1. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 1 Fair Information Practices September 11, 2007

2. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 2 Homework 1 discussion Collage Privacy in the news Web cams Under what definition or conceptions of privacy do these web cams raise privacy concerns? What arguments might be made to allow such cameras despite these concerns? What legal or technological mechanisms might be put in place to reduce the privacy risks associated with public web cams without removing the web cams altogether? Privacy in art, literature, advertising, or pop-culture Any questions about bibliographies or plagiarism?

3. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 3 Using Library Resources

4. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 4 CMU Libraries (http://www.library.cmu.edu) http://www.library.cmu.edu Engineering and Science (a.k.a. E&S) Location: Wean Hall, 4 th floor Subjects: Computer Science, Engineering, Mathematics, Physics, Science, Technology Hunt (CMU’s main library) Location: Its own building (possibly 2 nd ugliest on campus behind Wean), between Tepper and Baker Subjects: Arts, Business, Humanities, Social Sciences Software Engineering Institute (a.k.a. SEI) Location: SEI Building (4500 Fifth Avenue), 3 rd floor Subjects: Security, Software, Technology Research and Communication Skills

5. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 5 START HERE: Cameo Cameo is CMU’s online library catalog http://cameo.library.cmu.edu/ Catalogs everything CMU has: books, journals, periodicals, multimedia, etc. Search by key words, author, title, periodical title, etc. Research and Communication Skills

6. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 6 CAMEO: Search Result for “Cranor” Number of copies and status Library

7. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 7 CAMEO: Search Result for “Solove” Due date

8. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 8 If it’s not in Cameo, but you need it today: Local Libraries Carnegie Library of Pittsburgh Two closest locations  Oakland: Practically on campus (4400 Forbes Ave.)  Squirrel Hill: Forbes & Murray (5801 Forbes Ave.) http://www.carnegielibrary.org/index.html University of Pittsburgh Libraries 16 libraries! Information science, Engineering, Law, Business, etc. http://pittcat.pitt.edu/ Research and Communication Skills

9. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 9 If it’s not in Cameo, and you can wait: ILLiad and E-ZBorrow ILLiad and E-ZBorrow are catalogs of resources available for Interlibrary Loan from other libraries nationwide (ILLiad) and in Pennsylvania (E-ZBorrow) Order items online (almost always free) Wait for delivery – average 10 business days Find links to ILLiad and E-ZBorrow online catalogs at http://www.library.cmu.edu/Services/ILL/ http://www.library.cmu.edu/Services/ILL/ Research and Communication Skills

10. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 10 Other Useful Databases Links to many more databases, journal collections Must be accessed on campus or through VPN http://www.library.cmu.edu/Search/AZ.html Lexis-Nexis Massive catalog of legal sources – law journals, case law, news stories, etc. IEEE and ACM journal databases IEEE Xplore and ACM Digital Library INSPEC database Huge database of scientific and technical papers JSTOR Arts & Sciences, Business, Mathematics, Statistics Research and Communication Skills

11. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 11 And of course… Reference librarians are available at all CMU libraries, and love to help people find what they need – just ask! Research and Communication Skills

12. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 12 Writing a Literature Review

13. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 13 Writing a literature review What is a literature review? A critical summary of what has been published on a topic  What is already known about the topic  Strengths and weaknesses of previous studies Often part of the introduction or a section of a research paper, proposal, or thesis A literature review should be organized around and related directly to the thesis or research question you are developing synthesize results into a summary of what is and is not known identify areas of controversy in the literature formulate questions that need further research Dena Taylor and Margaret Procter. 2004. The literature review: A few tips on conducting it. http://www.utoronto.ca/writing/litrev.html http://www.utoronto.ca/writing/litrev.html Research and Communication Skills

14. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 14 Literature review do’s and don’ts Don’t create a list of article summaries or quotes Do point out what is most relevant about each article to your paper Do compare and contrast the articles you review Do highlight controversies raised or questions left unanswered by the articles you review Do take a look at some examples of literature reviews or related work sections before you try to create one yourself For an example, of a literature review in a CS conference paper see section 2 of http://cs1.cs.nyu.edu/~waldman/publius/paper.html http://cs1.cs.nyu.edu/~waldman/publius/paper.html Research and Communication Skills

15. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 15 Homework 2 http://cups.cs.cmu.edu/courses/privpolawte ch-fa07/hw/hw2.html http://cups.cs.cmu.edu/courses/privpolawte ch-fa07/hw/hw2.html

16. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 16 Privacy terminology Data subject Data controller Secondary use of data

17. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 17 OECD fair information principles http://www.datenschutz- berlin.de/gesetze/internat/ben.htm Collection limitation Data quality Purpose specification Use limitation Security safeguards Openness Individual participation Accountability

18. Privacy Policy, Law and Technology Carnegie Mellon University Fall 2007 Lorrie Cranor http://cups.cs.cmu.edu/courses/privpolawtech-fa07/ 18 US FTC simplified principles Notice and disclosure Choice and consent Data security Data quality and access Recourse and remedies US Federal Trade Commission, Privacy Online: A Report to Congress (June 1998), http://www.ftc.gov/reports/privacy3/ http://www.ftc.gov/reports/privacy3/