{"id":2421,"date":"2008-01-28T11:59:16","date_gmt":"2008-01-28T16:59:16","guid":{"rendered":"http:\/\/ibiblio.org\/pjones\/wordpress\/?p=2421"},"modified":"2008-01-28T17:12:15","modified_gmt":"2008-01-28T22:12:15","slug":"data-privacy-in-transatlantic-prespective","status":"publish","type":"post","link":"https:\/\/www.ibiblio.org\/pjones\/blog\/data-privacy-in-transatlantic-prespective\/","title":{"rendered":"Data Privacy in Transatlantic Prespective"},"content":{"rendered":"<p>live blog\/twitter<\/p>\n<p>Today: <a href=\"http:\/\/www.jhfc.duke.edu\/ces\/\">Data Privacy in Transatlantic Prespective<\/a>  for Data Privacy Day 08<\/p>\n<p> at Duke Law for data privacy confab. Bout half Europeans. US privacy is about limiting gubernint<\/p>\n<p> duke net lets you see all the mac addresses for all duke guests in the room. So much for privacy at the privacy confab<\/p>\n<p> Howard Beales formerly FTC Bureau of Consumer Protection talks about unencrypted wireless while I am handed MAC addresses by Dukenet<\/p>\n<p> in Europe this is Data Protection Day; in US this is Data Privacy Day &#8211; why? Stefano Rodot\u00c3\u00a0 explains<\/p>\n<p> citing European Dream http:\/\/tinyurl.com\/2zf2zs  &#8221; How Europe&#8217;s Vision of the Future Is Quietly Eclipsing the American Dream&#8221;<\/p>\n<p> Europeans are not drunk on the free market; American privacy law is mostly against the gubermint but changing.<\/p>\n<p> European approach seen, by them, as human rights agenda <\/p>\n<p> COuncil of Europe&#8217;s Internet Bill of Rights <\/p>\n<p> next up Peter Hustinx, European Data Protection Supervisor of the European Union<\/p>\n<p> 1\/28\/81??? was european data protect acts. US didn&#8217;t sign<\/p>\n<p> Again the Human Rights perspective in Europe is emphasised.<\/p>\n<p> 3 deficitcies in original. def of privacy is unclear. again only against gubermint\/public interference. negative approach rather than struct<\/p>\n<p> Euro Charter of Fundamental Rights &#8211; Privacy and Data Protection are separate but closely related<\/p>\n<p> about independent agencies &#8212; outside of gubermint but in Italy directly elected. how to avoid over politicalization of such agencies?<\/p>\n<p> Kathryn Ratte, Attorney, US Federal Trade Commission on Notice and Consent policy. means you get to read the unreadable   <\/p>\n<p> on unfair practices. the key is injury. injury that cannot be easily avoided <\/p>\n<p> behaviorable advertising == tracking you online so&#8217;s you can get targeted adverts. FTC wants industry self-regulation by disclosure<\/p>\n<p> Annie Anton of NCSU&#8217;s Privacy Place. Can software extract policies and put them to effect<\/p>\n<p> 2002 survey instrument to find what people say they want in privacy and that was actually in policies <\/p>\n<p> guess what they didn&#8217;t align<\/p>\n<p> annie&#8217;s hang out and publications to which she is refering http:\/\/theprivacyplace.org\/<\/p>\n<p> Anton does have great war stories about trying to get access to policies on privacy issues. Europeans are harder to read tho   <\/p>\n<p>Fred Cate, Director of the Center for Applied Cybersecurity Research next<\/p>\n<p> Cate notices that how people *say* they care about privacy has almost no effect on their behavior!<\/p>\n<p> people all ignore consent and notice. hippa for example. want surgery? you sign<\/p>\n<p> notice and choice is intellectually dishonest says Cate<\/p>\n<p> what is your choice once you have notice?<\/p>\n<p>Peter Swire: opt-out vs opt-in for third party uses doesn&#8217;t work. there are instead 5 categories. Fulfillment. Internal operations. Anti-fraud. Public priority. Marketing (most controversial). looking for substantive rules rather than millions of contracts. <\/p>\n<p>??s P3P policy enacted anywhere asks Andrew Chin of UNC Law. Anton answers: no one have accepted and implemented really. insight: companies have  no reason to implement P3P unless they are required to do so.<\/p>\n<p>Cate picks up on browser protection. and  ignoring the customized security settings. bad security interfaces means bad compliances. everyone keeps the default. under Vista,IE comes with a higher security setting.<\/p>\n<p>Anton: says that P3P policy interpretation is non-consistent. (as well as inconsistent)<\/p>\n<p>from the audience. p3p was good only for cookies and stopped there. flash cookies are immune for example.