© 2007 The MITRE Corporation. MITRE Privacy Practice W3C Government Linked Data Working Group Michael Aisenberg, Esq. 29 June 2011 Predicate for Privacy : Overview of Privacy considerations in Linked Data Environment

© 2007 The MITRE Corporation. MITRE Privacy Practice Privacy Primer 1: What is Privacy ?

© 2007 The MITRE Corporation. MITRE Privacy Practice Privacy Primer 2: Policy Framework n OECD: “Fair Information Practice Principles” n EU: Data Protection Directive: citizens “own” their PII –Data Protection Authority n U.S.: Distinguish Obligations by Identity of Collector of Data –Government: Privacy Act of 1974, 1976, 2002 Amendments n Privacy and Security: FISMA n All data collections “Systems of Records” –Special treatment of individuals’ data in sectors n Children: COPPA n Health Information: HIPAA n Banking/Financial Service Information: Sarbanes/Oxley n Global presence of U.S. collectors: EU Safe Harbor Agreement n Duty of custodial control by collector –“Data Breech” legislation

© 2007 The MITRE Corporation. MITRE Privacy Practice Privacy Primer 3: When do Privacy Act obligations apply ? 4

© 2007 The MITRE Corporation. MITRE Privacy Practice Privacy Primer 4:Core Privacy Principles* (Based on Fair Information Practices, foundation for the Privacy Act of 1974) PRINCIPLEMEANS Notice Provide clear information to subject about the agency’s collection and intended use of PII Choice Provide individuals with the ability to consent to the collection and use of their PII Limitation Ensure that minimal necessary PII is collected, used, disclosed, and retained for stated purposes Accuracy Ensure that individuals are treated fairly, based on PII that is correct Access and Redress Provide individuals with the ability to review the PII held about them, correct it, and challenge agency’s compliance with stated privacy practices Security Protect systems against inappropriate access and data disclosure and poor integrity of PII 5 *Based on information at

© 2007 The MITRE Corporation. MITRE Privacy Practice Background Information/Deeper Dive

© 2007 The MITRE Corporation. MITRE Privacy Practice Privacy Issues (1): Policy n Scope of consent –Consistency between avowed purpose as disclosed to subject and actual use –Use beyond scope as disclosed n Problem areas: ­Law enforcement ­Intelligence/counter-terrorism ­Minimization: least data necessary to accomplish agency’s purpose n “Routine uses” –Recognized, permissible “exceptions” to disclosed intended use n Share with congress, OMB: program oversight, often anonymized n Law enforcement/intelligence: by law, need NOT be disclosed if for specific investigation of an individual ­Grey area: routine sharing with LE/Intel for analytical, statistical purposes –The “exception” which threatens to consume the Rule….

© 2007 The MITRE Corporation. MITRE Privacy Practice Privacy Issues (2): Architecture

© 2007 The MITRE Corporation. MITRE Privacy Practice Emerging approaches to Controlling Data ”collection abuse” n Technical capacity to identify subjects of collection; e.g. n Meta tagging of ALL PII data fields ? n “Record locator” identifier for each collected record ? n Other options ? n System Design: Precursor: Common lexicon/uniform structure for data fields, critical PII data elements: n E.g. Name, D-O-B, Country of Birth/Citizenship/Origin n Cheat-sheet/template for foreign passports, other credential systems (ICAO badges) n How to enforce multi-laterally ? ­Rely on multi-jurisdictional vendors (e.g.—IBM, Siemens, Barclays) n Deployment Candor: What are the intended uses of data: what does agency REALLY intend to do with the data ? –Data matching systems; TTIC –Why ? Accurate “scope” information in required disclosures and informed consent to be obtained from subjects ?