Scribd Logo
Upload

Welcome to Scribd!

  • Webinar: Recap of Dec. 2011 FPF Event On Personal Information: The Benefits & Risks of De-Identification

    Uploaded by

    futureofprivacy
    224 views10 pages
    Webinar hosted by the Electronic Health Information Library For complete panel videos from the conference: http://futureofprivacy.org/de-identification-workshop/ Event Agenda: Opening Presentation: How is De-Identified Data Used: Overview of the ways de-identified data is used in the areas of health, marketing, traffic management, and fraud. Peter Swire, C. William O’Neill Professor of Law, Moritz School of Law, The Ohio State University Panel 1: What are the Risks? De-Identification and Re-Identification Risk Analysis. Panelists: Alessandro Acquisti, Associate Professor of Information Technology and Public Policy, Heinz College, Carnegie Mellon University Khaled El Emam, Associate Professor, Faculty of Medicine and Canada Research Chair in Electronic Health Information, University of Ottawa Latanya Sweeney, Director and Founder, Data Privacy Lab, Harvard University Moderator: Kim Gray, Chief Privacy Officer, IMS Health Panel 2: Common Secondary Uses of De-Identified Data: How are companies or governments using data? What are the Benefits? How are the Risks Being Handled Today? Panelists: Daniel Barth-Jones, PhD, MPH, Assistant Professor of Clinical Epidemiology, Columbia University Mitra Rocca, Associate Director in Medical Informatics, Food and Drug Administration, Sentinel Project Harlan Yu, Ph.D. candidate in the Computer Science Department and the Center for Information Technology Policy at Princeton Moderator: Marcy Wilder, Partner, Privacy and Information Management, Hogan Lovells Panel 3: Data Use for Consumer Services Panelists: Jules Cohen, Director, Trustworthy Computing Group, Microsoft Ashish Venugopal, Research Scientist, Google Translate Moderator: Lance J. Hoffman, Distinguished Research Professor, Computer Science Department, Director, Cyber Security Policy and Research Institute, The George Washington University Keynote Luncheon with The Honorable Louis W. Sullivan, MD, Former Secretary, U.S. Department of Health and Human Services Panel 4: Advertising and Marketing Uses and Concerns Panelists: Ashkan Soltani, Independent Researcher specializing in Consumer Privacy and Internet Security Justin Brookman, Director, Project on Consumer Privacy, The Center for Democracy and Technology Michael Blum, General Counsel, Quantcast Michael Ho, Founder and VP of Business Development, Bering Media Peder Magee, Senior Attorney, Division of Privacy and Identity Protection, Federal Trade Commission Moderator: Jules Polonetsky, Director and Co-Chair, Future of Privacy Forum Panel 5: Legal Perspectives on Anonymization Panelists: Daniel J. Solove, John Marshall Harlan Research Professor, George Washington University Law School Harley Geiger, Policy Counsel, Center for Democracy and Technology Jane Yakowitz, Visiting Assistant Professor of Law, Brooklyn Law School Rob van Eijk, Internet Technology Expert, Dutch Data Protection Authority Moderator: David Hoffman, Director of Security Policy and Global Privacy Officer, Intel

    Original Title

    Webinar: Recap of Dec. 2011 FPF Event on Personal Information: The Benefits & Risks of De-Identification

