The paper introduces an approach to privacy enhancing technologies that sees privacy not merely as an individual right, but as a public good. This idea finds its correspondence in our approach to privacy protection through obfuscation, where everybody in a group takes a small privacy risk to protect the anonymity of fellow group members. We show how these ideas can be computationally realised in an Investigative Data Acquisition Platform. IDAP is an efficient symmetric Private (...) Information Retrieval protocol optimised for the specific purpose of facilitating public authorities’ enquiries for evidence. (shrink)

The accuracy principle is one of the key standards of informational privacy. It epitomises the obligation for those processing personal data to keep their records accurate and up-to-date, with the aim of protecting individuals from unfair decisions. Currently, however, different practices being put in place in order to enhance the protection of individuals appear to deliberately rely on the use of ‘inaccurate’ personal information. This article explores such practices and tries to assess their potential for privacy protection, giving (...) particular attention to their legal implications and to related ethical issues. Ultimately, it suggests that the use of ‘inaccurate’ data can potentially play a useful role to preserve the informational autonomy of the individual, and that any understandings of privacy or personal data protection that would tend to unduly limit such potential should be critically questioned. (shrink)

This article addresses the question of whether an expectation of privacy is reasonable in the face of new technologies of surveillance, by developing a principle that best fits our intuitions. A "no sense enhancement" principle which would rule out searches using technologically sophisticated devices is rejected. The paper instead argues for the "mischance principle," which proscribes uses of technology that reveal what could not plausibly be discovered accidentally without the technology, subject to the proviso that searches that serve (...) a great public good that clearly outweighs minimal intrusions upon privacy are permissible. Justifications of the principle are discussed, including reasons why we should use the principle and not rely solely on a utilitarian balancing test. The principle is applied to uses of aerial photography and heat-detection devices. (shrink)

We argue that future database systems must provide autonomy for individuals for the privacy of data they manage. We propose a design for such a system, identify challenges and problems, and suggest some approaches to these. We enunciate the reasons for informational self-determination systems, which include legal, organizational and technical issues. Our main goal is to achieve a widely-accepted realistic and practical solution in order to ensure privacy for individuals in our future world, yet without hindering business and (...) security. (shrink)

This paper explores the degree of privacy athletes can expect and demand in the era of genetic technology in sport. Detecting genetic enhancements in sport, and consequently doping violations, using genetic tests is problematic because testing requires access to athletes' genetic information, and accessing genetic information creates many potential privacy issues and concerns throughout the world. Whether it is morally acceptable to subject athletes to the tests used to detect genetic modifications in sport is taken up in this (...) paper, and I argue that the elite sport movement faces an ethical dilemma since rules prohibit athletes from utilising certain substances, methods and procedures, but the testing methods needed to ensure compliance with the rules are controversial and at odds with a reasonable expectation of privacy. (shrink)

A panel held at the International Conference on Information Systems, December 5–7, 1993, addressed the importance and ethicality of several issues relating to ethics and information technology use. The substance of the debate and results of audience votes on the issues are presented in this paper as a means of initiating a broader debate on the issues, for it is with debate that we reach a group consensus on acceptable behavior and practice. With consensus, we can begin to develop codes (...) and policies that are feasible and practical for ethical computer use.Specific dilemmas debated involved the issues of privacy and ownership, including the ethicality of using company resources for personal use and monitoring compliance to company policies about computer use. In general, we found little consensus about ethicality of any of the types of conduct, although we found a high degree of consensus that the debated issues were important and should continue to be discussed. The final question concerned policies and codes. While policies and codes were believed to be necessary, they were also perceived as ineffective. Several suggestions for practical action to enhance the efficacy of ethical codes are presented. (shrink)

Informational self-determination refers to the right or ability of individuals to exercise personal control over the collection, use and disclosure of their personal data by others. The basis of modern privacy laws and practices around the world, informational privacy has become a challenging concept to protect and promote in a world of ubiquitous and unlimited data sharing and storage among organizations. The paper advocates a “user-centric” approach to managing personal data online. However, user-centricity can be problematic when the (...) user—the data subject—is not directly involved in transactions involving the disclosure, collection, processing, and storage of their personal data. Identity data is increasingly being generated, used and stored entirely in the networked “Cloud”, where it is under control of third parties. The paper explores possible technology solutions to ensure that individuals will be able to exercise informational self-determination in an era of network grid computing, exponential data creation, ubiquitous surveillance and rampant online fraud. The paper describes typical “Web 2.0” use scenarios, suggests some technology building blocks to protect and promote informational privacy online, and concludes with a call to develop a privacy-respective information technology ecosystem for identity management. Specifically, the paper outlines four fundamental technological approaches to help assure widespread and enduring online participation, confidence and trust in the information society. (shrink)

