Personal Data Ecosystem - NSTIC Privacy Workshop

7,549 views
7,282 views

Published on

Kaliya Hamin, Executive Director of PDEC's Presentation to the National Strategy on Trusted Identities in Cyberspace Privacy and Usability Workshop.

Published in: Technology, News & Politics
0 Comments
7 Likes
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
7,549
On SlideShare
0
From Embeds
0
Number of Embeds
2,844
Actions
Shares
0
Downloads
120
Comments
0
Likes
7
Embeds 0
No embeds

No notes for slide
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • An example of this is a woman who attends she’s Geeky her handle in that context is Isis Machine, she “is” that person. She registers under this name, uses it in public at the event. She is attending as part of her work life but doesn’t want her participation linked back to an different persona that is just professional. \n\nOther women at that event talked explicitly about their management of 3-5 persona for various reasons...\n\n1) Live Journal Friends\n2) Professional ID\n3) Feminist Identity\n\n\n1) Totally Professional on Domain, GMail, Linked In\n2) Social but me on Facebook\n3) Spiritual under psydonym on LJ\n\n\nMe linked to real name\nSpiritual\nGaming\n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • It is vital that we be able to have freedom of action - that all contexts we participate in are not linked together. \n\nThat we have choice on when and how linking happens. \n\nIt is vital that we be able to have freedom of action - that all contexts we participate in are not linked together. \n\nThat we have choice on when and how linking happens. \n\nFacebook is ultimate context masher....\n\n\n\n\n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • \n
  • Personal Data Ecosystem - NSTIC Privacy Workshop

