1. Copyright 2010 1 Roger Clarke, Xamax Consultancy, Canberra Visiting Professor in Computer Science, ANU and in Cyberspace Law & Policy, UNSW Chair, Australian Privacy Foundation, 2006-10 Member, Advisory Board, Privacy International, 2000- Human Choice & Computers Brisbane, 21 September 2010 http://www.rogerclarke.com/DV/CSSD {.html,.ppt} Civil Society Must Publish Standards Documents

2. Copyright 2010 2 Civil Society Standards Documents Agenda Standards Documents The Politics of Standards Exemplars CCTV PPS eMarketing Benefits Prospects

3. Copyright 2010 3 Origins of Standards Documents International Telecommunications Union (ITU, since 1865) Institute of Electrical and Electronics Engineers (IEEE, since 1884/1912/1963) Engineering Professions, esp. Construction

4. Copyright 2010 4 Origins of Standards Documents International Telecommunications Union (ITU, since 1865) Institute of Electrical and Electronics Engineers (IEEE, since 1884/1912/1963) British Standards Institution (BSI, since 1901) American National Standards Institute (ANSI, since 1916) Deutsche Industrielle Normen (DIN, since 1917) Standards Australia (SA, since 1922) Engineering Professions, esp. Construction

5. Copyright 2010 5 Origins of Standards Documents International Telecommunications Union (ITU, since 1865) Institute of Electrical and Electronics Engineers (IEEE, since 1884/1912/1963) International Organization for Standardization (ISO, since 1947) Internet Engineering Task Force (IETF, since 1986/1992) British Standards Institution (BSI, since 1901) American National Standards Institute (ANSI, since 1916) Deutsche Industrielle Normen (DIN, since 1917) Standards Australia (SA, since 1922) Engineering Professions, esp. Construction

6. Copyright 2010 6 From Technical Standards To Process Standards / Management Standards ISO 9000 Quality (Assurance) Family, since 1987 BSI ==>> ISO ISO 31000 Risk Assessment and Management ISO/IEC 27000 Information Security Family ISO 10002 Complaints Handling SA ==>> ISO

7. Copyright 2010 7 From Technical Standards To Process Standards / Management Standards ISO 9000 Quality (Assurance) Family, since 1987 BSI ==>> ISO ISO 31000 Risk Assessment and Management ISO/IEC 27000 Information Security Family ISO 10002 Complaints Handling SA ==>> ISO Strong Emphasis on Process Audit

8. Copyright 2010 8 From Technical Standards To Process Standards / Management Standards ISO 9000 Quality (Assurance) Family, since 1987 BSI ==>> ISO ISO 31000 Risk Assessment and Management ISO/IEC 27000 Information Security Family ISO 10002 Complaints Handling SA ==>> ISO Strong Emphasis on Process Audit Very Limited Output / Outcomes Audit

9. Copyright 2010 9 The Politics of Standards Institutionalisation and Scale Influence = ƒ( Meritocracy / Technocracy ) From Volunteer Professionals To Corporations, Government Agencies, Industry Associations

10. Copyright 2010 10 The Politics of Standards Institutionalisation and Scale Influence = ƒ( Meritocracy / Technocracy ) From Volunteer Professionals To Corporations, Government Agencies, Industry Associations Consumers / Citizens / Reps / Advocates ? Influence from muted to nil, due to: Dominance of Meritocracy/Technocracy Dominance of Corporate Power Limited Resources for Analysis, Travel

11. Copyright 2010 11 The Form of Process Standards Aspirational Loose principles Diffuse declarations Motherhead statements The organisation is to set targets for the speed of response to complaints

12. Copyright 2010 12 The Form of Process Standards Aspirational Loose principles Diffuse declarations Motherhead statements The organisation is to set targets for the speed of response to complaints Constructive and Specific Action-oriented Precise Acknowledge complaint within 30 minutes of receipt Respond substantively within 2 working days Respond fully within 2 days / 1 week / 3 weeks, depending on complexity

13. Copyright 2010 13 Exemplar – CCTV http://www.privacy.org.au/Papers/CCTV-1001.html

14. Copyright 2010 14 APF Policy Statement re CCTV Key Features Declaration of Scope Declaration of Principles Select Bibliography Guidelines Evaluations Resources

15. Copyright 2010 15 APF Policy Statement re CCTV Key Features Declaration of Scope Declaration of Principles Select Bibliography Guidelines Evaluations Resources 1.Justification 2.Proportionality 3.Openness 4.Access Security 5.Controlled Use 6.Controlled Disclosure 7.Controlled Publication 8.Cyclical Destruction 9.Review 10.Withdrawal

16. Copyright 2010 16 Principle 1. Justification Because visual surveillance is highly privacy-invasive, a Privacy Impact Assessment (PIA) must be conducted before a scheme is commenced or significantly changed A PIA involves publication of a clear explanation, demonstrating that it is expected on reasonable grounds to have positive benefits sufficient to justify its intrusiveness, followed by public consultation The explanation must be based on evidence and systemic reasoning, and not merely rely on assertions The justification must make clear what less privacy-invasive alternatives have been considered, and why they are inadequate

