Privacy & Data Protection in the Digital World
Upcoming SlideShare
Loading in...5
×
 

Privacy & Data Protection in the Digital World

on

  • 777 views

Presented at: 2nd Annual Gulf Cooperation Council e-Participation & e-Governance Forum – Organised by: Abu Dhabi University Knowledge Group and UAE Telecommunications Regulatory Authority. ...

Presented at: 2nd Annual Gulf Cooperation Council e-Participation & e-Governance Forum – Organised by: Abu Dhabi University Knowledge Group and UAE Telecommunications Regulatory Authority.
9 – 11 September 2013 | Dusit Thani Hotel | Abu Dhabi | UAE.

Statistics

Views

Total Views
777
Views on SlideShare
751
Embed Views
26

Actions

Likes
1
Downloads
28
Comments
0

1 Embed 26

https://twitter.com 26

Accessibility

Categories

Upload Details

Uploaded via as Adobe PDF

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

Privacy & Data Protection in the Digital World Privacy & Data Protection in the Digital World Presentation Transcript

  • www.emiratesid.ae©2013EmiratesIdentityAuthority.Allrightsreserved P a r t n e r s i n B u i l d i n g U A E ' s S e c u r i t y & E c o n o m y Our Vision: Provide an integrated and advanced personal identity management system that contribute to the transformation of the government and the economy and promotes security and global competitiveness of the UAE. Privacy & Data Protection Presented by Dr. Ali M. Al-Khouri In: 2nd Annual Gulf Cooperation Council e-Participation & e-Governance Forum – Organised by: Abu Dhabi University Knowledge Group and UAE Telecommunications Regulatory Authority. 9 – 11 September 2013 | Dusit Thani Hotel | Abu Dhabi | UAE. Keynote Address in the Digital World
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved 9/3/2013 3 • Introduction • What is Data Privacy? Why Do We Need Data Protection? • Data Privacy Laws & Practices • Data Privacy in UAE • Government Role in Data and Privacy Protection • Concluding Remarks Agenda
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved 9/6/2013 4 Agenda • Introduction • What is Data Privacy? Why Do We Need Data Protection? • Data Privacy Laws & Practices • Data Privacy in UAE • Government Role in Data and Privacy Protection • Concluding Remarks
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved • Explosive growth of computers & information technology .. • Impact? • Opportunities, challenges and problems .. • Data/Information Age? Introduction
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved every day, we create 2.5 quintillion bytes of data 2,500,000,000,000,000,000! Data Explosion? of the data in the world today has been created in the last two years!
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Expectations of Privacy but Compromising Technologies
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved 9/6/2013 8 Agenda • Introduction • What is Data Privacy? Why Do We Need Data Protection? • Data Privacy Laws & Practices • Data Privacy in UAE • Government Role in Data and Privacy Protection • Concluding Remarks
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Privacy? A Matter of Perceptions and Expectation What does it really mean?
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Privacy? A Matter of Perceptions and Expectation Ability to control the dissemination and use of one’s personal information? What does it really mean?
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Data Privacy? 9/4/2013 11 .. deals with the relationship between collection and dissemination of personal information .. .. that can lead to identification and private details of a person.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Data Privacy? 9/5/2013 12 .. deals with the relationship between collection and dissemination of personal information .. .. that can lead to identification and private details of a person. Our digital interactions leave a huge trail of data leaving behind bits and pieces of us with pointers to our real behaviour.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved What is Data Privacy? 9/5/2013 13
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved What is Data Privacy? 9/5/2013 14
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Roles of Entities in Data Protection 9/3/2013 15
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Roles of Entities in Data Protection 9/3/2013 16 … generally, a legal entity that regulates data collection, storage and transmission and acts to provide necessary protection to data provider ensuring the agreed-levels privacy. .. “authorized” entity to collect personal data & compile personal information .. entity who willfully provides data to data collector. .. entity who transmits data to other collectors or users of the data
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Roles of Entities in Data Protection 9/8/2013 17 .. though may not be mandatory in many countries to be a specific entity, the responsibility of providing data protection lies with service providers and law institutions like the courts could provide required legal protection. e.g., banks, credit card companies, health providers, insurance provider, government, service providers, retailers etc… e.g., Internet service providers, telecom providers, mobile service providers, internal networks, etc. e.g., credit bureau, trust centres, etc.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved • interactions, transactions, communications, sought to be analyzed for bringing commercial entities closer to the psyche of the individual (knowing customers –personalising services and products). Digital Behaviour and Identity Construction?
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Why Data is important?
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved “Data-driven innovation,” will help to create 4.4 million information technology (IT) jobs globally by 2015, including 1.9 million in the United States (US) Big data has potential to create massive saving and revenues in all sectors: • create $300 billion in potential annual value to U.S. healthcare; • €250 billion potential annual value to Europe’s public sector administration; and • $600 billion in potential annual consumer surplus from using personal location data globally. Value and Opportunities?
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved 9/6/2013 21 Agenda • Introduction • What is Data Privacy? Why Do We Need Data Protection? • Data Privacy Laws & Practices • Data Privacy in UAE • Government Role in Data and Privacy Protection • Concluding Remarks
