Visible to the public Designing for Privacy - October 2018Conflict Detection Enabled

Submitted by Serge Egelman on Sun, 10/28/2018 - 9:06pm

HARD PROBLEM(S) ADDRESSED
Human Behavior: One goal for this series of workshops is to examine how current approaches to privacy enginneering (e.g., applying Privacy by Design principles) are actually being applied in practice. That is, are there human limitations that are preventing these recommended practices from being used?

Policy-Governed Secure Collaboration: Another goal is to examine how privacy engineering practices can be improved via policy, both at the organizational level and governmental.

KEY HIGHLIGHTS

* Have begun interviews with industry engineers and designers on their practices related to privacy. (5 so far, and are continuing to recruit interviewees).

* We have piloted an interactive design thinking workshop activity to help think about privacy and design practice together with graduate students in a professional technical degree program, which we will refine to use in our practitioner and researcher workshops.

* Conducted ten, semi-structured, qualitative 2 hour interviews with "privacy professionals"--individuals directly responsible for, or involved with, the privacy function at their firms--across nine different information-intensive companies that have or are building out privacy specific programs to understand current concepts, tools, and practices used in current programs, and identify education, research, training that could advance privacy work.

* Draft survey based on above qualitative work is in development.

Publications

* We workshopped a paper mapping the relationships between privacy and HCI design practices at the 2018 Privacy Law Scholars Conference and a revised version of that paper is currently under review at the ACM Computer Human Interaction (CHI) conference.

Community Engagements:

* We completed an interview based survey of We've had several lengthy meetings with teams of privacy practitioners and privacy researchers (some together some separate) at three large companies to understand the tools and approaches they are taking to design privacy into systems and processes, as well as research they are pursuing to address pain points.

* In November, we will be participating in a privacy workshop at the ACM Computer Supported Cooperative Work (CSCW) conference, presenting a position paper on ways to connect privacy theory to privacy design practice.

Groups: