Throughout the longstanding debate on privacy, the concept has been framed in various ways. Most often it has been discussed as an area within which individuals rightfully may expect to be left alone and in terms of certain data that they should be entitled to control. The sphere in which individuals should be granted freedom from intrusion has typically been equated with the indisputably private domestic sphere. Privacy claims in the semi-public area of work have not been sufficiently investigated. In (...) this article, the case is made that employees have reasonable expectations on privacy at work. Firstly, in a descriptive analysis, employees’ need for workspace privacy is spelt out. Secondly, a normative analysis explicates the reasons why privacy should be protected. The main thrust is to provide a more inclusive privacy concept and hence, a more adequate basis for privacy protection legislation and codes in the area of work. Contrary to prevailing workplace privacy protection, employees’ need for local privacy should be accommodated as well as informational privacy. (shrink)

In February 2012, the Obama White House endorsed a Privacy Bill of Rights, comprising seven principles. The third, “Respect for Context,” is explained as the expectation that “companies will collect, use, and disclose personal data in ways that are consistent with the context in which consumers provide the data.” One can anticipate the contested interpretations of this principle as parties representing diverse interests vie to make theirs the authoritative one. In the paper I will discuss three possibilities and explain why (...) each does not take us far beyond the status quo, which, regulators in the United States, Europe, and beyond have found problematic. I will argue that contextual integrity offers the best way forward for protecting privacy in a world where information increasingly mediates our significant activities and relationships. Although an important goal is to influence policy, this paper aims less to stipulate explicit rules than to present an underlying justificatory, or normative rationale. Along the way, it will review key ideas in the theory of contextual integrity, its differences from existing approaches, and its harmony with basic intuition about information sharing practices and norms. (shrink)

The ethical problem of privacy lies at the core of computer ethics and cyber ethics discussions. The extensive use of personal data in digital networks poses a serious threat to the user’s right of privacy not only at the level of a user’s data integrity and security but also at the level of a user’s identity and freedom. In normative ethical theory the need for an informational self-deterministic approach of privacy is stressed with greater emphasis on the control over personal (...) data. However, scant attention has been paid on a virtue ethics approach of information privacy. Plotinus’ discussion of self-determination is related to ethical virtue, human freedom and intellectual autonomy. The Plotinian virtue ethics approach of self-determination is not primarily related to the sphere of moral action, but to the quality of the self prior to moral practice. In this paper, it is argued that the problem of information privacy should be reconsidered in the light of Plotinus’ virtue ethics and his notion of self-determination. (shrink)

Fairchild, Center for the History and Ethics of Public Health in the Department of Sociomedical Sciences at Columbia University's Mailman School of Public Health Abstract Surveillance is a cornerstone of public health. It permits us to recognize disease outbreaks, to track the incidence and prevalence of threats to public health, and to monitor the effectiveness of our interventions. But surveillance also challenges our understandings of the significance and role of privacy in a liberal democracy. In this paper we trace the (...) century-long history of public health surveillance in the United States situating that history in the context of the broad social, political, and ideological forces that have shaped our conceptions of privacy. Although we focus here on the United States, the debates over privacy that unfolded in the 1960s were repeated in many European nations. The themes we explore here, then, provide a framework for examining the relationship between privacy and public health in other contexts. CiteULike Connotea Del.icio.us What's this? (shrink)

This essay warns of eroding accountability in computerized societies. It argues that assumptions about computing and features of situations in which computers are produced create barriers to accountability. Drawing on philosophical analyses of moral blame and responsibility, four barriers are identified: 1) the problem of many hands, 2) the problem of bugs, 3) blaming the computer, and 4) software ownership without liability. The paper concludes with ideas on how to reverse this trend.