<\/p>\n<p>Mike Hubble of Womble Carlyle. What are actual data protections in practice? (part of the issue here is that policy and compliance are nowhere well reviewed). <\/p>\n<p>Swire sees this as can you buy insurance for your data protection.<\/p>\n<p>Giovanni Buttarelli says europeans work on that and let businesses be responsible for implementing<\/p>\n<p>Cate says that audits and standards in advance and liability afters. Focus on end results. Not PR and policy.<\/p>\n<p>Kathryn Ratte says FTC looks at security that way<\/p>\n<p>audience: like swire&#8217;s 5 approaches. but how to implement that? and who? FTC? public sector? tell us more about how it might work? (Swedish guy asking)<\/p>\n<p>Swire: commercial data is overseen by FTC, a independent agency in all respects, so they should and do have authority except banks. they do have medical. now about public sector: swire says see his writing. senate has something in place but the executive branch has provided no budget or appointments.<\/p>\n<p>anti-fraud is protected. as is all except marketing which does have some regulations. <\/p>\n<p>Swire: practices in US and in Europe are similar regardless of policy and law. <\/p>\n<p>more from audience on marketing. who wants it? recommender systems like netflix,  amazon etc.<\/p>\n<p>Buttarelli on new telephone books. 27 million Italians were asked it they wanted their mail, sms, email and phone should be listed. 5 million answered the inquiry. most agreed to have it all listed.<\/p>\n<p>Cate differentiates between disclosure vs poorly targeted adverts (like spam). He loves his personal preferences at eBay, amazon etc<\/p>\n<p>Swire doesn&#8217;t want heavily personalized info just out there because the info can be had by say local law enforcement. <\/p>\n<p>Anton on Catalog choice by mail. She unsubscribed to many but not Anne Taylor (thanks for sharing ;->).<\/p>\n<p>audience: she reads all notices. like opting IN rather than OUT. likes the 5 categories. but says that notice and consent has not gotten a fair shake. success of do not call as an example.<\/p>\n<p>anton: clicking as opt in sux<\/p>\n<p>cate: no one reads notices. response rate for opting in and opting out is tiny and identical. basically always fails. default will always be the rule.<\/p>\n<p>audience (anton student): Cate said transparency is better than notice. but transparent to who? how to make that via software? Cate says it&#8217;s law not software that will work here. when you roll out the system, you need to be clear on collection, storage, third party etc. one problem in the notice world is that having the FTC use your notice against you creates overprotection and opacity. more on transparency.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>live blog\/twitter Today: Data Privacy in Transatlantic Prespective for Data Privacy Day 08 at Duke Law for data privacy confab. Bout half Europeans. US privacy is about limiting gubernint duke net lets you see all the mac addresses for all duke guests in the room. So much for privacy at the privacy confab Howard Beales [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2421","post","type-post","status-publish","format-standard","hentry","category-general","post-preview"],"_links":{"self":[{"href":"https:\/\/www.ibiblio.org\/pjones\/blog\/wp-json\/wp\/v2\/posts\/2421","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ibiblio.org\/pjones\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ibiblio.org\/pjones\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ibiblio.org\/pjones\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ibiblio.org\/pjones\/blog\/wp-json\/wp\/v2\/comments?post=2421"}],"version-history":[{"count":0,"href":"https:\/\/www.ibiblio.org\/pjones\/blog\/wp-json\/wp\/v2\/posts\/2421\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.ibiblio.org\/pjones\/blog\/wp-json\/wp\/v2\/media?parent=2421"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ibiblio.org\/pjones\/blog\/wp-json\/wp\/v2\/categories?post=2421"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ibiblio.org\/pjones\/blog\/wp-json\/wp\/v2\/tags?post=2421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}