Information Systems 365 September 23, 2008 Information Privacy
Overview• Assignment #1…You are quite good writers!• Short Lecture• Video “Spying on the Home Front”• Distribution of Assignment #2
Reese’s Peanut Butter CupsCreated in 1928 byHarry Burnett Reese,A former dairy farmerand shipping foremanfor Milton S. Hershey
Information PrivacyData privacy is therelationship betweencollection and disseminationof data, the expectation ofconfidentiality, andassociated legal issues
Encryption• One of the core information security tools used to ensure information privacy• As you watch the video, think about how the power of encryption can be both beneficial as well as detrimental, depending on the situation
Think of These Things Are They Protected Well Enough?• Healthcare records• Criminal justice investigations and proceedings• Financial institutions and transactions• Biological traits, such as genetic material• Residence and geographic records• Ethnicity
Encryption -- Privacy Enhancing Technology• Any technology which increases control over personal data (PET)• Why do people have an aversion to using PETs?
Costs• Additional hardware, additional software licenses• Personnel costs for designing, developing, implementing, testing and deploying the privacy enhanced service, operating and maintaining the privacy enhanced service• Costs for training customer support
Time Spent and Vulnerability• Fixing additional system failures or problems due to increased system complexity (more functionality means higher complexity which leads to higher vulnerability)• Product management of the additional privacy enhancing functions (more functions require more time spent to manage them)
Benefits of PETs• Increased usage of online services by existing customers and increased number of new customers due to higher trust in the service• Stronger public image for your company• Competitive advantage
Things to Think About• Based on what you learn from the video, how important do you think PETs will be to individuals, businesses, the government and criminals in the near future?• As the new CIO of a major corporation, how would you address information privacy in light of the changes in government policy since 9/11?