Differential privacy (DP) aims to confer data processing systems with inherent privacy guarantees, offering strong protections for personal data. But DP’s approach to privacy carries with it certain assumptions about how mathematical abstractions will be translated into real-world systems, which—if left unexamined and unrealized in practice—could function to shield data collectors from liability and criticism, rather than substantively protect data subjects from privacy harms. This article investigates these assumptions and discusses their implications for using DP to (...) govern data-driven systems. In Parts 1 and 2, we introduce DP as, on one hand, a mathematical framework and, on the other hand, a kind of real-world sociotechnical system, using a hypothetical case study to illustrate how the two can diverge. In Parts 3 and 4, we discuss the way DP frames privacy loss, data processing interventions, and data subject participation, arguing it could exacerbate existing problems in privacy regulation. In part 5, we conclude with a discussion of DP’s potential interactions with the endogeneity of privacy law, and we propose principles for best governing DP systems. In making such assumptions and their consequences explicit, we hope to help DP succeed at realizing its promise for better substantive privacy protections. (shrink)

As privacy concerns among consumers rise, service providers increasingly want to provide services that support privacy enhancing technologies. At the same time, online service providers must be able to protect themselves against misbehaving users. For instance, users that do not pay their bill must be held accountable for their behavior. This tension between privacy and accountability is fundamental, however a tradeoff is not always required. In this article we propose the concept of a time capsule, (...) that is, a verifiable encryption with timed and revocable decryptability. The time capsule together with its related protocols offer support of privacy while retaining strong accountability. In our scheme an honest user may enjoy full anonymity, but dishonest users who do not pay their bill have their identity revealed. In contrast to existing revocable anonymity systems, our proposed scheme requires less trust in an external authority, while simultaneously making accountability easier (and less costly) to achieve. (shrink)

Profiling technologies are the facilitating force behind the vision of Ambient Intelligence in which everyday devices are connected and embedded with all kinds of smart characteristics enabling them to take decisions in order to serve our preferences without us being aware of it. These technological practices have considerable impact on the process by which our personhood takes shape and pose threats like discrimination and normalisation. The legal response to these developments should move away from a focus on entitlements to (...) personal data, towards making transparent and controlling the profiling process by which knowledge is produced from these data. The tendency in intellectual property law to commodify information embedded in software and profiles could counteract this shift to transparency and control. These rights obstruct the access and contestation of the design of the code that impacts one’s personhood. This triggers a political discussion about the public nature of this code and forces us to rethink the relations between property, privacy and personhood in the digital age. (shrink)

An accountability-based privacy governance model is one where organizations are charged with societal objectives, such as using personal information in a manner that maintains individual autonomy and which protects individuals from social, financial and physical harms, while leaving the actual mechanisms for achieving those objectives to the organization. This paper discusses the essential elements of accountability identified by the Galway Accountability Project, with scholarship from the Centre for Information Policy Leadership at Hunton & Williams LLP. Conceptual _Privacy by Design_ (...) principles are offered as criteria for building privacy and accountability into organizational information management practices. The authors then provide an example of an organizational control process that uses the principles to implement the essential elements. Initially developed in the ‘90s to advance privacy-enhancing information and communication technologies, Dr. Ann Cavoukian has since expanded the application of _Privacy by Design_ principles to include business processes. (shrink)

Background Outbreaks of infectious disease cause serious and costly health and social problems. Two new technologies – pathogen whole genome sequencing and Big Data analytics – promise to improve our capacity to detect and control outbreaks earlier, saving lives and resources. However, routinely using these technologies to capture more detailed and specific personal information could be perceived as intrusive and a threat to privacy. Method Four community juries were convened in two demographically different Sydney municipalities and two (...) regional cities in New South Wales, Australia to elicit the views of well-informed community members on the acceptability and legitimacy of: making pathogen WGS and linked administrative data available for public health researchusing this information in concert with data linkage and machine learning to enhance communicable disease surveillance systems Fifty participants of diverse backgrounds, mixed genders and ages were recruited by random-digit-dialling and topic-blinded social-media advertising. Each jury was presented with balanced factual evidence supporting different expert perspectives on the potential benefits and costs of technologically enhanced public health research and communicable disease surveillance and given the opportunity to question experts. Results Almost all jurors supported data linkage and WGS on routinely collected patient isolates for the purposes of public health research, provided standard de-identification practices were applied. However, allowing this information to be operationalised as a syndromic surveillance system was highly contentious with three juries voting in favour, and one against by narrow margins. For those in favour, support depended on several conditions related to system oversight and security being met. Those against were concerned about loss of privacy and did not trust Australian governments to run secure and effective systems. Conclusions Participants across all four events strongly supported the introduction of data linkage and pathogenomics to public health research under current research governance structures. Combining pathogen WGS with event-based data surveillance systems, however, is likely to be controversial because of a lack of public trust, even when the potential public health benefits are clear. Any suggestion of private sector involvement or commercialisation of WGS or surveillance data was unanimously rejected. (shrink)

