Comprehensive Study Notes on Professional Practices: Key Privacy, Surveillance, and Anonymity Issues
Overview of Privacy and Anonymity Issues
Key areas of concern in modern information systems include:
Identity theft
Electronic discovery (e-discovery)
Consumer profiling
Treating customer data responsibly
Workplace monitoring
Advanced surveillance technology
Identity Theft: Mechanisms, Economics, and Attack Vectors
Definition: The theft of key pieces of personal information to impersonate an individual.
Key Identifying Data Points Targeted:
Name
Physical address
Date of birth (DOB)
Social Security number (SSN)
Passport number
Driver’s license number
Mother’s maiden name
Scope and Impact:
Recognized as the fastest-growing form of fraud in the United States.
Spurring consumers and organizations to become increasingly vigilant and proactive in combating fraudulent activities.
Four Primary Methodological Approaches Employed by Identity Thieves:
Data Breaches of Large Databases:
Infiltrating systems to compromise hundreds, thousands, or millions of personal records to obtain personal identity information.
Breaches are typically caused by:
Malicious external hackers.
Organizational failure to implement and enforce proper security procedures.
Purchase of Personal Data from Illicit Markets:
A thriving underground black market facilitates the trade of compromised data at established rates:
Credit card numbers purchased in bulk: approximately each.
Bank account logon credentials and associated PINs: approximately .
Complete identity profiles (dossiers containing date of birth, address, Social Security number, and telephone number): ranging from to .
Phishing Schemes:
Deceptive operations designed to harvest personal identity data by enticing users to enter sensitive information into counterfeit (fake) websites that mimic legitimate entities.
Spyware Installation:
Deploying keystroke-logging software onto target machines.
Captures credentials including:
Account usernames
Passwords
Credit card numbers
Additional sensitive personal information
Key operational feature: Keystroke loggers continue to record activity locally even if the host computer is offline.
Electronic Discovery (E-Discovery) and Ethical Dilemmas
Definition: The systematic collection, preparation, review, and legal production of electronically stored information (ESI) for use in civil and criminal litigation.
Privacy Implications:
During the broad data-gathering phase of e-discovery, highly private or personal information belonging to employees or customers is often exposed and disclosed.
Procedural and Regulatory Framework:
The formal procedures and parameters governing e-discovery are defined by the Federal Rules of Procedure.
The e-discovery process is inherently complicated, requiring extensive amounts of time, effort, and technical resources to locate, extract, review, and redact data.
Critical Ethical Considerations for Organizations:
Should an organization attempt to destroy or conceal (hide) incriminating (give away) evidence?
To what degree must an organization be proactive and thorough in collecting and providing evidence?
Should an organization attempt to intentionally "bury" incriminating evidence under a mountain of trivial (unimportant), irrelevant routine data?
Consumer Profiling and Behavioral Tracking
Online Data Harvesting:
Commercial entities openly gather personal data regarding internet users' browsing patterns and habits.
Core Tracking Mechanisms:
Cookies: Small text files written by a website onto a visitor's local hard drive that serve as identifiers to recognize that visitor upon return visits.
Tracking Software: Software suites deployed across platforms to monitor, record, and analyze user navigation and browsing habits.
Behavioral Aggregation and Personalization:
Aggregation: Marketers maintain extensive central databases populated with massive volumes of consumer behavioral data collected from recurrent website visits.
Business Objective: Utilize aggregated records to provide personalized and customized user experiences.
Personalization Software: Utilized specifically by marketers to calculate and optimize the total volume, exposure frequency, and mixture of commercial advertisements served to users.
Four Technical Methods for Limiting or Preventing Cookie Ingestion:
1. Reconfigure web browser settings to block or limit the deposit of cookies.
2. Manually delete saved cookies directly from the computer’s local storage drive.
3. Install specialized cookie-management programs designed to automate filtering.
4. Browse using privacy-centric, anonymous browsing applications configured to reject all cookie tracking by default.
Platform for Privacy Preferences (P3P):
A standardized technical protocol designed to protect consumer data privacy by shielding users from websites that fail to comply with their preferred privacy settings.
Organizational Governance and Responsible Data Handling
Fair Information Practices:
Strict operational measures and baseline protocols that businesses must implement to avert disputes, distrust, and negative consumer relationship crises.
Executive Oversight:
Creation of the Chief Privacy Officer (CPO) role, designating an executive leader responsible for establishing, monitoring, and managing enterprise data privacy policies and initiatives.
Manager's Checklist for Treating Consumer Data Responsibly (Course Technology/Cengage Learning):
Does your company have a written data privacy policy that is followed?
Can consumers easily view your data privacy policy?
Are consumers given an opportunity to opt in or opt out of your data policy?
Do you collect only the personal information needed to deliver your product or service?
Do you ensure that the information is carefully protected and accessible only by those with a need to know?
Do you provide a process for consumers to review their own data and make corrections?
Do you inform your customers if you intend to use their information for research or marketing and provide a means for them to opt out?
Have you identified a person who has full responsibility for implementing your data policy and dealing with consumer data issues?
