depend on the ability to ensure that individuals’ privacy is respected. One of the most effective ways in which to do this is through strong “de-identification” of the data — in essence, storing and sharing the data without revealing the identity of the individuals involved.” — Commissioner Cavoukian
  • 18.
    “There are considerable risksin abandoning de-identification efforts, including the fact that individuals and organizations may simply cease disclosing de- identified information for secondary purposes, even those seen to be in the public interest.” — Commissioner Cavoukian
  • 19.
  • 20.
    Contact Information Ann Cavoukian,Ph.D.Ann Cavoukian, Ph.D. Executive Director Privacy and Big Data Institute Ryerson University 285 Victoria Street Toronto, Ontario M5B 2K3 Phone: (416) 979-5000 ext. 3138 [email protected] ann.cavoukian@ ryerson.ca twitter.com/Pri acyBigData

Editor's Notes

  • #6 Privacy is Essential to Freedom And we will be releasing our 3rd paper in our trilogy on Dig Data with Deloitte in the spring!
  • #8 PbD in 37 Languages
  • #10 7 Foundational Principles
  • #11 Big Data
  • #15 MIT – Alex Pentland “… as we learn that it cant yet do what it advocates claim. Once we appreciate its limits, however, we’ll more clearly see its benefits.”
  • #16 June 10 - IPC/Deloitte Big Data Paper This paper demonstrates how privacy and responsibility can be advanced in this new age of Big Data analytics: “Context Actualizing” The big change is Big Data. More specifically, how organizations will leverage Big Data analytics to maximize these growing information assets — driven by their deep interest to maximize their resources and better compete in the market. While organizations have practical incentives to make the most of their ever-growing observation space (the data they have access to), they also have a pressing need to embed in these systems enhanced privacy protections. We outline in this paper just such an example — how an advanced Big Data sensemaking technology was, from the ground up, engineered with privacy-enhancing features. Some of these features are so critical to accuracy that the team decided they should be mandatory — so deeply baked-in they cannot be turned off.
  • #17 IPC – ITIF Paper
  • #18 IPC/Khaled Paper