CS 330: Societal & Ethical Issues in Computing - Module 3 Learning Objectives

Vocabulary practice flashcards covering privacy theorists, constitutional amendments, statutory privacy laws, GDPR concepts, surveillance controversies, legal cases, and identifier properties from CS 330 Module 3.

Richard Posner

Daniel Solove

Privacy is too complicated.

Samuel Warren & Louis Brandeis

the right to be left alone

Solove's taxonomy

four privacy harms= information collection, information processing, information dissemination, and invasion of privacy. .

1st Amendment

Protects freedom of speech, religion, press, assembly, and petition.

3rd Amendment

the amendment that protects citizens against the quartering of soldiers in private homes without their consent, except in wartime.

4th Amendment

An amendment to the U.S. Constitution protecting against unreasonable searches and seizures, central to discussions of privacy rights and surveillance.

5th Amendment

An amendment to the U.S. Constitution protecting against self-incrimination and deprivation of rights without due process, examined in relation to privacy.

14th Amendment

An amendment to the U.S. Constitution providing due process and equal protection, examined as a legal basis for the right of privacy.

Panopticon

An architectural surveillance concept analyzed through the interrelated philosophical views of Jeremy Bentham and Michel Foucault. always being watched will make people dicipline themselves.

COPPA

Children onlines privacy protection rule

ECPA

Electronic communication privacy act

FACTA

fair and accurate credit transaction act

FERPA

family educational rights and privacy act

FISA

foreign intelligence surveillance act

GINA

genetic information nondiscrimination act

HIPAA

health insurance portability and accountability act.

HITECH

health information for economic and clinical health act

VPPA

video privacy protection act

GDPR

The European Union General Data Protection Regulation, setting forth individual principles, rights, and lawful conditions for collecting personal data.

"By design and by default"

A regulatory principle established under the GDPR requiring data protection measures to be built directly into systems and enabled automatically.

Consent (under GDPR)

as a freely given, specific, informed, and unambiguous indication of an individual's wishes.

Legitimate interest

is one of the six lawful bases that allows an organization to process a person's personal data without getting their explicit consent. [1, 2]

Online sociopathy

A category of antisocial digital behaviors that encompasses griefing, trolling, and cyberbullying.

Griefing

intentional sabataging

Trolling

someone who posts or comments online to deliberately upset others

Cyberbullying

inflict emotional harm, humiliate, or intimidate.

Crowdsourcing

asking a large group of people online to help do a job, share ideas, or raise money, instead of hiring a traditional company.

Digital minstrelsy

A concept analyzed in the context of online identity and knowledge.

Homophily

individuals to who associates, bond and form relationships with others who are similar to themselves.

Normalization

gradually become accepted as “natural“, ordinary and taken for granted in everyday

Privacy paradox

contradiction between people stating they care about online privacy and freely giving away personal data in daily life

Privacy as a tax

paying more for things or losing free option because you want to keep your personal data private

Procedural vs. substantive due process

Procedural: there are rules and processes government agents must follow.

Sustantive: government actions are limited and preserve liberty.

Public/private dichotomy

A conceptual and legal separation between public life and private life in legal discussions of privacy.

Reasonable expectation of privacy

A legal standard in privacy law used to evaluate Fourth Amendment protections against surveillance.

Article 8 of the European Convention on Human Rights [ECHR]

respect for his private and family life

Section 7 of the Canadian Charter

right to life, liberty, and security of the person

Information privacy

(also called data privacy or data protection) is an individual's right to control how their personally identifiable and sensitive information is collected, stored, used, and shared.

Decisional privacy

is the right of an individual to make autonomous, life-defining choices—such as those regarding their body, family, and intimate life—without unjustifiable interference from the government or other entities. [1, 2]

U.S. ADPPA

The American Data Privacy and Protection Act, a proposed U.S. statutory framework whose individual principles and rights are compared to the E.U. GDPR.

Boyd v. U.S.

the government cannot force you to hand over your private papers to be used as evidence against you in court.

Carpenter v. U.S.

the government generally needs a search warrant to access your cellphone’s historical location records.

Katz v. U.S.

fourth amendment protects people not places, government cannot secretly record your conversation without a warrant

Laird v. Tatum

citizens cannot sue the government over a surveillance program unless they can prove the program has caused then direct, concrete harm.

Olmstead v. U.S.

the government can tap your phone lines without a warrant as ling as police don’t physically trespass on your private property.

Third-party doctrine

you lose your Fourth Amendment expectation of privacy over information you voluntarily share with a third party (like a company or a bank).

Carnivore

digital surveillance

Clipper Chip

A surveillance controversy in telecommunications and cryptography centered around government-mandated key escrow.

COINTELPRO

secret illegal program run by the fbi to spy on, mess with, and break apart american political and activist groups

ECHELON

global electronic spy network

MINARET

specific mechanism used to create and apply “watch lists“ to strip the privacy of american citizens

SHAMROCK

synthesizable high assurance mangement/reservation/opertaion of cryptography

Key escrow

A cryptographic concept where encryption keys are held by a designated third party, evaluated for its specific benefits and drawbacks.

Anonymity

subject is not identifiable within a set

Pseudonymity

tracking information using a fake name, username, or digital address

Connectedness

An identifier concept describing how data, records, or identifiers link together across systems.

Durability

An identifier concept concerning the temporal stability, longevity, or persistence of an identifier over time.

Undetectability

cannot determine if item of interest exists or not.

Unlinkability

cannot determine if two items of interests are related

$k$-anonymity

A formal privacy property and technique where each individual's information in a data set cannot be distinguished from at least $k - 1$ other individuals.