1. Social Construction of Privacy Cultural considerations Socio-economic differences Real space vs. cyberspace Privacy as a claim, entitlement, or right Depends on context

2. Definitions of Privacy (adapted from Val Steeves in Mediascapes, 2006) Warren & Brandeis, 1890, the “right to be left alone.” Use of news photography in newspapers…new disruptions in social boundaries (Carolyn Marvin) “the right to enjoy private space”: House of Commons, SC on Human Rights and the Status of Persons with Disabilities

3. Four Ways of Looking at Privacy As a human right As an essential part of the democratic process As a social value As data protection

4. Privacy as a Human Right Essential aspect of human dignity and autonomy Right to privacy linked to the development of international human rights legislation… Post WWII, response to Nazism--UN Declaration of Human Rights (1948), Art. 12: “no one shall be subjected to arbitrary interference with his privacy, family, home or correspondence” Canada: original signatory of UN Dec., 1976 ratified International Covenant on Civil and Political Rights

5. In Canada -- is privacy a human right? Patchy Canadian Charter of Rights and Freedoms does not include express right Courts have ruled for “reasonable expectation” of privacy (R. v. Duarte, 1990). In digital world, what is reasonable expectation?

6. Privacy as a democratic value Individual freedom and autonomy Intrinsic to citizenship Tension now: risk society (or paranoid society?) How do digital technologies weaken our sense of community, communication, democracy- and privacy?

7. Privacy as a Social Value Consider our own sense of personal proxemics… We need to be able to control and define our relationships with others and the state Surveillance can endanger our sense of trust With globalization how has our sense of intimacy changed? In large urban centres? In small communities?

8. Privacy as Data Protection Changes in technology created new conception of protecting personal privacy, e.g. from paper-based systems to databases to inter-networked global internet systems Issues of data mining and cross-compilation across diverse databases

9. Council of Europe: 1980 Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data Framework for collection, use, access, accuracy, and disposal of personal information Cultural constructs - Europeans more sensitive of the need to protect personal information from governments and individuals in light of WWII

10. OECD - Guidelines Governing the Protection of Privacy and Transborder Data Flows of Personal Data, 1980 Fair information practices included: data protection Disclosure for purpose of data collection Prove relevance of data collection Ensure data is accurate, high quality Procure security safeguards against unauthorized data access Use data only for purposes for which it is collected Establish open policies re: nature of data and how it is stored Collector of data must be accountable for its collection and use

11. The commodification of personal information and data >>Metaphors: panopticon, popularized by Foucault and Gandy’s ‘panoptic sort’ >>How has privacy become commodified and implicated in our everyday lives? >>How are marketing and the capitalist system implicated in creating this ‘panoptic sort’?

12. Internet and Privacy How has the internet exacerbated the collection of personal information? Cookies and user profiles - useful or privacy destructive? Appropriate use? Case of DoubleClick…, SNS, third party marketing

13. EU Directive on Data Protection Requires that member countries adopt or adapt national data protection laws by 1998 Proposes limitation Data quality Transparency Security Rights of access Restrictions on transfer http://www.cdt.org/privacy/eudirective/

14. Restrictions on Transfer… Are complicated…national distinctions and legislation vary…will other countries be able to adequately meet needs of directive for continued trade etc. with EU? Directive also says that companies must show what personal information they are collecting about someone… U.S. Safe Harbor plan allows for a minimum level of compliance

15. Safe Harbor… Why is information being collected? How will personal information be disclosed to third party? Provide access to data with ability to correct or amend Ensure data integrity Allow for mechanisms for ensuring compliance

16. Privacy in Canada We have no explicit constitutional right to privacy, but…. Sections 7, 8, and 10 of the The Canadian Charter of Rights and Freedoms have been interpreted by courts to contain some privacy rights… However, Charter does not apply to private sector, only governments Privacy legislation rooted in language of the marketplace

17. Quebec’s Constitutional Privacy Protection Art. 5 of Quebec Charter of Human Rights and Freedoms (1975)-respect for private life Civil Code amendment of 1987-respect of individual privacy Quebec’s Act respecting access to documents….- individual right to access to personal and non-p info held by levels of governments… Act Respecting Protection of Personal Information in Private Sector (1994)

18. Privacy Act (1982) Regulates collection, use, disclosure and disposal of personal information held by government/public sector Does not apply to private companies-e. eg., telecom, insurance, banks, broadcasting Deals only in data No penalties for violation

19. Canadian Standards Association Model Code for Protection of Personal Information (1996) Provides principles for management of private information Specifies minimum requirements for adequate protection of personal information held by organizations Increases awareness of protection of personal information Provides standards for measurement of personal information by international community

20. Privacy Protection Codes Voluntary codes Industry and private sector companies Canadian Bankers Assoc. brought code into line with Canadian Standards Association Code (CSA) Are voluntary models adequate? “suffers from perception that individual’s privacy rights are in hands of those who have the most to gain from the processing of personal data” (Colin Bennett)

21. Information Highway Advisory Council Policies (1995-7) E-commerce led: consumer privacy and security, building trust online to get people to $hop Balance is between busine$$ needs and protection of personal information

22. House of Commons Report re Privacy Looks at privacy as a social good, a common good A fundamental human right Privacy a balancing act between competing interests Delineates ethical blueprint of core privacy principles (personal space, personal communications, of information, physical privacy, freedom from surveillance) Later, Privacy Rights Charter, see http://www.parl.gc.ca/37/1/parlbus/chambus/senate/ bills/public/S-21/S-21_1/S-21_text-e.htm http://www.parl.gc.ca/37/1/parlbus/chambus/senate/ bills/public/S-21/S-21_1/S-21_text-e.htm

23. PIPEDA-Personal Information Protection & Electronic Documents Act (2001) Code of fair information practices for business Related to collection, use and disclosure of personal information Consensus of a variety of stakeholders Onus on Privacy Commissioner of Canada

24. PIPEDA Balance: commercial rights vs. individual rights Is business compliance a nightmare? Are voluntary codes sufficient? Can it improve consumer confidence (e.g, with e- commerce?) http://www.parl.gc.ca/36/2/parlbus/chambus/hou se/bills/government/C-6/C-6_3/90052bE.html

25. Tensions with PIPEDA Privacy for consumer rights Privacy issues are trade issues See selected cases at Privacy Commissioner of Canada…www.privcom.gc.ca

26. Crypto Policy PKI or public key infrastructure-digital signature stuff Encryption technology Who controls the keys? Tensions between government and individuals Fear of criminal activity

27. PETs and Privacy Smart cards Biometric encryption CCTC or CCTV Electronic Monitoring Genetic Testing

28. Hot Topics in Privacy Datamining Health Privacy Efficacy of PETs Workplace privacy and surveillance Children’s privacy - COPPA(US) http://www.cdt.org/legislation/105th/privacy/cop pa.htm Surveillance post 9/11: US PATRIOT ACT, Public Safety Act, Canada report on biometrics…s

29. Conclusion: Privacy as a Common Good Priscilla Regan Looks at cyberspace as ‘commons’ Who owns information? Information ‘ecosystem’ Tension between private good vs. common good

30. Privacy Rights Advocates and Activist PI Groups EPIC: www.epic.orgwww.epic.org PIAC: www.piac.cawww.piac.ca Privacy International: www.privacyinternational.orgwww.privacyinternational.org EFF: www.eff.orgwww.eff.org CPSR: www.cpsr.orgwww.cpsr.org GILC: www.gilc.orgwww.gilc.org CIPPIC: www.cippic.cawww.cippic.ca And government (federal, provincial privacy commissions)