TRUST:Team for Research in Ubiquitous Secure Technologies Social Science Dimensions, Pamela Samuelson, Law/SIMS, UC Berkeley NSF STC Review September 6, 2004

PRIVACY It is desirable for persons and organizations to able to maintain privacy and confidentiality interests in their data Can’t have privacy without meaningful security Fair information practices provide a regulatory framework that address many information privacy concerns, but they are sometimes difficult to map onto new technologies (e.g., sensor networks) Traditional focus has been on data custodian but advances in technology makes widening policy inquiry (e.g., datamining) important NSF STC Review December 26, 2018

KEY QUESTIONS What privacy rules, practices, & technologies promote better security? What level of security is necessary to promote privacy and confidentiality? How do we achieve appropriate levels of investment in security to ensure appropriate levels of actual security? When is necessary to access private information in order to provide security? What technical tools, legal policies, practices are necessary to control or monitor such access? NSF STC Review December 26, 2018

COLLABORATION Technologists and the policy analysts may be able to work together to find the right mix of technology and policy solutions Culler, Hellerstein, Wagner, Samuelson & Mulligan research (3 technologists, 2 lawyers) on sensor network privacy issues High tech clinic at Boalt worked with Berkeley Public Library to assess privacy implications of deployment of RFID technology, cooperation with EECS professor & grad student as well NSF STC Review December 26, 2018

PRIVACY-SENSITIVE IT May be possible to design privacy-sensitive information technology Encrypt PII so can only be used for one purpose Use authentication/access control systems Store data only where security can be strong Aggregate data to anonymize, hide mapping Don’t log or flush out data when no longer needed Give users ability to turn sensors off or provide detector devices or notice of sensor presence May be necessary to develop new laws or fair information practices for sensor networks to maintain privacy (e.g., require deployers to give notice if sensing PII) NSF STC Review December 26, 2018

INFORMATION POLICY Need for research to explore whether rules on electronic surveillance should be updated or otherwise changed and if so, why and how Electronic Privacy Communications Act was written decades ago, long before advanced IT networks and security technologies were deployed; ambiguities in law Policies favoring free flows of information and those favoring security and secrecy should be analyzed to ensure that restrictions are not greater than necessary and are directed at the right targets E.g., communities can’t assess vulnerabilities if they can’t/don’t share information about them (multidisciplinary research may aid formation of sound policy about disclosure policies) NSF STC Review December 26, 2018

OUTPUTS Research publications Conferences, workshops, other public meetings to discuss results Meetings with key industry leaders or associations about privacy-sensitive technology possibilities Possible proposed legislation or other policy recommendations NSF STC Review December 26, 2018