Privacy in online services

Transcription

1 Privacy in nline services Rdica Tirtea 30 March

2 Overview Intrductin & cntext f the wrk Abut ENISA and its activities in ENISA 2010 activities n privacy and data prtectin tpics Data Breach Ntificatin in Eurpe Survey f accuntability, trust, cnsent, tracking, security and privacy mechanisms in nline envirnments Privacy, Accuntability and Trust Challenges and Opprtunities Bittersweet ckies. Sme security and privacy cnsideratins Privacy related activities in 2011 Findings and issues t be further addressed 2

3 3

4 Privacy, Accuntability and Trust Cntext Internet is pen and distributed withut authritative cntrl In terms f privacy a number f challenges are psed Data pllutin - data disseminated withut cntrl and is replicated n multiple servers Cntrary t humans, data lives frever s (nt nly web mail), scial netwrking sites, nline cllabrative spaces (e.g. Ggle dcs) Cntradictry psitins gvernments Demand accuntability, data prtectin, data minimizatin, better privacy prtectin But als mre access cntrl t data, data retentin, lawful interceptin Users Expressing cncerns regarding privacy Willing t drp all f the cncerns when a benefit is ffered

5 Cntext f the wrk ENISA wrk prgramme 2010 PA1: Identity, accuntability and trust in the future Internet Results New tpic Preparatry Actin, extended activities in future year(s) Data breach ntificatin (DBN) study Survey f accuntability, trust, cnsent, tracking, security and privacy mechanisms in nline envirnments Privacy, Accuntability and Trust Challenges and Opprtunities Bittersweet ckies. Sme security and privacy cnsideratins

6 Data Breach Ntificatin study PA 1.1 Study n existing practices in data breach ntificatin (DBN) in varius sectrs ENISA wrkshp - 24 January 2011 DBN. The way frward Mre issues t be cnsidered: Define threshlds that will activate the prcess; Impact in terms f resurces at DPA level; Definitin f persnal data differentiatin when cnsidered in persnal r prfessinal/crprate cntext. Similarities and differences between sectrs (e.g. financial vs. telc). Defined the statement f the Directive withut undue delay ; Beynd reprting, is there a need fr an audit mechanism? Shuld DPAs play (wuld they like playing) the rle f the cntrller r t be utsurced t 3 rd parties? What abut enfrcement?

7 Survey f mechanisms in nline envirnments. Remarks (I) Privacy in nline envirnment; defining persnal data given current cntext f data mining Clear privacy principles and persnal data definitins valid in an evlving nline envirnment shuld be prmted Privacy enhancing technlgies and a user centric apprach t privacy need t be encuraged. Best practice studies shuld be prepared and disseminated Cnsent and privacy plicies Mre transparency by rganizatins n hw they handle persnal data is needed The way privacy plicies are displayed and the issues regarding the changes f plicies need further cnsideratin; alternatives t lengthy privacy plicies shuld be available t infrm the user Cnsent prvided fr a certain privacy plicy must nt be transferred t anther (changed) versin f privacy plicy withut clear understanding and acceptance f the user 7

8 Survey f mechanisms in nline envirnments. Remarks (II) Prfiling and tracking Strage time. Data shuld nt be stred frever Data minimizatin Persnal data as a cmmercial asset; transfer f persnal data between prviders and utside EU In line with the EU apprach, ENISA cnsiders privacy t be a basic Human Right Ecnmic effects f the use f persnal data n bth cnsumers and prviders and these effects shuld be analyzed better understanding the effects and the risks culd allw fr slutins fr prtecting cnsumers privacy The legal framewrk in 27 EU MS regarding the transfer f persnal data shuld be surveyed; differences in legislatin can encurage transfer f persnal data t cuntries where the legal requirements allw fr less privacy prtectin The legal framewrk fr transfer f persnal data utside EU shuld be als analysed; equal treatment and same enfrcement shuld exist fr EU users persnal data independent f the lcatin f cntrllers/prcessrs inside r utside EU 8

9 Privacy, Accuntability and Trust study. Findings (I) Prmte technlgies and initiatives addressing privacy Data minimizatin, privacy enhancing technlgies and privacy by design cncepts shuld be well understd and prmted in an effrt t prevent rather than cure evaluatin f existing targeted (cnstructed n certain assumptins) slutins in the real envirnment supprting the uptake f research result in the peratinal envirnment Research n infrmatin accuntability technlgy shuld be prmted, aimed at the technical ability t hld infrmatin prcessrs accuntable fr their strage, use and disseminatin f third-party data Supprting infrmed user cnsent in a transparent and user friendly manner i.e. using transparent privacy plicies with icns A multidisciplinary apprach that cnsiders educatin, plicy legal and technlgical aspects shuld be supprted 9

10 Privacy, Accuntability and Trust study. Findings (II) Raise the level f awareness and educatin regarding privacy Cncepts such as privacy certificatin culd be supprted; this wuld allw labeling sites and services accrding t their prfiling activity the risks assciated t prfiling and tracking, i.e. frm ecnmic perspective, shuld be assessed (disseminatin f such studies shuld be supprted) Supprt plicy initiatives in the field and the revisin prcess f Data prtectin directive Clear legal prvisins limiting behavir tracking and prfiling shuld be prmted. Prmting clear definitins and guidelines in the field, by raise awareness n the data mining techniques and their pssibilities t de-annymize data and prfiles (linking this way infrmatin that initially are nt cnsidered persnal data). 10

11 Ckies. Sme security and privacy cnsideratins Cllectin f data frm ckies 78% in ENISA survey 73% bth persistent and nnpersistent ckies 9% nly persistent 18% nly nn-persistent Ckies Useful in the stateless brwser server HTTP interactin t keep the state Extensively used New type f ckies ie..lsd (lcal stred data) Stred utside the brwser Able t regenerate deleted ckies Privacy cncerns Ability t indentify and track users Security cncerns Vulnerabilities i.e. due t setting Legal framewrk Allws fr interpretatin i.e. Cnsent by default 11

12 Tpics fr discussins Mre wrk is needed Security & privacy shuld be cnsider earlier in the design prcess Multidisciplinary apprach: educatin, training, legal, plicy, technlgy Clear definitins and guidelines Legal framewrk and best practices Aligning research t plicy initiatives, mving research results in peratinal envirnment Fcus n the entire picture i.e. nt nly at applicatin level Understanding the ecnmic aspect f persnal data prtectin and disclsure Supprt & prmte research & best practices in privacy friendly architectures

13 Summer Schl n Netwrk & Infrmatin Security