Profiling technologies are the facilitating force behind the vision of Ambient Intelligence in which everyday devices are connected and embedded with all kinds of smart characteristics enabling them to take decisions in order to serve our preferences without us being aware of it. These technological practices have considerable impact on the process by which our personhood takes shape and pose threats like discrimination and normalisation. The legal response to these developments should move away from a focus on entitlements to (...) personal data, towards making transparent and controlling the profiling process by which knowledge is produced from these data. The tendency in intellectual property law to commodify information embedded in software and profiles could counteract this shift to transparency and control. These rights obstruct the access and contestation of the design of the code that impacts one’s personhood. This triggers a political discussion about the public nature of this code and forces us to rethink the relations between property, privacy and personhood in the digital age. (shrink)

In November, 2009, a prominent group of privacy professionals, business leaders, information technology specialists, and academics gathered in Madrid to discuss how the next set of threats to privacy could best be addressed.The event, Privacy by Design: The Definitive Workshop, was co-hosted by my office and that of the Israeli Law, Information and Technology Authority. It marked the latest step in a journey that I began in the 1990’s, when I first focused on enlisting the support of (...) technologies that could enhance privacy. Back then, privacy protection relied primarily upon legislation and regulatory frameworks—in an effort to offer remedies for data breaches, after they had occurred. As information technology became increasingly interconnected and the volume of personal information collected began to explode, it became clear that a new way of thinking about privacy was needed.Privacy-Enhancing Technologies paved the way for that new direction, highlighting how the universal pr .. (shrink)

Neural engineers and clinicians are starting to translate advances in electrodes, neural computation, and signal processing into clinically useful devices to allow control of wheelchairs, spellers, prostheses, and other devices. In the process, large amounts of brain data are being generated from participants, including intracortical, subdural and extracranial sources. Brain data is a vital resource for BCI research but there are concerns about whether the collection and use of this data generates risk to privacy. Further, the nature of BCI (...) research involves understanding and making inferences about device users’ mental states, thoughts, and intentions. This, too, raises privacy concerns by providing otherwise unavailable direct or privileged access to individuals mental lives. And BCI-controlled prostheses may change the way clinical care is provided and the type of physical access caregivers have to patients. This, too, has important privacy implications. I In this chapter we examine several of these privacy concerns in light of prominent views of the nature and value of privacy. We argue that increased scrutiny needs to be paid to privacy concerns arising from Big Data and decoding of mental states, but that BCI research may also provide opportunity for individuals to enhance their privacy. (shrink)

PurposeThis paper aims to argue that traditional ethical theories used in disaster response may be inadequate and particularly strained by the emergence of new technologies and social media, particularly with regard to privacy. The paper suggests incorporation of care ethics into the disaster ethics nexus to better include the perspectives of disaster affected communities.Design/methodology/approachThis paper presents a theoretical examination of privacy and care ethics in the context of social media/digitally enhanced disaster response.FindingsThe paper proposes an ethics of (...) care can fruitfully by used by public and private agents in disaster management. Its relational ontology restores the priority of fostering good relationships between stakeholders, thus giving central importance to values such as transparency and trust and the situated knowledge of disaster-affected communities.Research limitations/implicationsThis paper presents theoretical research and is limited by the availability of empirical data. There is opportunity for future research to evaluate the impact of a conscious adoption of an ethics of care by disaster management agents.Practical implicationsAn ethos of care ethics needs to be mainstreamed into disaster management organisations and digital initiatives.Social implicationsThis paper argues that power asymmetry in disaster response renders the public vulnerable to abuse, and that the adoption of care ethics can support disaster management agents in recognising this power imbalance and wielding power responsibly.Originality/valueThis paper examines the applicability of an alternative ethical framework to novel circumstances. (shrink)

An introductory message from Peter Hustinx, European Data Protection Supervisor, delivered at Privacy by Design: The Definitive Workshop. This presentation looks back at the origins of Privacy by Design, notably the publication of the first report on “Privacy Enhancing Technologies” by a joint team of the Information and Privacy Commissioner of Ontario, Canada and the Dutch Data Protection Authority in 1995. It looks ahead and adresses the question of how the promises of these concepts (...) could be delivered in practice. (shrink)

With the proliferation of networked electronic communication came daunting capabilities to collect, process, combine and store data, resulting in hitherto unseen transformational pressure on the concepts of trust, security and privacy as we know them. The Future Internet will bring about a world where real life will integrate physical and digital life. Technology development for data linking and mining, together with unseen data collection, will lead to unwarranted access to personal data, and hence, privacy intrusion. Trust and identity (...) lie at the basis of many human interactions and transactions, and societies have developed legitimate concern for privacy being essential for freedom and creativity. The burgeoning development of the Information Society, particularly during the past fifteen years, transcended the societal readiness to respond to the transformational change evoked by ICT. We have reached the eleventh hour for the preservation of trust and privacy as elements that can be transposed into our digital future. Europe has been at the forefront in recognizing the importance of privacy protection in relation to digital data, witness the advanced European legislation in this domain. The European Commission recognizes that appropriate measures need to combine technology development with legal means, user awareness and tools supporting data controllers to comply with law in an accountable and transparent way, and that empower users with a controlling stake in managing their personal data. Activities are underway at many levels. European RTD programmes play their role in supporting research in trustworthy ICT, privacy enhancing technologies, privacy-by-design in service layers as well as in networks, enabling technologies such as cryptography, and in generalized frameworks for trust and privacy-protective identity management. (shrink)

