“Zero Risk Does Not Exist”

“Zero Risk Does Not Exist”

A Data Privacy Frontline Report

Privacy Rights in the Digital Era was the headline theme for this event.  

The Institute for Humane Studies co-sponsored the event with the Program on Economics & Privacy at George Mason University. This was a half-day seminar on January 3, 2019, in Atlanta, Georgia, preceding the American Economic Association Annual Meeting. Scholars and policy experts discussed “the growing debate regarding ownership of personal information when synced with an online service.” The goal: “To provide a greater understanding of the academy’s role in fostering privacy policies which are responsive to credible threats, but do not obstruct a wide range of research contributing to the benefit of consumers and industries alike.”

Privacy Analytics’ Chief Methodologist Luk Arbuckle was an invited speaker. He provides his insights.

What was the big idea?

“The discussions addressed the convergence of Big Data, Economic Growth, and New Consumer Privacy Regulations. The panel I was on, focused on evidence-driven versus theoretical approaches to evaluate different types of disclosure risk. The big idea was, ‘How do we explain risk’?

This idea provoked a number of questions. If zero risk does not exist, then how do we define what is ‘acceptable’ risk? How do we explain when and why it is acceptable? Why is it important to know in business terms, in legal terms and in ethical terms? Because each of these contexts changes the definition.”

zero-risk-fig-1

Fig.1  Risk measurement:privacy vs. utility. Author, Luk Arbuckle, Privacy Analytics

Who was The Audience?

“The Institute for Humane Studies (IHS), founded in 1961 by Dr. F. A. “Baldy” Harper, a former economics professor at Cornell University, and now associated with George Mason University in Fairfax, Virginia, focuses on connecting scholars to opportunities to inform policy debates. The attendees were principally economists and lawyers from all over the United States. They are concerned with economics of privacy, given the impact of legislation such as GDPR and CCPA. Economists who use data may also be affected by changes in methodology as a residual effect of legislation.”

What value did Privacy Analytics bring to the event?

“As a speaker on the panel ‘Privacy Rights in the Digital Era’, I explored different options for de-identification of data. It’s all about finding the balance between utility and privacy, while being evidence-based. I was able to communicate the message of understanding the value of these different methods, and to reinforce Privacy Analytics’ position as a trusted advisor. Simply put, we will look at your use cases and flows, and tell you the pros and cons of the approaches you are considering for your organization.”

Luk Arbuckle

Co-author with Privacy Analytics' CEO Dr. Khaled El Emam of "Anonymizing Health Data: Case Studies and Methods to Get You Started" (O'Reilley Media, updated 2014)

Mr. Arbuckle was formerly Director of Technology Analysis at the Office of the Privacy Commissioner of Canada; Research Manager and Data Scientist at the Children’s hospital of Eastern Ontario (CHEO) Research Institute; and Director of Analytics at Privacy Analytics. He holds multiple graduate degrees and was awarded numerous scholarships and bursaries, including a Canada Graduate Scholarship doctoral award. He is a featured speaker at data privacy conferences worldwide, including MIT CDOIQ 2018 and the International Conference of Data Protection and Privacy Commissioners (ICDPPC) Brussels, Belgium.

For more on the data privacy and ethics debate, watch Luk Arbuckle’s Executive Conversation with global privacy expert Dr. Ann Cavoukian:

Archiving / Destroying

Are you unleashing the full value of data you retain?

Your Challenges

Do you need help...

OUR SOLUTION

Value Retention

Client Success

Client: Comcast

Situation: California’s Consumer Privacy Act inspired Comcast to evolve the way in which they protect the privacy of customers who consent to share personal information with them.

Evaluating

Are you achieving intended outcomes from data?

Your Challenge

Do you need help...

OUR SOLUTION

Unbiased Results

Client Success

Client: Integrate.ai

Situation: Integrate.ai’s AI-powered tech helps clients improve their online experience by sharing signals about website visitor intent. They wanted to ensure privacy remained fully protected within the machine learning / AI context that produces these signals.

Accessing

Do the right people have the right data?

Your Challenges

Do you need help...

OUR SOLUTION

Usable and Reusable Data

Client Success

Client: Novartis

Situation: Novartis’ digital transformation in drug R&D drives their need to maximize value from vast stores of clinical study data for critical internal research enabled by their data42 platform.

 

Maintaining

Are you empowering people to safely leverage trusted data?

Your Challenges

Do you need help...

OUR SOLUTION

Security / compliance efficiency

CLIENT SUCCESS

Client: ASCO’s CancerLinQ

Situation: CancerLinQ™, a subsidiary of American Society of Clinical Oncology, is a rapid learning healthcare system that helps oncologists aggregate and analyze data on cancer patients to improve care. To achieve this goal, they must de-identify patient data provided by subscribing practices across the U.S.

 

Acquiring / Collecting

Are you acquiring the right data? Do you have appropriate consent?

Your Challenge

Do you need help...

OUR SOLUTIONS

Consent / Contracting strategy

Client Success

Client: IQVIA

Situation: Needed to ensure the primary market research process was fully compliant with internal policies and regulations such as GDPR. 

 

Planning

Are You Effectively Planning for Success?

Your Challenges

Do you need help...

OUR SOLUTION

Build privacy in by design

Client Success

Client: Nuance

Situation: Needed to enable AI-driven product innovation with a defensible governance program for the safe and responsible use
of voice-to-text data under Shrems II.

 

Join the next 5 Safes Data Privacy webinar

This course runs on the 2nd Wednesday of every month, at 11 a.m. ET (45 mins). Click the button to register and select the date that works best for you.