Information Systems 365September 23, 2008Information Privacy

Overview

• Assignment #1…You are quite good writers!

• Short Lecture• Video “Spying on the Home

Front”• Distribution of Assignment #2

Reese’s Peanut Butter Cups

Created in 1928 byHarry Burnett Reese,A former dairy farmerand shipping foremanfor Milton S. Hershey

Information Privacy

Data privacy is therelationship betweencollection and disseminationof data, the expectation ofconfidentiality, andassociated legal issues

Encryption

• One of the core information security tools used to ensure information privacy

• As you watch the video, think about how the power of encryption can be both beneficial as well as detrimental, depending on the situation

Think of These ThingsAre They Protected Well

Enough?• Healthcare records • Criminal justice investigations and

proceedings • Financial institutions and

transactions • Biological traits, such as genetic

material • Residence and geographic records • Ethnicity

Encryption -- Privacy Enhancing Technology

• Any technology which increases control over personal data (PET)

• Why do people have an aversion to using PETs?

Costs

• Additional hardware, additional software licenses

• Personnel costs for designing, developing, implementing, testing and deploying the privacy enhanced service, operating and maintaining the privacy enhanced service

• Costs for training customer support

Time Spent and Vulnerability

• Fixing additional system failures or problems due to increased system complexity (more functionality means higher complexity which leads to higher vulnerability)

• Product management of the additional privacy enhancing functions (more functions require more time spent to manage them)

Benefits of PETs

• Increased usage of online services by existing customers and increased number of new customers due to higher trust in the service

• Stronger public image for your company

• Competitive advantage

Things to Think About• Based on what you learn from the

video, how important do you think PETs will be to individuals, businesses, the government and criminals in the near future?

• As the new CIO of a major corporation, how would you address information privacy in light of the changes in government policy since 9/11?