Privacy concerns involving data mining are examined in terms of four questions: What exactly is data mining? How does data mining raise concerns for personal privacy? How do privacy concerns raised by data mining differ from those concerns introduced by traditional information-retrieval techniques in computer databases? How do privacy concerns raised by mining personal data from the Internet differ from those concerns introduced by mining such data from data warehouses? It is argued that the practice of using data-mining techniques, whether (...) on the Internet or in data warehouses, to gain information about persons raises privacy concerns that go beyond concerns introduced in traditional information-retrieval techniques in computer databases and are not covered by present data-protection guidelines and privacy laws. (shrink)

This essay critically examines some classic philosophical and legal theories of privacy, organized into four categories: the nonintrusion, seclusion, limitation, and control theories of privacy. Although each theory includes one or more important insights regarding the concept of privacy, I argue that each falls short of providing an adequate account of privacy. I then examine and defend a theory of privacy that incorporates elements of the classic theories into one unified theory: the Restricted Access/Limited Control (RALC) theory of privacy. Using (...) an example involving data-mining technology on the Internet, I show how RALC can help us to frame an online privacy policy that is sufficiently comprehensive in scope to address a wide range of privacy concerns that arise in connection with computers and information technology. (shrink)

This article highlights a contemporary privacy problem that falls outside the scope of dominant theoretical approaches. Although these approaches emphasize the connection between privacy and a protected personal (or intimate) sphere, many individuals perceive a threat to privacy in the widespread collection of information even in realms normally considered "public". In identifying and describing the problem of privacy in public, this article is preliminary work in a larger effort to map out future theoretical directions.

Surveillance has become a routine, everyday occurrence ininformational societies. Many agencies have an interest in personal data, and a wide spectrum of them use searchabledatabases to classify and catalogue such data. From policingto welfare to the Internet and e-commerce, personal data havebecome very valuable, economically and administratively. Whilequestions of privacy are indeed raised by such surveillance,the processes described here have as much to do with social sorting,and thus present new problems of automated categorization of datasubjects. Privacy and data protection measures (...) do address someof the questions raised, but they tend to be limited to individualisticreadings of the situation, and not to consider issues of fairnessand equality. An ethics for everyday surveillance is proposed thatconsiders personhood as central, but highlights its social andembodied dimensions. Reductionism of practice and of analysisis thus avoided as the face comes to the fore. Hence the title. (shrink)

The primary thesis of this article is that the rights and powers of corporations--to collect, recombine, and resell personal data--have accrued in such a way as to fundamentally circumvent traditional and conventional conceptions of privacy, especially with respect to the sphere of informational privacy. In so doing, informational capitalism has also altered in fundamental ways the public and social sphere itself, the sphere through which one might expect these corporate forces and uses of technology to be controlled.

An issue about the privacy of the clustered groups designed by algorithms arises when attempts are made to access certain pieces of information about those groups that would likely be used to harm them. Therefore, limitations must be imposed regarding accessing such information about clustered groups. In the discourse on group privacy, it is argued that the right to privacy of such groups should be recognised to respect group privacy, protecting clustered groups against discrimination. According to this viewpoint, this right (...) places a duty on others, for example, private companies, institutions, and governments, to refrain from accessing such information. To defend the idea that the right to privacy should be recognised for clustered groups, at least two requirements must be satisfied. First, clustered group privacy must be conceived of as either a collective good or a participatory good. Since these forms of good are of the type from which no member of a group can be excluded from benefiting, the right to them is defined as a group right. Second, there must be group interests on which to base a group right. Group interests can be either the interests of those members that are a result of their being in the group or the interests of the group as a whole that transcend the interests of its members. However, this paper argues that clustered group privacy cannot be conceived of as either a collective or a participatory good because it is possible for some individuals to be excluded from benefiting from it. Furthermore, due to the lack of awareness among individuals that they are members of a clustered group and the nature of a clustered group itself, such groups cannot have the group interests necessary to establish a group right. Hence, the group right to privacy cannot be recognised for these groups, implying that the group right cannot be considered a means to protect clustered groups against discrimination. Instead, this paper suggests that moral principles need to be articulated within an ethics of vulnerability to identify the moral obligations of protecting vulnerable clustered groups. The duty owed to the vulnerable should involve refraining from accessing certain information about clustered groups in specific contexts. This duty is not engendered by the right to privacy of such groups; it is the duty owed to the vulnerable. The findings highlight the need to articulate moral principles regarding privacy and data protection to protect clustered groups in contexts in which accessing information about them could constitute a reason for discriminatory targeting. (shrink)