With the proliferation of networked electronic communication came daunting capabilities to collect, process, combine and store data, resulting in hitherto unseen transformational pressure on the concepts of trust, security and privacy as we know them. The Future Internet will bring about a world where real life will integrate physical and digital life. Technology development for data linking and mining, together with unseen data collection, will lead to unwarranted access to personal data, and hence, privacy intrusion. Trust and identity (...) lie at the basis of many human interactions and transactions, and societies have developed legitimate concern for privacy being essential for freedom and creativity. The burgeoning development of the Information Society, particularly during the past fifteen years, transcended the societal readiness to respond to the transformational change evoked by ICT. We have reached the eleventh hour for the preservation of trust and privacy as elements that can be transposed into our digital future. Europe has been at the forefront in recognizing the importance of privacy protection in relation to digital data, witness the advanced European legislation in this domain. The European Commission recognizes that appropriate measures need to combine technology development with legal means, user awareness and tools supporting data controllers to comply with law in an accountable and transparent way, and that empower users with a controlling stake in managing their personal data. Activities are underway at many levels. European RTD programmes play their role in supporting research in trustworthy ICT, privacy enhancing technologies, privacy-by-design in service layers as well as in networks, enabling technologies such as cryptography, and in generalized frameworks for trust and privacy-protective identity management. (shrink)

Purpose The proliferation of surveillance-enhancing laws, policies and technologies across African countries deepens the risk of privacy rights breaches, as well as the risks of adverse profiling and social sorting. There is a heightened need for dedicated advocacy and activism to consistently demand accountability and transparency from African states, governments and their allies regarding surveillance. The purpose of this paper is to understand the issue frames that accompany anti-surveillance and privacy advocacy in Ghana and the related (...) implications. Design/methodology/approach Using a qualitative and interpretivist approach, the author focuses on three different surveillance-oriented incidents/programs in Ghana and analyzes the frames underpinning the related advocacy and narratives of various non-state actors. Findings Privacy and anti-surveillance advocacy in Ghana tends to be less framed in the context of privacy rights and is more driven by concerns about corruption and value for money. Such pecuniary emphasis is rational per issue salience calculations as it elevates principles of economic probity, transparency and accountability and pursues a high public shock value and resonance. Practical implications Economics-centered critiques of surveillance could be counterproductive as they create a low bar for surveillance promoters and sustains a culture of permissible statist intrusions into citizens’ lives once economic virtues are satisfied. Originality/value While anti-surveillance and privacy advocacy is budding across African countries, little is known about its nature, frames and modus compared to such advocacy in European and North American settings. To the best of the author’s knowledge, this is likely the first paper or one of the first dedicated fully to anti-surveillance and advocacy in Africa. (shrink)

Mobile health services have been widely used in medical services and health management through mobile devices and multiple channels, such as smartphones, wearable equipment, healthcare applications, and medical platforms. However, the number of the users who are currently receiving the mHealth services is small. In China, more than 70% of internet users have never used mHealth services. Such imbalanced situation could be attributed to users’ traditional concept of medical treatment, psychological factors and privacy concerns. The purpose of this study (...) is to explore the direct and indirect effects of mHealth users’ self-efficacy and privacy concerns on their intention to adopt mHealth services, providing guidelines for mHealth service providers to enhance users’ intention of adoption. A questionnaire was designed by the research team and 386 valid responses were collected from domestic participants in China. Based on the unified theory of acceptance and use of technology model, a research model integrated self-efficacy and privacy concerns was constructed to investigate their effects on users’ intention to adopt mobile mHealth services. The results show that self-efficacy could facilitate users’ intention to adopt mHealth services, and had a significantly positive effect on perceived ubiquity, effort expectancy, performance expectancy and subjective norm. This study verifies the direct and indirect effects of self-efficacy and privacy concerns on users’ intention to adopt mHealth services, providing a different perspective for studying mHealth adoption behavior. The findings could provide guidelines for mHealth service providers to improve their service quality and enhance users’ intention of adoption. (shrink)

Laws set requirements that force organizations to assess the security and privacy of their IT systems and impose them to implement minimal precautionary security measures. Several IT solutions (e.g., Privacy Enhancing Technologies, Access Control Infrastructure, etc.) have been proposed to address security and privacy issues. However, understanding why, and when such solutions have to be adopted is often unanswered because the answer comes only from a broader perspective, accounting for legal and organizational issues. Security engineers (...) and legal experts should analyze the business goals of a company and its organizational structure and derive from there the points where security and privacy problems may arise and which solutions best fit such (legal) problems. The paper investigates the methodological support for capturing security and privacy requirements of a concrete health care provider. (shrink)