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    PDF or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    Webinar hosted by the Electronic Health Information Library For complete panel videos from the conference: http://futureofprivacy.org/de-identification-workshop/ Event Agenda: Opening Presentation: How is De-Identified Data Used: Overview of the ways de-identified data is used in the areas of health, marketing, traffic management, and fraud. Peter Swire, C. William O’Neill Professor of Law, Moritz School of Law, The Ohio State University Panel 1: What are the Risks? De-Identification and Re-Identification Risk Analysis. Panelists: Alessandro Acquisti, Associate Professor of Information Technology and Public Policy, Heinz College, Carnegie Mellon University Khaled El Emam, Associate Professor, Faculty of Medicine and Canada Research Chair in Electronic Health Information, University of Ottawa Latanya Sweeney, Director and Founder, Data Privacy Lab, Harvard University Moderator: Kim Gray, Chief Privacy Officer, IMS Health Panel 2: Common Secondary Uses of De-Identified Data: How are companies or governments using data? What are the Benefits? How are the Risks Being Handled Today? Panelists: Daniel Barth-Jones, PhD, MPH, Assistant Professor of Clinical Epidemiology, Columbia University Mitra Rocca, Associate Director in Medical Informatics, Food and Drug Administration, Sentinel Project Harlan Yu, Ph.D. candidate in the Computer Science Department and the Center for Information Technology Policy at Princeton Moderator: Marcy Wilder, Partner, Privacy and Information Management, Hogan Lovells Panel 3: Data Use for Consumer Services Panelists: Jules Cohen, Director, Trustworthy Computing Group, Microsoft Ashish Venugopal, Research Scientist, Google Translate Moderator: Lance J. Hoffman, Distinguished Research Professor, Computer Science Department, Director, Cyber Security Policy and Research Institute, The George Washington University Keynote Luncheon with The Honorable Louis W. Sullivan, MD, Former Secretary, U.S. Department of Health and Human Services Panel 4: Advertising and Marketing Uses and Concerns Panelists: Ashkan Soltani, Independent Researcher specializing in Consumer Privacy and Internet Security Justin Brookman, Director, Project on Consumer Privacy, The Center for Democracy and Technology Michael Blum, General Counsel, Quantcast Michael Ho, Founder and VP of Business Development, Bering Media Peder Magee, Senior Attorney, Division of Privacy and Identity Protection, Federal Trade Commission Moderator: Jules Polonetsky, Director and Co-Chair, Future of Privacy Forum Panel 5: Legal Perspectives on Anonymization Panelists: Daniel J. Solove, John Marshall Harlan Research Professor, George Washington University Law School Harley Geiger, Policy Counsel, Center for Democracy and Technology Jane Yakowitz, Visiting Assistant Professor of Law, Brooklyn Law School Rob van Eijk, Internet Technology Expert, Dutch Data Protection Authority Moderator: David Hoffman, Director of Security Policy and Global Privacy Officer, Intel

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF or read online from Scribd
    Flag for inappropriate content
    224 views10 pages

    Webinar: Recap of Dec. 2011 FPF Event On Personal Information: The Benefits & Risks of De-Identification

    Uploaded by

    futureofprivacy
    Webinar hosted by the Electronic Health Information Library For complete panel videos from the conference: http://futureofprivacy.org/de-identification-workshop/ Event Agenda: Opening Presentation: How is De-Identified Data Used: Overview of the ways de-identified data is used in the areas of health, marketing, traffic management, and fraud. Peter Swire, C. William O’Neill Professor of Law, Moritz School of Law, The Ohio State University Panel 1: What are the Risks? De-Identification and Re-Identification Risk Analysis. Panelists: Alessandro Acquisti, Associate Professor of Information Technology and Public Policy, Heinz College, Carnegie Mellon University Khaled El Emam, Associate Professor, Faculty of Medicine and Canada Research Chair in Electronic Health Information, University of Ottawa Latanya Sweeney, Director and Founder, Data Privacy Lab, Harvard University Moderator: Kim Gray, Chief Privacy Officer, IMS Health Panel 2: Common Secondary Uses of De-Identified Data: How are companies or governments using data? What are the Benefits? How are the Risks Being Handled Today? Panelists: Daniel Barth-Jones, PhD, MPH, Assistant Professor of Clinical Epidemiology, Columbia University Mitra Rocca, Associate Director in Medical Informatics, Food and Drug Administration, Sentinel Project Harlan Yu, Ph.D. candidate in the Computer Science Department and the Center for Information Technology Policy at Princeton Moderator: Marcy Wilder, Partner, Privacy and Information Management, Hogan Lovells Panel 3: Data Use for Consumer Services Panelists: Jules Cohen, Director, Trustworthy Computing Group, Microsoft Ashish Venugopal, Research Scientist, Google Translate Moderator: Lance J. Hoffman, Distinguished Research Professor, Computer Science Department, Director, Cyber Security Policy and Research Institute, The George Washington University Keynote Luncheon with The Honorable Louis W. Sullivan, MD, Former Secretary, U.S. Department of Health and Human Services Panel 4: Advertising and Marketing Uses and Concerns Panelists: Ashkan Soltani, Independent Researcher specializing in Consumer Privacy and Internet Security Justin Brookman, Director, Project on Consumer Privacy, The Center for Democracy and Technology Michael Blum, General Counsel, Quantcast Michael Ho, Founder and VP of Business Development, Bering Media Peder Magee, Senior Attorney, Division of Privacy and Identity Protection, Federal Trade Commission Moderator: Jules Polonetsky, Director and Co-Chair, Future of Privacy Forum Panel 5: Legal Perspectives on Anonymization Panelists: Daniel J. Solove, John Marshall Harlan Research Professor, George Washington University Law School Harley Geiger, Policy Counsel, Center for Democracy and Technology Jane Yakowitz, Visiting Assistant Professor of Law, Brooklyn Law School Rob van Eijk, Internet Technology Expert, Dutch Data Protection Authority Moderator: David Hoffman, Director of Security Policy and Global Privacy Officer, Intel