The 2010s were a golden age of information privacy research, but its policy accomplishments tell a mixed story. Despite significant progress on the development of privacy theory and compelling demonstrations of the need for privacy in practice, real achievements in privacy law and policy have been, at best, uneven. In this chapter, I outline three broad shifts in the way scholars (and, to some degree, advocates and policy makers) are approaching privacy and social media. First, a change in emphasis from (...) individual to structural approaches. Second, increasing attention to the political economy of privacy—especially the business models of information companies, such as social media platforms. And third, a deeper understanding of privacy’s role in a healthy digital public sphere. (shrink)

The essay proposes to use alienation as a heuristic and conceptual tool for the analysis of the impact of digital information and communication technologies (ICTs) on users. It follows a historical materialist understanding, according to which data can be considered as things produced in an industrial fashion. A representational interpretation, according to which data would merely reflect a given reality, is untenable. It will be argued instead to understand data as an additional layer which has a transformative impact on reality (...) as a whole. The analysis follows the early Marx in thinking of alienation as a structural condition which holds even if it is not experienced psychologically by users. Alienation means that the desire to express oneself and achieve social recognition, self-realization, and participation through the use of ICTs is incongruent to the inherent purposes and functions of these technologies. Digital platforms create the ideological illusion that users contribute to the production of data solely for their own gratification. Users, in turn, react to structural alienation either by internalizing it, in which case they may become enthusiastic data producers, or by imposing alienating conditions on other users. Finally, it will be shown that a strong notion of privacy is less suited to articulate concerns about the impact of ICTs because it expresses a desire for privilege and individual control which has become unfulfillable in the environment of data industries. The essay closes by showing some of the changes in institutional structures and behavior that could follow from the focus on alienation. (shrink)

Debates about terrorism and technology often focus on the potential uses of technology by non-state terrorist actors and by states as forms of counterterrorism. Yet, little has been written about how technology shapes how we think about terrorism. In this chapter I argue that technology, and the language we use to talk about technology, constrains and shapes our understanding of the nature, scope, and impact of terrorism, particularly in relation to state terrorism. After exploring the ways in which technology shapes (...) moral thinking, I use two case studies to demonstrate how technology simultaneously hides and enables terroristic forms of state violence: police control technologies and Unmanned Aerial Vehicles (UAVs), or drones. In both these cases, I argue that features of these technologies, combined with a narrative of precision and efficiency, serves to mask the terroristic nature of the violence that these practices inflict and reinforces the moral exclusion of those against whom these technologies are deployed. In conclusion, I propose that identifying acts of terrorism requires a focus on the impact of technologies of violence (whether they are “high tech” or not) on those most affected, regardless of whether users of these technologies conceive of their actions as terroristic. (shrink)

Due to the technology of machine learning, new breakthroughs are currently being achieved with constant regularity. By using machine learning techniques, computer applications can be developed and used to solve tasks that have hitherto been assumed not to be solvable by computers. If these achievements consider applications that collect and process personal data, this is typically perceived as a threat to information privacy. This paper aims to discuss applications from both fields of personality and image analysis. These applications are often (...) criticized by reference to the protection of privacy. This paper critically questions this approach. Instead of solely using the concept of privacy to address the risks of machine learning, it is increasingly necessary to consider and implement ethical anti-discrimination concepts, too. In many ways, informational privacy requires individual information control. However, not least because of machine learning technologies, information control has become obsolete. Hence, societies need stronger anti-discrimination tenets to counteract the risks of machine learning. (shrink)

