Skip to content

It’s Time for Contextual Identity

Elizabeth M. Renieris, founder of HackyLawyer wrote this important piece for organizations thinking about consent as part of their #GDPR / #CCPA planning. Adopting the ideas of contextual identity will reduce the risk of your propositions failing. “Contextual integrity ties adequate protection for privacy to norms of specific contexts, demanding that information gathering and dissemination …

Letter: Legal instruments exist to empower us, the data subjects

“It seems every news cycle comes with its share of “data gloom”. Just look at lamentations over a “loss of digital sovereignty” (John Thornhill, November 26) or the dismayed unveiling of healthcare websites’ opaque data tracking practices (Rana Foroohar, November 18). The tools we need to empower us, the data subjects, have been hiding in …

Steve Wilson says digital identity is dead, so where do we go from here?

“Digital identity” opens up a huge can of worms, or what Wilson calls a “sea change” in the entire field:  It turns out that the problems we’ve been trying to solve in digital identity are actually much bigger problems across the digital economy, to do with verification of claims and verification of data – the …

8 Fundamental Data Anonymization Mistakes That Could Put Your Business At Risk

For data about EU citizens, it shouldn’t be possible to ‘single out an individual, link records relating to an individual or infer information concerning an individual’ without their consent – according to the GDPR. However, there are many situations where you need to use the data, for example, to facilitate software development, where you need …

Bottom-Up Data Trusts: Disturbing the ‘One Size Fits All’ Approach to Data Governance

“This paper proceeds from an analysis of the very particular type of vulnerability concomitant with our ‘leaking’ data on a daily basis, to show that data ownership is both unlikely and inadequate as an answer to the problems at stake. We also argue that the current construction of top-down regulatory constraints on contractual freedom is …

Researchers spotlight the lie of ‘anonymous’ data

Researchers from two universities in Europe have published a method they say is able to correctly re-identify 99.98% of individuals in anonymized data sets with just 15 demographic attributes. The suggestion is that no “anonymized” and released big data set can be considered safe from re-identification — not without strict access controls. “Our results suggest …

“Anonymized” data really isn’t—and here’s why not

The Massachusetts Group Insurance Commission had a bright idea back in the mid-1990s—it decided to release “anonymized” data on state employees that showed every single hospital visit. The goal was to help researchers, and the state spent time removing all obvious identifiers such as name, address, and Social Security number.87 percent of all Americans could …