17. Copyright 2010 17 Exemplar – Privacy Policy Statements http://www.rogerclarke.com/DV/PST.html

18. Copyright 2010 18 Some Sites That Use the Template Association for Information Systems – http://www.aisnet.org Deacro Industries Ltd. – http://www.deacro.com Delta Research Digital Productions – http://www.delta-viz.com Ghost Tours Pty Ltd – http://bookings.ghost-tours.com.au K1P1 Knitting Yarns – http://www.k1p1.com.au Kara Nursery – http://karacactus.com Orange Space [subject to a Malware Warning...] Serverus – http://www.severus.com.au Tactile Books – http://tactilebookspublishing.com.au Time Merchants Emporium – http://www.timemerchants.com.au World Hospitality Partners – http://www.worldhospitalityllc.com Zap Technology – http://www.zaptechnology.com

19. Copyright 2010 19 Some Sites That Use the Template Association for Information Systems – http://www.aisnet.org Deacro Industries Ltd. – http://www.deacro.com Delta Research Digital Productions – http://www.delta-viz.com Ghost Tours Pty Ltd – http://bookings.ghost-tours.com.au K1P1 Knitting Yarns – http://www.k1p1.com.au Kara Nursery – http://karacactus.com Orange Space [subject to a Malware Warning...] Serverus – http://www.severus.com.au Tactile Books – http://tactilebookspublishing.com.au Time Merchants Emporium – http://www.timemerchants.com.au World Hospitality Partners – http://www.worldhospitalityllc.com Zap Technology – http://www.zaptechnology.com 300-400 live-person hits per month

20. Copyright 2010 20

21. Copyright 2010 21

22. Copyright 2010 22 Exemplar – eMarketing Information Terms of Contract Security Choice Consent Recourse Redress http://www.rogerclarke.com/EC/Collecter08.html#AppA A Normative Template for Marketer-Prosumer Communications

23. Copyright 2010 23

24. Copyright 2010 24

25. Copyright 2010 25 Exemplar – Australian Privacy Charter http://www.privacy.org.au/apcc/

26. Copyright 2010 26 Civil Society Standards Documents Benefits An alternative voice to the documents that are published by and for industry, and by and for governments A counter-balance to the power of industry and governments An antidote to civil society's exclusion / weak voice in industry standards processes

27. Copyright 2010 27 Civil Society Standards Documents Benefits An alternative voice to the documents that are published by and for industry, and by and for governments A counter-balance to the power of industry and governments An antidote to civil society's exclusion / weak voice in industry standards processes Public Expectations: Articulated Communicated Available in Advance Benchmarks: Established Applied by Civil Society Applied by Others

28. Copyright 2010 28 Civil Society Standards Documents Benefits An alternative voice to the documents that are published by and for industry, and by and for governments A counter-balance to the power of industry and governments An antidote to civil society's exclusion / weak voice in industry standards processes Public Expectations: Articulated Communicated Available in Advance Benchmarks: Established Applied by Civil Society Applied by Others Protection of the public from badly conceived projects Assurance for investments both public and private

29. Copyright 2010 29 Prospects for Civil Society Standards National NGOs ==>> International NGOs ==>> National Standards Orgs ==>> Intl Standards Orgs

30. Copyright 2010 30 Prospects for Civil Society Standards National NGOs ==>> International NGOs ==>> National Standards Orgs ==>> Intl Standards Orgs Choice ==>> SA ==>> FCO, CI ==>> ISO

31. Copyright 2010 31 Prospects for Civil Society Standards National NGOs ==>> International NGOs ==>> National Standards Orgs ==>> Intl Standards Orgs Choice ==>> SA ==>> FCO, CI ==>> ISO APF ==>> SA ==>> PI ==>> ISO

32. Copyright 2010 32 Prospects for Civil Society Standards National NGOs ==>> International NGOs ==>> National Standards Orgs ==>> Intl Standards Orgs Choice ==>> SA ==>> FCO, CI ==>> ISO APF ==>> SA ==>> PI ==>> ISO ISOC-AU >> ISOC ==>> IETF

33. Copyright 2010 33 Civil Society Standards Documents Agenda Standards Documents The Politics of Standards Exemplars CCTV PPS eMarketing Benefits Prospects

34. Copyright 2010 34 Roger Clarke, Xamax Consultancy, Canberra Visiting Professor in Computer Science, ANU and in Cyberspace Law & Policy, UNSW Chair, Australian Privacy Foundation, 2006-10 Member, Advisory Board, Privacy International, 2000- Human Choice & Computers Brisbane, 21 September 2010 http://www.rogerclarke.com/DV/CSSD {.html,.ppt} Civil Society Must Publish Standards Documents