Workplace Monitoring and Public Surveillance Technologies
Workplace Surveillance:
Employer Motivations:
Counteracting employee misconduct or abuses that undermine worker productivity.
Shielding the organization against potential hostile workplace or sexual harassment liabilities.
Legislative Pushback:
Privacy advocates actively lobby for dedicated federal legislation that prevents employers from infringing upon (interfering with) the privacy rights of their workers.
Advanced Surveillance Technologies:
Public Camera Surveillance:
Municipal authorities continue to build out and expand camera networks.
Proponents assert that citizens maintain no legal expectation of privacy when in public spaces.
Opponents voice concerns over broad civil liberty infractions and the potential for official misuse.
Global Positioning System (GPS) Tracking:
GPS microchips are embedded in handhelds, automobiles, and peripheral consumer hardware, enabling continuous location tracking.
Commercial applications are being deployed across banking institutions, retail chains, and commercial airlines to offer hyper-localized consumer services based on real-time spatial coordinates.
Cryptographic Protection and Privacy-Enhancing Technologies
Threat Vector Landscape:
Electronic mail and raw network packets can be intercepted while traversing internet routers.
Unencrypted wireless communications can be captured out of the air.
Physical theft or unauthorized remote compromise of a machine exposes resident files.
While electronic eavesdropping (listening in) by private citizens, unauthorized computer hacking, and laptop theft represent illegal acts subject to conviction (imprisonment), legal penalties alone cannot prevent compromise, necessitating technological defenses.
Core Encryption Concepts:
Definition: A software- or hardware-implemented process that mathematically transforms plain text into ciphertext, rendering it meaningless to unauthorized parties.
Covered Media: Email traffic, proprietary business plans, financial records, medical documents, stored images, and mobile location logs.
Decryption Process: Authorized recipient software or local applications use cryptographic operations to revert ciphertext back into cleartext.
System Automation: Modern platforms transparently encrypt credit card details during e-commerce checkout without requiring conscious user intervention.
Significance in Security Architecture:
Considered by security professionals to be the single most effective technical method for ensuring message privacy across computer networks.
Safeguards stored information against outside intrusion and unauthorized employee access.
Acts as the primary line of defense for laptops, flash media, and mobile storage devices removed from physical corporate facilities.
Cryptographic Algorithms and Cryptanalysis:
Components: Involves an underlying mathematical algorithm combined with a key (a sequence of characters, digits, or letters).
Cryptanalysis: Utilizing advanced mathematical tools and computing clusters to break an encryption implementation (reconstructing data without access to the designated secret key).
Functional Expansions: Beyond raw confidentiality, modern cryptography forms the foundation for digital signatures, identity authentication systems, public-key cryptography, and digital cash.
Enterprise Data Protection Policies and Market Solutions
Ethical and Legal Fiduciary Duties:
Entities storing consumer data carry a legal and ethical duty to defend against leaks, misdirection, and employee exploitation.
Organizations must continuously re-evaluate security models to withstand emerging attack vectors.
Access Controls and Database Architecture:
Every user must be provisioned with a distinct identifier and strong password.
Granular Role-Based Access Controls (RBAC): Restricting write, modify, or delete privileges on a per-user basis. Record segments must be partitioned based on need-to-know criteria (for example, hospital billing clerks should be restricted from viewing diagnostic laboratory test outcomes).
System Audit Trails:
Automated logging mechanisms that record the identity of the user, timestamp, and specific information viewed or changed.
Serves as an evidentiary foundation during forensic investigations.
Serves as a psychological deterrent against internal data snooping.
Third-Party Audits and Privacy Seals:
Organizations frequently expend tens of thousands to millions of dollars on specialized privacy auditing firms.
Auditors inspect codebases for information leaks, verify procedural adherence to stated privacy policies, and review site warnings when gathering data.
Industry trustmarks, such as Better Business Bureau seals of approval (modeled after Automobile Association of America hotel ratings), signify adherence to vetted privacy criteria.
Market Pressure and Economic Levers:
Market leaders utilize commercial clout to enforce compliance: IBM and Microsoft withdrew corporate advertising from web destinations that did not provide comprehensive privacy disclosures.
The Walt Disney Company and Infoseek Corporation mirrored these restrictions and ceased hosting advertisements from websites that failed to publish clear data policies.
The Direct Marketing Association enacted mandates forcing affiliated member companies to notify users when data is shared with external vendors and provide explicit opt-out mechanisms.
Voluntary industry restrictions have led companies to suppress the public indexing of unlisted telephone directories, historical driving infractions, and personal details concerning minors.
Despite industry progress, many commercial entities continue to operate without transparent privacy documentation or willfully disregard their own published guidelines.
Academic References and Curricular Attribution
Curriculum Context: CSC372-Professional Practices, Week-8, Lahore Garrison University (LGU), Pakistan.
Primary Course References:
Bott, M.F. et al., Professional Issues in Software Engineering, Latest edition.
Johnson, Deborah G., Computer Ethics, Pearson Education (2001), 3rd edition.