    1. 1. Kaliya Hamlin, Executive DirectorPERSONAL DATAECOSYSTEM CONSORTIUMPresentation at the NSTIC Privacy Workshop June 28, 2011 Boston, Massachusetts identitycommons) NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    2. 2. End user advocate since 2003 with the handle: Saving the World with User-Centric Identity Co-Founder, Co-Producer, Co-Facilitator Internet Identity Workshop A hub of innovation focused on user-centric identity. identitycommons Began in 2005 & # 13 is this October.) NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    3. 3. Fair Information Practice Principles 1973Transparency Purpose Specification Individual Participation Data Minimization Use Limitation Data Quality and Integrity Security Accountability and Auditing NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    4. 4. Personal Network Nodes Blogs MicroBlogs Profiles: *Professional *PersonalCan new and emerging technologies can be applied towards making FIPPs real today? NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    5. 5. from a submission to FTChttp://www.ftc.gov/bcp/workshops/privacyroundtables/personalDataEcosystem.pdf NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    6. 6. NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    7. 7. Track Business as Usual Do Not Track PrivacyTrack Business as Usual Do Not Track PrivacyBusiness as Usual Track Do Not Track PrivacyBusiness as Usual Track Do Not Track Privacy NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    8. 8. Do Not Track & Privacy +le Way Mi d d New Business Opportunities PERSONAL DATA ECOSYSTEM CONSORTIUM
    9. 9. People can track themselves and gain value from their own data. Leveraging Personal Devices & Network NodesNSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    10. 10. Individuals must be at the center of their own data lives.Diagram fromPersonal Data:The Emergence of a New Asset ClassA World Economic Forum Report, February 2011 NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    11. 11. Why Does this Matter?Individuals move across contexts. Contexts the Individual does not want linked (without their knowledge and consent). http://cmykern.com/?p=1112 NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    12. 12. Women having the freedom not to present as women.“James” is a women whoresorted to a male persona to Why James Chartrandget work as a copy editor.Originally she had presented Wears Women’sas herself, a woman,but wasunable to get copy editing Underpantsjobs. Faced with the need tofeed her family she resorted tocreate a male persona and thesite Men with Pens (http://menwithpens.ca/) and got lotsof good paying work. After 2years James “came out” aboutreally being a woman. http://www.copyblogger.com/james-chartrand-underpants/ NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    13. 13. 1. Live Journal Friends 2. Professional ID 1. Me linked to real name 3. Feminist Identity 2. Spiritual 3. Gaming 1. Totally Professional on Domain, GMail, LinkedIN 2. Social but me on Facebook 3. Spiritual under pseudonym on Live JournalReal examples of personae separation by womenattending my She’s Geeky conference. NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    14. 14. Religious Expression http://religions.iloveindia.com/buddhism.html Buddhist in Tennesseehttp://wwp.greenwichmeantime.com/time-zone/usa/tennessee/map.htm NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    15. 15. Ethnic and Racial Minorities http://www.hhs.state.ne.us/healthdisparities/MHfocusgroups.htm NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    16. 16. Sexual Minoritieshttp://en.wikipedia.org/wiki/Sexual_minority http://rowantinne.tripod.com/id28.htmlNSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    17. 17. Political Expression Personal Expression NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    18. 18. Medical IssuesFamily Issues http://huehueteotl.wordpress.com/2009/11/24/mental-health-32-times-more-cost-effective-at-increasing-happiness-than-money/ Mental Health Issues NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    19. 19. Goofy Habits or Hobbies Goofy Hobbies and HabitsNSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    20. 20. Freedom of ActionYoung people free to explore themselves Teachers being able to drink socially when on own time. Gammers: Blizzard WoW in game ID vs “RealID” change. NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    21. 21. People need tools to manage: • Contexts • Personae • Linking and data sharing • Control inferences made from data • Rights to use and share specific data • Allowing data to be a part of aggregate sets Business models and opportunities thatincentivize these capabilities are needed. NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    22. 22. The Value of Personal Data is High NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    23. 23. Today’s data brokers admit: “50% of our data is inaccurate. We don’t know which 50%.”NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    24. 24. World Economic Forum ReportPersonal Data: The Emergence of a New Asset Class 1) Innovate around user- centricity and trust.  2) Define global principles for using and sharing personal data. 3) Strengthen the dialogue between regulators and the private sector.  4) Focus on interoperability and open standards. 5) Continually share knowledge.  NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    25. 25. Types of Personal Data Personal data types in this diagram are drawn from the types identified in Rethinking Personal Data Pre-Read Document published by the World Economic Forum written by Marc Davis et al published in June, 2010. NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    26. 26. People are the only ethical integratorsof their own diverse data streams.NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    27. 27. From NSTICKey operational roles: • subjects • relying parties • identity providers • attribute providers • accreditation authorities Vision of Self Sustaining Ecosystem “will require new business models each of the service provider roles” My question: What about the individual’s (the subject’s) business model? NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    28. 28. We need business and market models for business agents thatwork on the users behalf. NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    29. 29. Personal Data Stores Banks Lockers Services Vaults Tools for individuals to manage their own information and collect their own data and get value from that in new markets. NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    30. 30. One example of a market model with user business agents. NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    31. 31. PDECS TA RT P U CI R CL E NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    32. 32. PDEC Open StandardsS TA RT P & Interoperability U CI R CL E Adoption of OAuth Data Representation JSON Considering Federated Social Web OStatus, Activity Streams Debates about semantic options and tools RDF, Linked Data, XRI/XDI Innovation to solve new things: TeleHash NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    33. 33. PDEC Legal InnovationS TA RT Information P U CI R CL E Sharing Work Group Owner Agreement Highlights • You Own Your Data. You contractually own all your data. • Data You Grant Access To Is Legally Protected. Personal will never share or use your data. Only you can grant access to your data or request access to data from others. • You Control Who Gets Access. Personal will never share or use your data. Only you can grant access to your data or request access to data from others • Take Your Data With You. You can easily export your data and permanently delete it from Personal. Trust Framework NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    34. 34. Some say people “don’t care”...... http://www.unisyssecurityindex.com/usi/usNSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    35. 35. PDEC Project 1: Exploring overall market models using Value NetworkIN D CO ST Mapping and Analysis. U LL AB R Y O R ATIV E Questions to be considered include: How personal data stores and services make money and not turn against the interest of the end user? NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    36. 36. PDECS TA RT Screen Shots P U CI R CL E NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM
    37. 37. PDECS TA RT Screen Shot P U CI R CL E
    38. 38. PDECS TA RT Screen Shot P U CI R CL E
    39. 39. PDECS TA RT Screen Shot P U CI R CL E 1) Innovate around user-centricity and trust.  2) Define global principles for using and sharing personal data. 3) Strengthen the dialogue between regulators and the private sector.  4) Focus on interoperability and open standards. 5) Continually share knowledge.
    40. 40. PDECS TA RT Screen Shot P U CI R CL E 1) Innovate around user-centricity and trust.  2) Define global principles for using and sharing personal data. 3) Strengthen the dialogue between regulators and the private sector.  4) Focus on interoperability and open standards. 5) Continually share knowledge.
    41. 41. PDECS TA RT Screen Shot P U CI R CL E 1) Innovate around user-centricity and trust.  2) Define global principles for using and sharing personal data. 3) Strengthen the dialogue between regulators and the private sector.  4) Focus on interoperability and open standards. 5) Continually share knowledge.
    42. 42. PDECS TA RT Screen Shot P U CI R CL E 1) Innovate around user-centricity and trust.  2) Define global principles for using and sharing personal data. 3) Strengthen the dialogue between regulators and the private sector.  4) Focus on interoperability and open standards. 5) Continually share knowledge.
    43. 43. PDECS TA RT Screen Shot P U CI R CL E 1) Innovate around user-centricity and trust.  2) Define global principles for using and sharing personal data. 3) Strengthen the dialogue between regulators and the private sector.  4) Focus on interoperability and open standards. 5) Continually share knowledge.
    44. 44. PDECS TA RT P U CI R CL E 1) Innovate around user-centricity and trust.  2) Define global principles for using and sharing personal data. 3) Strengthen the dialogue between regulators and the private sector.  4) Focus on interoperability and open standards. Screen 5) Continually share knowledge. Shot
    45. 45. PDECS TA RT P U CI R CL E 1) Innovate around user-centricity and trust.  2) Define global principles for using and sharing personal data. 3) Strengthen the dialogue between regulators and the private sector.  4) Focus on interoperability and open standards. Screen 5) Continually share knowledge. Shot
    46. 46. PERSONAL DATAECOSYSTEM CONSORTIUMKaliya HamlinExecutive Director (650) 260-4491director@personaldataecosystem.org Internet Identity Workshop #13 October 18-20 identitycommons ) identitywoman.net @identitywoman NSTIC Privacy Workshop, June 28, 2011 PERSONAL DATA ECOSYSTEM CONSORTIUM

    ×