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF or read online from Scribd
    Flag for inappropriate content
    of 10

    PERSONAL INFORMATION: THE BENEFITS AND RISKS OF DE-IDENTIFICATION

    Jules Polonetsky, Co-Chair & Director

    Who We Are
    The Future of Privacy Forum (FPF) is a Washington, DC based think tank that seeks to advance responsible data practices. The forum is led by Internet privacy experts Jules Polonetsky and Christopher Wolf and includes an advisory board comprised of leading figures from industry, academia, law and advocacy groups.

    What are the Risks? DeIdentification and ReIdentification Risk Analysis


    Swire: Who are the Attackers on anonymized data?
    Insiders peeping Outside hackers intruding Public

    Sweeney: Find ways to share data widely but without re-identification Emam: Study revealed half of attacks on health data and other half were demonstration attacks by researchers Acquisti: Facial recognition and risks associated with combining technologies

    What are the Benefits of DeIdentification?


    Data yields great benefits of to society Slim chance of re-identification Strong tool to protect privacy

    Common Secondary Uses of De-Identified Data: How are governments using data?
    Yu: Courts have relied on practical obscurity
    Court records have SS#'s, informants, critical information Some privacy controls implemented SS#, birth year, last four digits of financial info, address

    Rocca: Pilot Sentinel Project will augment existing safety systems Barth-Jones: Some methods to de-identify data can mess ups stats and lead to bad decisions

    Data Use for Consumer Services


    Venugopal: Google translate has moved from 3 languages to 63 languages purely on generic, publicly available data Cohen: Microsoft location database contains de-identified info without any info specific to the user
    Data derived from crowd sourcing

    Supreme Court Case on GPS tracking, US v. Jones

    Advertising and Marketing Uses and Concerns


    Ho: Privacy concerns when IP databases contain Zip or Zip plus 4 or household information
    Bering Media use of double-blind architecture

    Blum: Quantcast aggregates patterns of surfing behavior, no PII collected Magee: FTC acknowledged that there was no longer a bright line between PII and non-PII
    Shifted approach to look at whether data could be linked to a consumer/user

    Brookman: Consider parties involved


    1st party use 3rd party analytics firms Cross-site data

    Legal Perspectives on Anonymization: Daniel Solove Law Review Article: The PII Problem Privacy and a New Concept of Personally Identifiable Information (PII)
    Basic assumption behind the relevant statutes is that their applicability will turn on whether PII is present. (Note: no uniform definition of PII in information privacy law) Definitions that do exist are unsatisfactory Article introduces a new concept of PII Its model of PII 2.0 protects information that relates either to an identified or identifiable person, but that associates different legal interests with each category Flexible approach also provides the safeguard of treating identifiable information with a substantial risk of being identified as a form of identified data PII 2.0 represents a way beyond the reductionist reading of PII in the U.S., and the expansionist reading in the EU PII cannot be abandoned, and the PII 2.0 concept is essential as a way to define regulatory boundaries

    Legal Perspectives on Anonymization


    Yakowitz: Proposal for a legal safe harbor for researchers to use data
    Data commons is great for "information justice" Must be accessible Re-identification attacks are difficult and costly

    Geiger: Concern with long-term viability of deidentification standards

    Jules Polonetsky, Executive Director and Co-Chair JulesPol@futureofprivacy.org

    Christopher Wolf, Founder and Co-Chair Cwolf@futureofprivacy.org

    Watch the Conference here: www.futureofprivacy.org/de-identification-workshop/

    www.futureofprivacy.org Applicationprivacy.org Facebook.com/futureofprivacy @julespolonetsky @privacywolf GPlus.to/julespolonetsky

    You might also like