With the increase in the costs of providing education and concerns about financial responsibility, heightened consideration of accountability and results, elevated awareness of the range of teacher skills and student learning styles and needs, more focus is being placed on the promises offered by online software and educational technology. One of the most heavily marketed, exciting and controversial applications of edtech involves the varied educational programs to which different students are exposed based on how big data applications have evaluated their (...) likely learning profiles. Characterized most often as ‘personalized learning,’ these programs raise a number of ethical concerns especially when used at the K-12 level. This paper analyzes the range of these ethical concerns arguing that characterizing them under the general rubric of ‘privacy’ oversimplifies the concerns and makes it too easy for advocates to dismiss or minimize them. Six distinct ethical concerns are identified: information privacy; anonymity; surveillance; autonomy; non-discrimination; and ownership of information. Particular attention is paid to whether personalized learning programs raise concerns similar to those raised about educational tracking in the 1950s. The paper closes with discussion of three themes that are important to consider in ethical and policy discussions. (shrink)

Experimental design is one aspect of a scientific method. A well-designed, properly conducted experiment aims to control variables in order to isolate and manipulate causal effects and thereby maximize internal validity, support causal inferences, and guarantee reliable results. Traditionally employed in the natural sciences, experimental design has become an important part of research in the social and behavioral sciences. Experimental methods are also endorsed as the most reliable guides to policy effectiveness. Through a discussion of some of the central concepts (...) associated with experimental design, including controlled variation and randomization, this chapter will provide a summary of key ethical issues that tend to arise in experimental contexts. In addition, by exploring assumptions about the nature of causation and by analyzing features of causal relationships, systems, and inferences in social contexts, this chapter will summarize the ways in which experimental design can undermine the integrity of not only social and behavioral research but policies implemented on the basis of such research. (shrink)

This paper distinguishes between two main questions regarding the notion of privacy: “What is privacy?” and “Why do/should we value privacy?”. In developing a social-ontological recognitional model of privacy, it gives an answer to the first question. According to the SORM, Privacy is a second order quality of roles within social practices. It is a function of who is or should be recognized as a “standard authority”. Enjoying standard authority means to have the right to interpret and contest role behavior (...) and role obligations within a specific practice, as well as evaluate the normative structure, the fundamental practice norms as well as the roles and their status. The SORM utilizes the concept of standard authority to explicate privacy with regard to two categories that capture the relevant phenomena of privacy: decisional and informational privacy. Within a practice, an actor is said to have decisional privacy if she as a BCR does not recognize bearers of accidental roles as standard authorities. Vice versa, an actor is said to enjoy informational privacy if all other BCRs recognize her as a standard authority. Additionally, the requirement of mutual recognition by the practice participants as standard authorities introduces a “weak normativity” into the theory, which can be used to identify deficient privacy arrangements within practices. (shrink)

This paper links the conjecture that the physical world is a virtual reality to the findings of modern physics. What is usually the subject of science fiction is here proposed as a scientific theory open to empirical evaluation. We know from physics how the world behaves, and from computing how information behaves, so whether the physical world arises from ongoing information processing is a question science can evaluate. A prima facie case for the virtual reality conjecture is presented. If a (...) photon is a pixel on a multi-dimensional grid that gives rise to space, the speed of light could reflect its refresh rate. If mass, charge and energy all arise from processing, the many conservation laws of physics could reduce to a single law of dynamic information conservation. If the universe is a virtual reality, then its big bang creation could be simply when the system was booted up. Deriving core physics from information processing could reconcile relativity and quantum theory, with the former how processing creates the space-time operating system and the latter how it creates energy and matter applications. (shrink)

