Embedding privacy into UX design using contextual integrity

Transcript

1. Embedding Privacy into UX Design using Contextual Integrity Timothy Kariotis PhD Candidate Public Health Consultant
2. @timothykariotis DR19
3. What is Privacy? •Complex... •Control over sharing •Control over access •Is it good? Is it bad? @timothykariotis
4. p https://www.patientslikeme.com/ @timothykariotis
5. Contextual Integrity • Privacy is the appropriate flow of information in a specific context. • Appropriate information flows
6. Contextual Integrity • [Sender] shared [Information type] about [subject] to [receiver] acknowledging transmission principles. •GP sends referral containing summary of patients health to the psychologist with the patients consent. @timothykariotis
7. But... •Does this new tech better help achieve the values, ends and purposes? •How do information norms translate to this new tech? (Nissenbaum, 2009) @timothykariotis
8. Context •Values, norms, ends, goals •Why do we share or not share information in this context? •Whose perspective of the context ? @timothykariotis
9. Context is Complex •Were the rules made to be broken? •Values and norms change and are complex •Hippocratic Oath
10. Discovering Contextual Norms •Crowdsourcing...logic rules for engineering privacy. •Participatory research methods (Mir, Shvartzshnaider, & Latonero, 2018) @timothykariotis
11. Current Norms •Story telling (Extremes) •Focus Groups •Interviews •Observation •Co-Design •Feedback @timothykariotis
12. New Norms •Story completion •Prototyping •Co-Design @timothykariotis
13. Story Completion •Using norms established in current context •Inserting in new technology or disruption to information flow •Getting participants to complete the story. (Braun, Clarke, Hayfield, Moller, & Tischner, 2017) @timothykariotis
14. Summary •Privacy is more than control •Context – what values and norms underpin current information flow •Does your ‘thing’ breach current CI •Does it enhance values and goals...? •What new norms may emerge?
15. Contact Me Timothy.Kariotis@unimelb.edu.au @timothykariotis
16. References • Nissenbaum, H. (2009). Privacy in context: Technology, policy, and the integrity of social life: Stanford University Press. • Nissenbaum, H. (2019). Contextual Integrity Up and Down the Data Food Chain. Theoretical Inquiries in Law, 20(1). • Rothstein, M. A. (2010). The Hippocratic bargain and health information technology. The Journal of law, medicine & ethics : a journal of the American Society of Law, Medicine & Ethics, 38(1), 7-13. doi:https://dx.doi.org/10.1111/j.1748-720X.2010.00460.x • Mir, D. J., Shvartzshnaider, Y., & Latonero, M. (2018). It Takes a Village: A Community Based Participatory Framework for Privacy Design. Paper presented at the 2018 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW). • Braun, V., Clarke, V., Hayfield, N., Moller, N., & Tischner, I. (2017). Qualitative Story Completion: A Method with Exciting Promise. In P. Liamputtong (Ed.), Handbook of Research Methods in Health Social Sciences (pp. 1-18). Singapore: Springer Singapore.