Paper Summary: |
This paper develops six privacy principles to guide system design, including: notice, choice and consent, proximity and locality, anonymity and pseudonymity, security, and access and recourse. The author cites four reasons that privacy in ubiquitous applications deserves additional attention: ubiquity, invisibility, sensing and memory amplification. In a world where computers, unknown to us, can sense and record information about us at any time, anywhere, privacy becomes a significant issue.
Each of the six guidelines is described below:
- Notice . Users must receive notice of being monitored and must have a choice. Systems that effectively only allow one choice are not really a choice at all.
- Choice and Consent.
- Anonymity and Pseudonymity. Users should have the choice to remain anonymous or assume a pseudonym in order to benefit from personalization services.
- Proximity and Locality. When notice, consent, and anonymity prove too difficulty, proximity may be a way to preserve privacy. The concept of proximity would allow a smart device to record actions, whenever the owner is present. Locality would prevent information from being shared outside of a specified area. (This would ensure that information obtained in a company building would stay in the building.)
- Adequate Security. The author believes that security and encryption of data is important but looks at how ubiquitous applications present new challenges.
- Access and Recourse.
|