The starting point of this article is that employees’ chances of securing reasonable expectations of privacy at work must be better protected. A dependency asymmetry between employer and job-applicant implies that prospective employees are in a disadvantaged position vis à vis the employer regarding the chances of defending their reasonable interests. Since an increased usage of work related surveillance will, to a larger extent, require of job-applicants that they negotiate their privacy interests in employment contracting, it is important to consider (...) means of strengthening employees’ negotiating power. This article emphasizes the importance of contextualizing consent for contractual agreements to be ethically acceptable. (shrink)

This article reports the critical discourse analysis of www.lifeandliberty.gov, a website constructed by the US Department of Justice, with the expressed intention to explain provisions of the USA PATRIOT Act. The analysis reveals a four-part deductive argument that asserts the Act's ability to preserve liberty while enhancing security. Discursive themes appealing to governmental responsibility and authority, national security, individual liberty, historical consistency and legislative efficiency and efficacy support the argument's claims. Despite claims of ‘educating citizens’, the site's discourse is more (...) similar to propaganda than education, relying on one-sided emotional appeals and fallacious logical propositions. The discourse constructs subjectivities of the government as protector, the American citizen as innocent and terrorists as a foreign menace, in an attempt to preclude dissent of the USA PATRIOT Act specifically, and the US Government's terrorism efforts generally. As such, this discourse functions hegemonically to produce what Foucault has termed ‘docile bodies’. (shrink)

We defend public anonymity in the light of the threat posed by digital technology. Once people could reasonably assume that they were fairly anonymous when they left the house. They neither drove nor walked around with GPS devices; they paid their highway tolls in cash; they seldom bought on credit; and no cameras marked their strolls in the park or their walks down the street. Times have changed. We begin with a brief discussion of the concept of anonymity. We then (...) argue that public anonymity helps promote privacy in public. Next, we argue that public anonymity is worth protecting insofar as it promotes autonomy. After that we attempt to show how digital technology threatens public anonymity in the context of CCTV and GPS devices. We argue for a significant scaling back of public surveillance. We close with some thoughts on what we take to be the gratuitous costs imposed on those who would attempt to preserve their anonymity in public. (shrink)

This paper identifies two conceptions of security in contemporary concerns over the vulnerability of computers and networks to hostile attack. One is derived from individual-focused conceptions of computer security developed in computer science and engineering. The other is informed by the concerns of national security agencies of government as well as those of corporate intellectual property owners. A comparative evaluation of these two conceptions utilizes the theoretical construct of “securitization,”developed by the Copenhagen School of International Relations.

The paper introduces an approach to privacy enhancing technologies that sees privacy not merely as an individual right, but as a public good. This idea finds its correspondence in our approach to privacy protection through obfuscation, where everybody in a group takes a small privacy risk to protect the anonymity of fellow group members. We show how these ideas can be computationally realised in an Investigative Data Acquisition Platform. IDAP is an efficient symmetric Private Information Retrieval protocol optimised for the (...) specific purpose of facilitating public authorities’ enquiries for evidence. (shrink)

ABSTRACT:The oft-cited privacy paradox is the perceived disconnect between individuals’ stated privacy expectations, as captured in surveys, and consumer market behavior in going online: individuals purport to value privacy yet still disclose information to firms. The goal of this paper is to empirically examine the conceptualization of privacy postdisclosure assumed in the privacy paradox. Contrary to the privacy paradox, the results here suggest consumers retain strong privacy expectations even after disclosing information. Privacy violations are valued akin to security violations in (...) creating distrust in firms and in consumer willingness to engage with firms. This paper broadens the scope of corporate responsibility to suggest firms have a positive obligation to identify reasonable expectations of privacy of consumers. In addition, research perpetuating the privacy paradox, through the mistaken framing of disclosure as proof of anti-privacy behavior, gives license to firms to act contrary to the interests of consumers. (shrink)

