“Zero Risk Does Not Exist”
Privacy Rights in the Digital Era was the headline theme for this event. The Institute for Humane Studies co-sponsored the event with the Program on Economics & Privacy at George Mason University. This was a half-day seminar on January 3, 2019, in Atlanta, Georgia, preceding the American Economic Association Annual Meeting. Scholars and policy experts discussed “the growing debate regarding ownership of personal information when synced with an online service.” The goal: “To provide a greater understanding of the academy’s role in fostering privacy policies which are responsive to credible threats, but do not obstruct a wide range of research contributing to the benefit of consumers and industries alike.”
Privacy Analytics’ Chief Methodologist Luk Arbuckle was an invited speaker. He provides his insights.
What was The Big Idea?
“The discussions addressed the convergence of Big Data, Economic Growth, and New Consumer Privacy Regulations. The panel I was on, focused on evidence-driven versus theoretical approaches to evaluate different types of disclosure risk. The big idea was, ‘How do we explain risk’?
This idea provoked a number of questions. If zero risk does not exist, then how do we define what is ‘acceptable’ risk? How do we explain when and why it is acceptable? Why is it important to know in business terms, in legal terms and in ethical terms? Because each of these contexts changes the definition.”
Fig.1 Risk measurement:privacy vs. utility. Author, Luk Arbuckle, Privacy Analytics
Who was The Audience?
“The Institute for Humane Studies (IHS), founded in 1961 by Dr. F. A. “Baldy” Harper, a former economics professor at Cornell University, and now associated with George Mason University in Fairfax, Virginia, focuses on connecting scholars to opportunities to inform policy debates. The attendees were principally economists and lawyers from all over the United States. They are concerned with economics of privacy, given the impact of legislation such as GDPR and CCPA. Economists who use data may also be affected by changes in methodology as a residual effect of legislation.”
What value did Privacy Analytics bring to the event?
“As a speaker on the panel ‘Privacy Rights in the Digital Era’, I explored different options for de-identification of data. It’s all about finding the balance between utility and privacy, while being evidence-based. I was able to communicate the message of understanding the value of these different methods, and to reinforce Privacy Analytics’ position as a trusted advisor. Simply put, we will look at your use cases and flows, and tell you the pros and cons of the approaches you are considering for your organization.”
Luk Arbuckle is the co-author with Privacy Analytics’ CEO Dr. Khaled El Emam of “Anonymizing Health Data: Case Studies and Methods to Get You Started” (O’Reilly Media, updated 2014)
Mr. Arbuckle was formerly Director of Technology Analysis at the Office of the Privacy Commissioner of Canada; Research Manager and Data Scientist at the Children’s hospital of Eastern Ontario (CHEO) Research Institute; and Director of Analytics at Privacy Analytics. He holds multiple graduate degrees and was awarded numerous scholarships and bursaries, including a Canada Graduate Scholarship doctoral award. He is a featured speaker at data privacy conferences worldwide, including MIT CDOIQ 2018 and the International Conference of Data Protection and Privacy Commissioners (ICDPPC) Brussels, Belgium.
You might also like:
Webinar: Good is Not Good Enough
Good Is Not Good Enough: A Conversation With Global Data Privacy Expert Dr. Ann Cavoukian Why organizations need Best Practice…
The Debate on Data Collection and Ethics: ICDPPC Brussels 2018
Data Privacy Frontline Report from the 40th International Conference of Data Protection and Privacy Commissioners (ICDPPC) Brussels, Belgium …
How to become a data de-identification expert: learn with HITRUST and Privacy Analytics
“As more stringent data protection laws are put in place, it becomes increasingly important to be able to de-identify data…
- Turn Data Assets into Business Opportunity Under CCPADecember 19, 2019
- How does risk-based anonymization work?December 18, 2019
- Why should I use Expert Determination over Safe Harbor?December 18, 2019
- What do I need to know about GDPR, HIPAA and CCPA to meet our regulatory and privacy obligations?December 18, 2019
- Should we invest in building our own de-identification capability?December 17, 2019
- GDPR and The Future of Clinical Trials Data SharingMarch 18, 2019
- Advancing Principled Data Practices in Support of Emerging TechnologiesMarch 15, 2019
- “Zero Risk Does Not Exist”February 7, 2019
- Is Anonymization Possible with Current Technologies?January 9, 2019
- Comparing the benefits of pseudonymisation and anonymisation under the GDPRDecember 20, 2018