Technology used in online marketing has advanced to a state where collection, enhancement and aggregation of information are instantaneous. This proliferation of customer information focused technology brings with it a host of issues surrounding customer privacy. This article makes two key contributions to the debate concerning digital privacy. First, we use theories of justice to help understand the way consumers conceive of, and react to, privacy concerns. Specifically, it is argued that an important component of consumers' (...) class='Hi'>privacy concerns relates to fairness judgments, which in turn comprise of the two primary components of distributive and procedural justice. Second, we make a number of prescriptions, aimed at both firms and regulators, based on the notion that consumers respond to perceived privacy violations in much the same way they would respond to an unfair exchange. (shrink)

In times of national crisis, citizens are often asked to trade liberty and privacy for security. And why not, it is argued, if we can obtain a fair amount of security for just a little privacy? The surveillance that enhances security need not be overly intrusive or life altering. It is not as if government agents need to physically search each and every suspect or those connected to a suspect. Advances in digital technology have made such surveillance relatively (...) unobtrusive. Video monitoring, global positioning systems, airport body scanners, and biometric technologies, along with data surveillance, provide law enforcement officials with monitoring tools, without also unduly burdening those being watched. Against this view are those who maintain that we should be worried about trading privacy for security. Criminals and terrorists, it is argued, are nowhere near as dangerous as governments. There are too many examples for us to deny Lord Acton’s dictum that “power tends to corrupt, and absolute power corrupts absolutely.” If information control yields power and total information awareness radically expands that power, then we have good reason to pause before trading privacy for security. (shrink)

Background Protecting a person’s right to privacy and confidentiality is important in healthcare services. As future health professionals, nursing students should bear the same responsibility as qualified health professionals in protecting patient privacy. Objectives To investigate nursing students’ practices of patient privacy protection and to identify factors associated with their practices. Research design A cross-sectional study design was adopted. A two-part survey was used to collect two types of data on nursing students: (1) personal characteristics, including demographics, (...) clinical experience and use of information and communication technology and social media and (2) practice of patient privacy protection, collected using the Patient Privacy Scale. Participants and research context: A total of 319 nursing students aged 18 or above, studying pre-registration nursing programmes and who had attended at least one block of clinical placement, were recruited from a university in Hong Kong. Ethical considerations The study received ethical approval from the Survey and Behavioural Research Ethics Committee of the Chinese University of Hong Kong. The participants were informed of the study aim and written consent was obtained before completing the survey. Findings: The mean total score on the Patient Privacy Scale was 119.7 out of 135. Nursing students who were regular users of Instagram and those who had never taken photographs with patients and hence did not need to obtain patient consent were associated with better practices of patient privacy protection (higher total scores on the Patient Privacy Scale). Conclusions The findings improve our understanding of nursing students’ practice of patient privacy protection and the associated factors. This will inform the development and revision of current strategies to enhance nursing students’ practice of patient privacy protection, especially their use of social media. (shrink)

Technology used in online marketing has advanced to a state where collection, enhancement and aggregation of information are instantaneous. This proliferation of customer information focused technology brings with it a host of issues surrounding customer privacy. This article makes two key contributions to the debate concerning digital privacy. First, we use theories of justice to help understand the way consumers conceive of, and react to, privacy concerns. Specifically, it is argued that an important component of consumers’ (...) class='Hi'>privacy concerns relates to fairness judgments, which in turn comprise of the two primary components of distributive and procedural justice. Second, we make a number of prescriptions, aimed at both firms and regulators, based on the notion that consumers respond to perceived privacy violations in much the same way they would respond to an unfair exchange. (shrink)

As libraries begin to embrace Web 2.0 technologies to serve patrons—ushering in the era of Library 2.0—unique dilemmas arise in the realm of information ethics, especially regarding patron privacy. The norms of Web 2.0 promote the open sharing of information—often personal information—and the design of many Library 2.0 services capitalize on access to patron information and might require additional tracking, collection, and aggregation of patron activities. Thus, embracing Library 2.0 potentially threatens the traditional ethics of librarianship, where protecting (...) patron privacy and intellectual freedom has been held paramount. The question is not whether libraries will move toward Library 2.0, but how they will do it, and whether they can preserve the contextual integrity of patron privacy and maintain their professional librarian ethic, while also providing enhanced services to their patrons. This article will provide an ethical examination of the emergence of new Library 2.0 tools and technologies in relation to existing ethical norms of information flow within the library context. By doing so, librarians and information professionals will be better situated to avoid—or at least renegotiate—the impending Faustian bargain regarding patron privacy in the "2.0" era. (shrink)

This paper analyzes ethical aspects of the new paradigm of Ambient Intelligence, which is a combination of Ubiquitous Computing and Intelligent User Interfaces (IUI’s). After an introduction to the approach, two key ethical dimensions will be analyzed: freedom and privacy. It is argued that Ambient Intelligence, though often designed to enhance freedom and control, has the potential to limit freedom and autonomy as well. Ambient Intelligence also harbors great privacy risks, and these are explored as well.