This essay critically analyzes Luciano Floridi’s ontological theory of informational privacy. Organized into two main parts, Part I examines some key foundational components of Floridi’s privacy theory and it considers some of the ways in which his framework purports to be superior to alternative theories of informational privacy. Part II poses two specific challenges for Floridi’s theory of informational privacy, arguing that an adequate privacy theory should be able to: (i) differentiate informational privacy from other kinds of privacy, including psychological (...) privacy; and (ii) distinguish between descriptive and normative aspects of informational privacy in a way that differentiates a (mere) loss of privacy from a violation of privacy. I argue that Floridi’s privacy theory, in its present form, does not explicitly address either challenge. However, I also argue that his ontological theory provides us with a novel way of analyzing the impact that digital technologies have had for informational privacy. I conclude by suggesting that Floridi’s privacy framework can be interpreted as containing the elements of a “personality theory of privacy,” which would be useful to examine in a separate study. (shrink)

This article examines the privacy of personal medical information in the health research context. Arguing that biomedical research in Canada has been caught up in the government's broader neoliberal policy agenda that has positioned biotechnology as a strategic driver of economic growth, the author discusses the tension between informational privacy and the need for medical information for research purposes. Consideration is given to the debate about whether privacy for medical information serves or hinders the “public good” in respect of medical (...) research and to discussions of informed consent as an element of “fair information practices” designed to safeguard the privacy of personal information, including attempts to subvert requirements for informed consent in the medical research context. (shrink)

In the practice of medicine there has long been a conflict between patient management and respect for patient autonomy. In recent years this conflict has taken on a new form as patient management has increasingly been shifted from physicians to insurers, employers, and health care bureaucracies. The consequence has been a diminshment of both physician and patient autonomy and a parallel diminishment of medical record confidentiality. Although the new managers pay lip service to the rights of patients to confidentiality of (...) their records, in fact they advocate very liberal medical records access policies. They argue that a wide range of parties has a need to know the contents of individually identifiable medical records in order to control costs, promote quality of care, and undertake research in the public interest. Broad interpretations of the need to know, however, are at odds with strict interpretations of the right to confidentiality. Strict confidentiality policies require that, with few exceptions, patient consent be obtained whenever a patient's record is used outside the treatment context. The traditional criterion for overriding the consent requirement has been that without the override some harm would directly result. This rule is now challenged by the claim that patients have a duty to make their records available for a wide range of research and public health purposes. The longstanding tension between physician responsibility for patient welfare and respect for patient autonomy is being replaced by a debatable requirement that both physician and patient autonomy be subordinated to the goals of data collection and analysis. (shrink)

To be human is to be engaged in relationships of friendship, trust, and love. These relationships cannot flourish unless information essential to each relationship is kept within the confines of that relationship--unless the individuals involved have knowledge of, and control over, the information about themselves that is available within their particular relationships. This knowledge of and control over information about oneself is the core of "privacy"; privacy's role in maintaining relationships explains its importance to us. Technological advances in computing have (...) made it possible to glean bits of information about an individual from a variety of relationships--personal, professional, medical, financial--and to combine them into a "virtual mosaic" of that individual. In plucking information about an individual from various discrete relationships, and making it available in yet other relationships, this activity violates that individual's right to privacy. (shrink)

How one thinks about the relationship between individual autonomy (sometimes referred to as individual willpower or human agency) and technology can influence the way legal thinkers develop policy at the intersection of law and technology. Perspectives that fall toward the `machines control us' end of the spectrum may support more interventionist legal policies while those who identify more closely with the `we are in charge of machines' position may refuse to interfere with technological developments. The concept of soft determinism charts (...) a middle-ground between these two positions and could assist in the formulation of a general theory of the relationship between law and technology. Soft determinism maintains that technological developments are embedded in social, political, economic and other processes, and serve to guide and, potentially, configure future actions and relationships with these technologies, their users, and their subjects: while past technology develops shape the present, individuals and groups can still exert control over these technological developments. (shrink)