Re: [ietf-privacy] Is there an official working definition for Privacy Online?

Joseph Lorenzo Hall <joe@cdt.org> Thu, 23 April 2015 19:52 UTC

Return-Path: <jhall@cdt.org>
X-Original-To: ietf-privacy@ietfa.amsl.com
Delivered-To: ietf-privacy@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26B3F1B3209 for <ietf-privacy@ietfa.amsl.com>; Thu, 23 Apr 2015 12:52:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.501
X-Spam-Level: *
X-Spam-Status: No, score=1.501 tagged_above=-999 required=5 tests=[BAYES_50=0.8, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_NEUTRAL=0.779] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mNpm70ByE5K2 for <ietf-privacy@ietfa.amsl.com>; Thu, 23 Apr 2015 12:52:49 -0700 (PDT)
Received: from mail-la0-f46.google.com (mail-la0-f46.google.com [209.85.215.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E3851B3218 for <ietf-privacy@ietf.org>; Thu, 23 Apr 2015 12:52:31 -0700 (PDT)
Received: by lagv1 with SMTP id v1so20565477lag.3 for <ietf-privacy@ietf.org>; Thu, 23 Apr 2015 12:52:29 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=Zp5Rsg6RANi+xZkveE0zf8RDR+/BzwqqEhbf9T+wrzo=; b=M6JzrFrBW0el9+9EbMmuWf07xqOvqlPUXotr+eWWc5fSJ65a3zdzs2kGhIb3Z2G/bR h80LZhkm+XQG00toPQlhO4hwneil+PzQMYl9/9NiKf4rlRBqmGFmNTafZiCDvsXOXwey qdzdxa+ghfvm39P9FHTIF0pgiVh8BdhL/FKSB0aPOcgVt7eD0tbH0iSumN2rclvnC19L 6m+uglxXG1xpYtOBMluYxDtRz1qK3GZ/eNunvqYa8Jr0MU4tGXVNOM5CBRBsU3CVjF5h qJwdoRV6nlq3p5dx4+vYOZ9EXhlGFNtKiBQGOlbT+ikwBw5K9IMvWpaLfPx0Gd2HCdrd FJVA==
X-Gm-Message-State: ALoCoQm32o3LfOk3API844WYhbICYFFbYG9o7/zAOZ/6aodNOkv6YT+bY+Pjis/4y18tbQdIDQjI
X-Received: by 10.112.119.163 with SMTP id kv3mr3970742lbb.101.1429818749657; Thu, 23 Apr 2015 12:52:29 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.25.84.15 with HTTP; Thu, 23 Apr 2015 12:52:09 -0700 (PDT)
In-Reply-To: <015a01d0798d$509954c0$f1cbfe40$@huitema.net>
References: <552FCC84.6040305@gmail.com> <CA+9kkMCYuEGRidB1D=SGA0qxk+SuX6+HyqToYDmqQVmpBskWrw@mail.gmail.com> <5530329E.4060608@dcrocker.net> <01F784DA-5FD5-4D1F-8613-C2E668EDA765@isoc.org> <55311CE9.9040003@dcrocker.net> <DB3PR07MB138A042321BB99DF9AB94A4BCE30@DB3PR07MB138.eurprd07.prod.outlook.com> <55313140.9040400@dcrocker.net> <015a01d0798d$509954c0$f1cbfe40$@huitema.net>
From: Joseph Lorenzo Hall <joe@cdt.org>
Date: Thu, 23 Apr 2015 15:52:09 -0400
Message-ID: <CABtrr-X6CgN3J0dA1YBED0j6K7D5Mt2NAbUwGF5E67BoFX9JUQ@mail.gmail.com>
To: Christian Huitema <huitema@huitema.net>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ietf-privacy/7rofOo0Ni-va30tWYMyitWASmVs>
Cc: ietf-privacy@ietf.org, Dave Crocker <dcrocker@bbiw.net>, Josh Howlett <Josh.Howlett@jisc.ac.uk>
Subject: Re: [ietf-privacy] Is there an official working definition for Privacy Online?
X-BeenThere: ietf-privacy@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Internet Privacy Discussion List <ietf-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf-privacy>, <mailto:ietf-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf-privacy/>
List-Post: <mailto:ietf-privacy@ietf.org>
List-Help: <mailto:ietf-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf-privacy>, <mailto:ietf-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Apr 2015 19:52:50 -0000

(not necessarily in response to Christian)

On Sat, Apr 18, 2015 at 12:08 AM, Christian Huitema <huitema@huitema.net> wrote:
> On Friday, April 17, 2015, at 9:14 AM, Dave Crocker wrote
>> ...
>> This translates into "privacy relates to controlling disclosure of
>> information about a person or organization."  Then add the
>> scope-of-control portion.
>
> There is indeed some fuzziness in the definition of privacy. I like the
> analysis in this Pew Research Center study on "Public Perceptions of Privacy
> and Security in the Post-Snowden Era:"
> http://www.pewinternet.org/2014/11/12/public-privacy-perceptions/. I think
> they do a good job relating threats to privacy and threats to personal
> security. To quote: "Beyond the frequency of individual words, when
> responses are grouped into themes, the largest block of answers ties to
> concepts of security, safety, and protection. For many others, notions of
> secrecy and keeping things 'hidden' are top of mind when thinking about
> privacy."

There is emerging academic work (not published yet, so I won't cite)
that discusses privacy as what philosophers call an "essentially
contested concept." The idea being that for some class of ideas and
concepts -- art, justice, freedom, etc. -- there is no single
definition and, instead, that the struggle around what they mean
defines them.

I realize that's some pretty non-technical and abstract thinking, but
for many folks (like some of us here) that have been involved for
decades in academic/industry/civil society kvetching on privacy and
defining it, the realization that the lack of a definition may in
itself define the thing is pretty important and profound.

I was a postdoc under NYU professor Helen Nissenbaum a while back and
at least in the academic privacy community, her notion of "contextual
integrity" is perhaps the biggest "definitional" thinking we've seen
in a decade or so. She has written a book on it, but I suggest anyone
interested read the following shorter article that hits the high
points:

http://www.amacad.org/publications/daedalus/11_fall_nissenbaum.pdf

best, Joe

-- 
Joseph Lorenzo Hall
Chief Technologist
Center for Democracy & Technology
1634 I ST NW STE 1100
Washington DC 20006-4011
(p) 202-407-8825
(f) 202-637-0968
joe@cdt.org
PGP: https://josephhall.org/gpg-key
fingerprint: 3CA2 8D7B 9F6D DBD3 4B10  1607 5F86 6987 40A9 A871