Artificial intelligence (AI) technologies in medicine are gradually changing biomedical research and patient care. High expectations and promises from novel AI applications aiming to positively impact society raise new ethical considerations for patients and caregivers who use these technologies. Based on a qualitative content analysis of semi-structured interviews and focus groups with healthcare professionals (HCPs), patients, and family members of patients with Parkinson’s Disease (PD), the present study investigates participant views on the comparative benefits and problems of using (...) human versus AI predictive computer vision health monitoring, as well as participants’ ethical concerns regarding these technologies. Participants presumed that AI monitoring would enhance information sharing and treatment, but voiced concerns about data ownership, data protection, commercialization of patient data, and privacy at home. They highlighted that privacy issues at home and data security issues are often linked and should be investigated together. Findings may help technologists, HCPs, and policymakers determine how to incorporate stakeholders’ intersecting but divergent concerns into developing and implementing AI PD monitoring tools. (shrink)

Advances in science and technology frequently raise new ethical, legal, and social issues, and developments in neuroscience and neuroimaging technology are no exception. Within the field of neuroethics, leading scientists, ethicists, and humanists are exploring the implications of efforts to image, study, treat, and enhance the human brain.This article focuses on one aspect of neuroethics: the confidentiality and privacy implications of advances in functional magnetic resonance imaging. Following a brief orientation to fMRI and an overview of some of its (...) current and proposed uses, this article highlights key confidentiality and privacy issues raised by fMRI in the contexts of health care, research, employment, insurance, criminal justice, litigation, and cognitive privacy. (shrink)

Advances in science and technology frequently raise new ethical, legal, and social issues, and developments in neuroscience and neuroimaging technology are no exception. Within the field of neuroethics, leading scientists, ethicists, and humanists are exploring the implications of efforts to image, study, treat, and enhance the human brain.This article focuses on one aspect of neuroethics: the confidentiality and privacy implications of advances in functional magnetic resonance imaging. Following a brief orientation to fMRI and an overview of some of its (...) current and proposed uses, this article highlights key confidentiality and privacy issues raised by fMRI in the contexts of health care, research, employment, insurance, criminal justice, litigation, and cognitive privacy. (shrink)

Galleries, libraries, archives and museums are striving to retain audience attention to issues related to cultural heritage, by implementing various novel opportunities for audience engagement through technological means online. Although born-digital assets for cultural heritage may have inundated the Internet in some areas, most of the time they are stored in “digital warehouses,” and the questions of the digital ecosystem’s sustainability, meaningful public participation and creative reuse of data still remain. Emerging technologies, such as artificial intelligence, are used to (...) bring born-digital archives to light, aiming to enhance the public’s engagement and participation. At the core of this debate lies both the openness of data and issues of privacy. How open to the public should born-digital archives be? Should everything be open and available online, and what does it take to achieve balance between openness and privacy, especially through AI initiatives? The study is qualitative and builds on the rationale of grounded theory. The role of AI development is critically investigated in relation to opening up born-digital archives online, by considering privacy and ethics issues. Grounded in the context of the author’s PhD research, the paper proposes a human-centred approach to AI development for democratising its development towards fairness and social inclusion, contrary to the stereotypical cliché of blackboxing, allowing space for the plurality of born-digital archives to flourish. (shrink)

“Privacy as confidentiality” has been the dominant paradigm in computer science privacy research. Privacy Enhancing Technologies (PETs) that guarantee confidentiality of personal data or anonymous communication have resulted from such research. The objective of this paper is to show that such PETs are indispensable but are short of being the privacy solutions they sometimes claim to be given current day circumstances. Using perspectives from surveillance studies we will argue that the computer scientists’ conception of (...) privacy through data or communication confidentiality is techno-centric and displaces end-user perspectives and needs in surveillance societies. We will further show that the perspectives from surveillance studies also demand a critical review for their human-centric conception of information systems. Last, we rethink the position of PETs in a surveillance society and argue for the necessity of multiple paradigms for addressing privacy concerns in information systems design. (shrink)

This paper offers an overview of the prospects and ethics of using AI to achieve human enhancement, and more broadly what we call intellectual augmentation (IA). After explaining the central notions of human enhancement, IA, and AI, we discuss the state of the art in terms of the main technologies for IA, with or without brain-computer interfaces. Given this picture, we discuss potential ethical problems, namely inadequate performance, safety, coercion and manipulation, privacy, cognitive liberty, authenticity, and fairness in (...) more detail. We conclude that while there are very significant technical hurdles to real human enhancement through AI, and significant ethical problems, there are also significant benefits that may realistically be achieved in ways that are consonant with a rights-based ethics as well. We also highlight the specific concerns that apply particularly to applications of AI for "sheer" IA (more realistic in the near term), and to enhancement applications, respectively. (shrink)