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Data Protection: Global Practices 9/3/2013 24 The heat map here depicts the global trends of privacy and adequacy of data protection provisions in the world.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Parameters of Categorization 9/3/2013 25 Types of personal data covered in data privacy legislation legal obligations placed on public and private organizations Existence of legislation preventing data transfers with adequate data protection regulation attainment of EU official Adequacy standard for data protection & privacy ability to enforce data privacy regulations through an independent agency Legislative & cultural barriers limiting government surveillance over communications. Constitutionally- backed data privacy laws.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Data Protection: Global Practices 9/3/2013 26 EU provides highest restriction on data use, and privacy protection South Korea, highest in East. Middle East prominent in not providing adequate legislation, with exception to UAE and Qatar.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Governments Enacting Privacy and Protection Laws 9/3/2013 27 .. basis of privacy laws in each of the EU member states.. enforced and legally binding to all institutions involved in the handling of personal information strongest and the strictest enactment in the world .. strong proponent of privacy protection with a Federal Privacy act since 1998 No specific laws.. national security.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved 9/6/2013 28 Agenda • Introduction • What is Data Privacy? Why Do We Need Data Protection? • Data Privacy Laws & Practices • Data Privacy in UAE • Government Role in Data and Privacy Protection • Concluding Remarks
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Data Protection in UAE
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Breaches of privacy can result in severe penalties, which include fines, incarceration, and even deportation. covers web transactions and cyber crimes that seek to protect individual privacy Right to Privacy is Constitutional in UAE data collection & transmission
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Breaches of privacy can result in severe penalties, which include fines, incarceration, and even deportation. covers web transactions and cyber crimes that seek to protect individual privacy Right to Privacy is Constitutional in UAE data collection & transmission Personal information privacy is adequately provided for within the legal framework in UAE. However, there is no single authority or entity that constitutes a data privacy protection or information protection officer.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved “You have zero privacy. Get over it.” Scott McNealy, CEO, Sun Microsystems. January 25, 1999 Erosion of Privacy
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved 9/6/2013 34 Agenda • Introduction • What is Data Privacy? Why Do We Need Data Protection? • Data Privacy Laws & Practices • Data Privacy in UAE • Government Role in Data and Privacy Protection • Concluding Remarks
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Modern Identity Management Systems Intense role of Government issued personal identity as unique national ID.. providing required privacy in anonymity and yet provide meaningful data for authentication.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved The Digital Identity provides the perfect PROXY for the personal identity. Personal ID and UAE National ID
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Emirates ID provide necessary credential verification on the web Trust Establishment
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Individual Authentication Service Provider Emirates ID ID card credentialsremain anonymous Digital certificates & biometrics are used to perform credential verification. Anonymous Identity The individuals would be known and authenticated as genuine persons by the National Identity Authority providing a THIRD PARTY authentication for the identity.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Individual Authentication Service Provider Emirates ID ID card credentials Government do not share personal data with servicer providers, but provide only credential verification. (AUTH AS A SERVICE) Service Providers Thus, service providers can identify the potential service seeker securely from the authentication provided by the Emirates ID Authority.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Individual Authentication Emirates ID ID card credentials Channel Service Provider • Internet • Mobile • Counter • IVR • Etc. Electronic Channels Government Identity Management Infrastructure support different communication platforms
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Individual Authentication Service Provider Emirates ID credentials An individual will then be able to transact and interact freely without compromising his/her personal identity. Anonymous Identity
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved UAE National ID and Privacy • All data is treated as personally identifiable and subjected to the regulatory framework. • Emirates ID Authority would provide this regulatory framework to ensure identity protection. • Technical and Technology Solutions are already in place to support the regulatory and legal framework.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved 9/6/2013 45 Agenda • Introduction • What is Data Privacy? Why Do We Need Data Protection? • Data Privacy Laws & Practices • Data Privacy in UAE • Government Role in Data and Privacy Protection • Concluding Remarks
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Conclusion Data security and privacy will remain an issue in light of evolving technologies and increasing take-ups. Although regulation is crucial, the issue of privacy vs. legislation will still be a riddle! chicken and egg conundrum.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved Knowledge-based Economy • Privacy laws: enabler or the barrier? • Presence of a dedicated privacy protection agency. • Need for more education programs, to raise awareness among citizens. • Enforcement capabilities to ensure compliance. • International collaboration.
  • www.emiratesid.ae © 2013 Emirates Identity Authority. All rights reserved THANK YOU. Dr. Ali M. Al-Khouri Director General | Emirates Identity Authority | UAE ali.alkhouri@emiratesid.ae | www.emiratesid.ae Read our recent research from: http://www.emiratesid.gov.ae/ar/media-center/publications.aspx