Privacy, Technology and Economics in the 5G Environment S A M A N T K H A J U R I A A S S I S T P R O F E S S O R, C M I K N U D E R I K S K O U B Y P R O F E S S O R, D I R E C T O R C M I S K O U B Y @ C M I. AAU. DK
Background Privacy is a complex, multifaceted concept Privacy has been an important topic throughout history of communication Recent advances in information technology have raised attention/ interest to an all time-high Surveillance by the state Collection of information by companies Different notions of privacy Decisional Privacy The right to choose..human rights Informational Privacy Disclosure of personal information Concerns are raised 30-03-2016 2
Statistics Survey by the Pew Research Center 86% of internet users have tried to use the internet in ways to minimize the visibility of their digital footprints 55% of internet users have taken steps to hide from specific people or organizations 30-03-2016 3
Statistics Survey by the Pew Research Center Access to certain kind of behavioral data and communication content 30-03-2016 4
Challenges for Online User/ Challenges for the System Users are increasingly reluctant to disclose personal information online because of privacy concerns The System builds increasingly on data as an economic asset controlled and monetized by the services providers whose business cases requires this In the privacy policy of the general Data protection and privacy frameworks users are offered Notice and Choice A mechanism giving a choice between either accepting all service terms and conditions or not using the service at all 30-03-2016 5
The privacy policy of Notice & Choice The assumptions are Companies post their privacy policies Users read and understand these policies Users follow a rational decision-making process to engage only with companies they believe offer an acceptable level of privacy Notice & Choice is designed and promoted as a replacement for regulation. On the international scene this is assuring both privacy rights and international data flows. 30-03-2016 6
Notice & Choice Notice have been recognized as essential to ensure that consumers are properly informed before divulging personal information as it ideally informs on Identification of the entity collecting the data Identification of the uses to which the data will be put Identification of any potential recipients of the data The nature of the data collected and the means by which it is collected. The consequences of a refusal to provide the requested information The steps taken by the data collector to ensure the confidentiality, integrity and quality of the data. 30-03-2016 7
Notice & Choice Choice is typically defined in terms of consent According to FTC, choice means giving consumers options as to how any personal information collected from them can be used. Choice is also related to secondary uses of information uses beyond those necessary to complete the contemplated transaction No frameworks US or EU (with its sharper data protection rules) mention value as part of Notice or Choice It is, however, out there and obvious to consider in a market economy setting and the basis for the development of the online services 30-03-2016 8
AVG PrivacyFix Report 30-03-2016 10
Users personal data worth Facebook earns its revenue from targeted advertising which is seen when user is using their service. To estimate the value of an average Facebook user Recent financial disclosures for shareholders, number of Facebook users, their location. Average users worth based on geographical area ( based on income and spending patterns ) Gender plays a very important role too advertisers are generally willing to spend more to reach women then men. Time spend by the user on Facebook Number of friends user has and number of likes added by the user. Twitter also earns its revenue from users data and the ads they show Twitter focus on how often a user looks at the tweets and how a user drive other users to the tweets Can the silent accept of value appropriation survive in the visions for 5G? 30-03-2016 11
A Technology Vision of 5G Not fully defined A modularized solution vs the monolithic 2G, 3G, 4G 5G will build on new radio access technologies combined with evolved existing wireless technologies ( LTE, GSM, WiFi, DVB ) Heterogeneous networks 5G wireless networks will Support 1,000-fold gains in capacity Extremely low latency and response times Connections for at least 100 billion devices - IoT Flexible capacity frequency slicing etc A new network paradigm, e.g., serving the Smart City 30-03-2016 12
Source: http://ec.europa.eu/digital-agenda/en/towards-5g 30-03-2016 13
5G Users & Data The connected world of the future is based on information and data generated by people, processes and the environment we live in the Smart City The corresponding, emerging network consists not only of infrastructure provided by network providers but also by the users, and a broad range of 3 rd party access providers The paradigm shift is driven by a changed concept of what a user is Mainly a huge set of diverse devices and applications interoperating, a cooperative and coordinated set of physical and logical objects the IoT World Some of these objects are owned by a real end-user e.g., FitBand or cellwatch Others will be instances of services that are associated with the user In 5G, all these instances will be univocally understood as being of a user domain and will be orchestrated in order to provide the overall integrated services the user wants - personalization attribute services (PATS) 30-03-2016 14
5G A Socio-technical construction The socio-technical structures the crowd and cloud will be key enablers to Explore & generate infrastructures for common use with socialized devices Generate and exchange information The 5G Networks will be designed around the needs and requirements of the user, and the information value The data generated and accessed by the users will be distributed across adequate communities based on the value This distribution mechanism requires full commercialization of data a showdown for the Notice & Choice with its binary option 30-03-2016 15
New Trust & Business Models The 5G socio-technical construction implies New trust models recognizing the new user concept incl. extended requirements in areas such as authentication between various actors and devices, accountability and nonrepudiation New business models defining new stakeholders roles and recognizing a fuller commercialization of data Not realized yet in the emerging privacy frameworks The proposed new EU Directive on the protection of personal data still recognizes three distinct categories of stakeholders Data Subject Individual who is the subject of the personal data Data controller determines the purposes and means of the processing of personal data Data processor a 3 rd party who simply processes personal data on behalf of the data controller without controlling the contents or making use of the data There is no role foreseen for the user as provider/ seller of data 30-03-2016 16
Conclusion Privacy is a key aspect of online users daily life. Research have shown that the levels of trust among users have gone down transparent treatment of privacy related data is lacking 5G is needed to exploit IoT potentials and support Smart City development The technical development of 5G is under way - A successful deployment of the user centric and data centric 5G technology must build on user trust Increased transparency is not enough in a system dominated by personalized attribute services (PATS) A functioning 5G ecosystem demands clearly established users rights to data A corresponding business model remains to be developed 30-03-2016 17