While information technologies present organizations with opportunities to become more competitive, unsettled social norms and lagging legislation guiding the use of these technologies present organizations and individuals with ethical dilemmas. This paper presents two studies investigating the relationship between intellectual property and privacy attitudes, Machiavellianism and Ethical Ideology, and working in R&D and computer literacy in the form of programming experience. In Study 1, Machiavellians believed it was more acceptable to ignore the intellectual property and privacy (...) rights of others. Programmers and R&D workers considered violating intellectual property rights more acceptable. Programmers did not consider violating privacy rights more acceptable, but R&D workers did. Finally, there was an interaction between Machiavellianism, programming and R&D. Machiavellians who also had programming experience or worked in R&D found violations of intellectual property much more acceptable. The effect of Machiavellianism on attitudes toward violations of privacy was enhanced by working in R&D, but not by programming experience. In Study 2, idealists believed it was less acceptable to ignore the intellectual property and privacy rights of others. Relativists found it more acceptable to violate intellectual property rights, though they did not consider it more acceptable to violate privacy rights. Those with programming experience were more accepting of intellectual property rights violations, but not of privacy violations. Finally, programming experience moderated the relationship between idealism, relativism and attitudes toward these unethical information practices. Implications for diminishing unethical behavior among Machiavellians, Relativists, programmers and those in R&D are discussed. (shrink)

Mobile phone-based applications (apps) can promote faster targeted actions to control COVID-19. However, digital contact tracing systems raise concerns about data security, system effectiveness, and their potential to normalise privacy-invasive surveillance technologies. In the absence of mandates, public uptake depends on the acceptability and perceived legitimacy of using technologies that log interactions between individuals to build public health capacity. We report on six online deliberative workshops convened in New South Wales to consider the appropriateness of using the (...) COVIDSafe app to enhance Australian contact tracing systems. All groups took the position (by majority) that the protections enacted in the app design and supporting legislation were appropriate. This support is contingent on several system attributes including: the voluntariness of the COVIDSafe app; that the system relies on proximity rather than location tracking; and, that data access is restricted to local public health practitioners undertaking contact tracing. Despite sustained scepticism in media coverage, there was an underlying willingness to trust Australian governing institutions such that in principle acceptance of the new contact tracing technology was easy to obtain. However, tensions between the need to prove system effectiveness through operational transparency and requirements for privacy protections could be limiting public uptake. Our study shows that informed citizens are willing to trade their privacy for common goods such as COVID-19 suppression. But low case numbers and cautionary public discourses can make trustworthiness difficult to establish because some will only do so when it can be demonstrated that the benefits justify the costs to individuals. (shrink)

This paper proposes a roadmap for how privacy leakages from outsourced managed security services using intrusion detection systems can be controlled. The paper first analyses the risk of leaking private or confidential information from signature-based intrusion detection systems. It then discusses how the situation can be improved by developing adequate privacy enforcement methods and privacy leakage metrics in order to control and reduce the leakage of private and confidential information over time. Such metrics should allow for quantifying (...) how much information that is leaking, where these information leakages are, as well as showing what these leakages mean. This includes adding enforcement mechanisms ensuring that operation on sensitive information is transparent and auditable. The data controller or external quality assurance organisations can then verify or certify that the security operation operates in a privacy friendly manner. The roadmap furthermore outlines how privacy-enhanced intrusion detection systems should be implemented by initially providing privacy-enhanced alarm handling and then gradually extending support for privacy enhancing operation to other areas like digital forensics, exchange of threat information and big data analytics based attack detection. (shrink)

As the President's Council on Bioethics emphasized in a recent report, rapid growth of biotechnologies creates increasingly many possibilities for enhancing human traits. This article addresses the claim that enhancement via biotechnology is inherently problematic for reasons pertaining to our identity. After clarifying the concept of enhancement, and providing a framework for understanding human identity, I examine the relationship between enhancement and identity. Then I investigate two identity-related challenges to biotechnological enhancements: (1) the charge of inauthenticity and (2) the (...) charge of violating inviolable core characteristics. My thesis is that a lucid, plausible understanding of human identity largely neutralizes these charges, liberating our thinking from some seductive yet unsound objections to enhancement via biotechnology. (shrink)

