Big Data should not be a faith-based initiative
Cory Doctorow summarizes the problem with the idea that sensitive personal information can be removed responsibly from big data: computer scientists are pretty sure that's impossible.
The debate is a hot one, and a lot of non-technical privacy regulators have been led on by sweet promises from the companies that they regulate about the possibility of creating booming markets in highly sensitive personal data that is somehow neutralized through a magic "de-identification" process that lets information about, say, the personal lives of cancer patients be bought and sold without compromising the patients' privacy.
The most recent example of this is a report by former Ontario privacy commissioner Ann Cavoukian and Daniel Castro from the pro-market thinktank the Information Technology and Innovation Foundation. The authors argue that the risk of "re-identification" has been grossly exaggerated and that it is indeed possible to produce meaningful, valuable datasets that are effectively "de-identified."
Princeton's Arvind Narayanan and Ed Felten have published a stinging rebuttal, pointing out the massive holes in Cavoukian and Castro's arguments -- cherry picking studies, improperly generalizing, ignoring the existence of multiple re-identification techniques, and so on.
As Narayanan and Felten demonstrate, the Cavoukian/Castro position is grounded in a lack of understanding of both computer science and security research. The "penetrate-and-patch" method they recommend -- where systems are fielded with live data, broken through challenges, and then revised -- has been hugely ineffective in both traditional information security development and in de-identification efforts. And as Narayanan and Felten point out, there is no shortage of computer science experts who could have helped them with this.
Cavoukian and Castro are rightly excited by Big Data and the new ways that scientists are discovering to make use of data collected for one purpose in the service of another. But they do not admit that the same theoretical advances that unlock new meaning in big datasets also unlock new ways of re-identifying the people whose data is collected in the set.
Re-identification is part of the Big Data revolution: among the new meanings we are learning to extract from huge corpuses of data is the identity of the people in that dataset. And since we're commodifying and sharing these huge datasets, they will still be around in ten, twenty and fifty years, when those same Big Data advancements open up new ways of re-identifying -- and harming -- their subjects.
Narayanan and Felten would like to have a "best of both worlds" solution that lets the world reap the benefits of Big Data without compromising the privacy of the subjects of the datasets. But if there is such a solution, it is to be found through rigorous technical examinations, not through hand-waving, wishful thinking, and bad stats.
The faith-based belief in de-identification is at the root of the worst privacy laws in recent memory. In the EU, the General Data Protection Regulation -- the most-lobbied regulatory effort in EU history -- decided to divide data protection into two categories: identifiable data and "de-identified" data, with practically no limits on how the latter could be bought and sold. The mirrors the existing UK approach, which allows companies to unilaterally declare that the data they hold has been "de-identified" and then treat it as a commodity. In both cases, it's a disaster, as I wrote in the Guardian last year. You can't make good technical regulations by ignoring technical experts, even if the thing those technical experts are telling you is that your cherished plans are impossible.
I recommend you read both Narayanan and Felten's paper, and Cavoukian and Castro's. But in the meantime, Narayanan has helpfully summarized the debate:
Specifically, we argue that:
There is no known effective method to anonymize location data, and no evidence that it’s meaningfully achievable.
Computing re-identification probabilities based on proof-of-concept demonstrations is silly.
Cavoukian and Castro ignore many realistic threats by focusing narrowly on a particular model of re-identification.
Cavoukian and Castro concede that de-identification is inadequate for high-dimensional data. But nowadays most interesting datasets are high-dimensional.
Penetrate-and-patch is not an option.
Computer science knowledge is relevant and highly available.
Cavoukian and Castro apply different standards to big data and re-identification techniques.
Quantification of re-identification probabilities, which permeates Cavoukian and Castro’s arguments, is a fundamentally meaningless exercise.
“Big Brother, it turned out, was wearing a MAGA cap”
Dale Maharidge is a journalist and J-school professor who is dear old friends with the muckracking, outstanding political documentarian Laura Poitras. Jessica Bruder (previously) is a a writer and J-school prof who's best friends with Maharidge. When Laura Poitras was contacted by an NSA whistleblower who wanted to send her the leak of the century, she asked Maharidge for help finding a safe address for a postal delivery, and Maharidge gave her Bruder's Brooklyn apartment address. A few weeks later, Bruder came home from a work-trip to discover a box on her doormat with the return address of "B. Manning, 94-1054 Eleu St, Waipau, HI 96797." In it was a hard-drive. The story of what happened next is documented in a beautifully written, gripping new book: Snowden's Box: Trust in the Age of Surveillance.
Spying on everyone to combat COVID-19 will further erode civil liberties just like 9/11, privacy advocates warn
Tracking entire populations now with electronic surveillance, facial recognition, and biosecurity sensors to combat the coronavirus pandemic will inevitably mean even more invasive forms of government spying later, privacy advocates warn.
While all the downsides of stay-at-home orders and social distancing are evident, there are at least a few small silver linings to come out of all this. For many, this time spent indoors has meant a happy reintroduction to your very own kitchen. You know your kitchen. It’s usually the place that holds all your […]
Have you ever had more time to hone in on fine details than right now? Sure, at first glance, this might not seem like the time to get tripped up on the nitty-gritty of minutia. But how often are you ever going to have this much time to really stop and think about hows and […]
There are plenty of productive ways to spend time while stuck indoors. While it’s undoubtedly fun to binge all 15 seasons of Supernatural or sink days of playtime into an Overwatch campaign, learning something new is definitely a more meaningful and long-term beneficial use of open hours. And if you’re going to invest time in […]