what techies bring to privacy: designing privacy principles into systems

2. Discussion Outline The connection between Privacy and Information Sharing Technologies How Domestic Violence is related Global Privacy and Information Quality Working Group Designing Privacy Into Systems

4. Cindy Southworth, Director of Technology National Network to End Domestic Violence 660 Pennsylvania Ave, SE Suite 303 Washington, DC 20003 phone: 202-543-5566 fax: 202-543-5626 www.nnedv.org cs@nnedv.org SafetyNet@nnedv.org Safety Net: the National Safe & Strategic Technology Project

6. Global Privacy &Information Quality Working Group

7. �Fair Information Practices� 1. Limit the collection of personal information to that required for the purposes intended. (�Collection Limitation Principle�) 2. Ensure data accuracy. (�Data Quality Principle�) 3. Define agency purposes for information to help assure agency uses of information are appropriate. (�Purpose Specification Principle�) 4. Assure appropriate limits on agency use of personal information. (�Use Limitation Principle�)

8. 5. Maintain effective security over personal information. (�Security Safeguards Principle�) 6. Promote a general policy of openness about agency practices and policies regarding personal information. (�Openness Principle�) 7. Allow individuals reasonable access & opportunity to correct errors in their personal information held by the agency. (�Individual Participation Principle�) 8. Identify, train, and hold agency personnel accountable for adhering to agency information quality and privacy policies. (�Accountability Principle�)

9. Designing Privacy Into Systems What and Why Current Initiatives What you can do Reaching beyond privacy folks

10. Designing Privacy Discussion Ideas *Balance between privacy, tech, policy, exchanges Vague Statutes *Ownership *Hiring critics ? Identification of individuals � correct info � personal information Getting information out to broad audience Requirements � GJXDM structures *Role based definitions, data fields Database modeling, If__, then__ HIPAA service models � RADS (restricted access) Need to know � track information � identity & location only if needed Responsibility of Developers � awareness is essential Governance Based access � MOU, tag electronically Sometimes don�t need a database � don�t need to keep the data, need to be able to query existing information MS RMS � PKI � apply to documents, email, etc � once applied, templates Whole list of names � victims & witnesses PrivacyJournal.net - Directory of Privacy Professionals (Court Access)

11. Cindy Southworth, Director of Technology National Network to End Domestic Violence 660 Pennsylvania Ave, SE Suite 303 Washington, DC 20003 phone: 202-543-5566 fax: 202-543-5626 www.nnedv.org cs@nnedv.org SafetyNet@nnedv.org Safety Net: the National Safe & Strategic Technology Project