Background Despite the great benefits of intelligent assistive technology (IAT) for dementia care – for example, the enhanced safety and increased independence of people with dementia and their caregivers – its practical adoption is still limited. The social and ethical issues pertaining to IAT in dementia care, shaped by factors such as culture, may explain these limitations. However, most studies have focused on understanding these issues within one cultural setting only. Therefore, the aim of this study was to explore and (...) compare the attitudes of Israeli and German dementia experts toward IAT in dementia care, to contribute to a more cultural-comparative perspective. Methods Semi-structured interviews were conducted with 35 experts (15 Israelis and 20 Germans) in key roles in health and community services for people with dementia as well as in the fields of dementia and IAT (e.g., computer science, electrical/biomedical engineering, ethics, nursing, and gerontology). Thematic content analysis was used to analyze the data. Findings Israeli and German experts identified the same social accelerators in the development and implementation of IAT in dementia care (i.e., changes in family structure and social digitization) and benefits of adopting IAT (e.g., enhancing the safety of people with dementia and increasing their independence). However, there were differences in inhibitor/risk assessments between the two groups. Namely, economic considerations and the cognitive capacity of people with dementia were identified by both groups as inhibitors, while Israeli experts additionally reported stigma and ageism. Whereas both groups agreed that IAT might reduce human connection, and that the technology is not yet reliable enough, German experts highlighted concerns regarding privacy; in contrast, Israeli experts prioritized safety over privacy. Conclusions Our research findings allow for the identification of relevant similarities but also important differences between German and Israeli experts’ perspectives. As such, an important basis has been provided for a more in-depth discussion regarding where, why, and how culturally-sensitive technology development is needed. (shrink)

This paper argues for a revised concept of authenticity entailing two demands that must be balanced. The first demand moves authenticity from the position of a strictly self-regarding virtue towards the position of a fully social virtue, acknowledging the crucial feature of steadiness, i.e. self-consistency, as being precisely what we ‘naturally’ lack. Nevertheless, the value of personal authenticity in a modern, open society comes from the fact that it brings about not only steadiness, but also the public development of a (...) variety of existential options that can be understood as Millian ‘original experiments in living’. Thus the second demand of authenticity is a demand for ‘experimental’ authenticity which covers the whole spectrum of technologies of the self, from Nietzschean ‘brief habits’, to the use of enhancement technologies. (shrink)

Unprecedented advances in the ability to store, analyze, and retrieve data is the hallmark of the information age. Along with enhanced capability to identify meaningful patterns in large data sets, contemporary data science renders many classical models of privacy protection ineffective. Addressing these issues through privacy-sensitive design is insufficient because advanced data science is mutually exclusive with preserving privacy. The special privacy problem posed by data analysis has so far escaped even leading accounts of informational (...) class='Hi'>privacy. Here, I argue that accounts of privacy must include norms about information processing in addition to norms about information flow. Ultimately, users need the resources to control how and when personal information is processed and the knowledge to make information decisions about that control. While privacy is an insufficient design constraint, value-sensitive design around control and transparency can support privacy in the information age. (shrink)

Recognizing the variety of dystopian science-fiction novels and movies, from Brave New World to Gattaca and more recently Star Trek, on the future of humanity in which eugenic policies are implemented, genetic engineering has been getting a bad reputation for valid but arguably, mostly historical reasons. In this paper, I critically examine the claim from Mehlman & Botkin (1998: ch. 6) that human enhancement will inevitably accentuate existing inequality in a free market and analyze whether prohibition is the optimal public (...) policy for this objection as egalitarians might advise (Lamont and Favor, 2014). (shrink)

New scientific advances have created previously unheard of possibilities for enhancing combatants' performance. Future war fighters may be smarter, stronger, and braver than ever before. If these technologies are safe, is there any reason to reject their use? In this article, I argue that the use of enhancements is constrained by the importance of maintaining the moral responsibility of military personnel. This is crucial for two reasons: the military's ethical commitments require military personnel to be morally responsible agents, (...) and moral responsibility is necessary for integrity and the moral emotions of guilt and remorse, both of which are important for moral growth and psychological well-being. Enhancements that undermined combatants' moral responsibility would therefore undermine the military's moral standing and would harm combatants' well-being. A genuine commitment to maintaining the military's ethical standards and the well-being of combatants therefore requires a careful analysis of performance-enhancing technologies before they are implemented. (shrink)

Brain machine interface (BMI) technology makes direct communication between the brain and a machine possible by means of electrodes. This paper reviews the existing and emerging technologies in this field and offers a systematic inquiry into the relevant ethical problems that are likely to emerge in the following decades.

According to political minimalism, a debate is considered political when it revolves around the question “What shall we do?” This account suggests that certain issues related to human enhancement technologies (HETs), which have traditionally been addressed in the realm of applied ethics, could be better approached from a political standpoint. However, this raises the question of who constitutes the “we” – the communities that face the political challenges posed by HETs. We argue that there is a global human community (...) that directly faces at least some of these challenges, and this fact underscores the relevance of a cosmopolitan perspective. While some authors have already advocated for a cosmopolitan approach in addressing issues such as poverty or climate change, they often do so from a moral outlook, without adequately distinguishing between ethics and politics. In contrast, we assert that HETs present compelling arguments in favour of cosmopolitanism as a political stance. In support of this claim, we consider two cases: the pills that would allow people to eat at will without gaining weight, and the choice between different types of cognitive enhancers. (shrink)