Privacy and Security by Design
Privacy and Security by Design
复制标题
隐私和安全设计
DOI：
--
复制
发表时间：
2020
影响因子：
4.5
通讯作者：
S. Mohanty
中科院分区：
文献类型：
--
作者：
Ibrahim J. Gedeon;Pamela Snively;Carey Frey;W. Almuhtadi;S. Mohanty
隐私设计（PbD）的开发是为了解决在开发技术时将隐私问题视为设计要求的需要，而不是在技术构建后尝试改造隐私控制。Ann Cavoukian博士于1995年开发了隐私设计框架，该框架在2010年国际数据保护机构和隐私专员会议上一致通过了一项决议，承认隐私设计是基本隐私保护的重要组成部分。此外，2018年5月，欧盟的《通用数据保护条例》（GDPR）将设计隐私纳入立法。这一概念如此成功，以至于现在已经扩展到安全性，设计安全（SbD，又名设计安全）原则现在已经牢固地确立为最佳实践。作为一个社会，我们从来没有像今天这样创造如此多的数据。我们从未有过如此多的技术机会来利用这些数据。作为一个社会，我们有机会利用数据来改善业务、社会和健康成果，并帮助组织和个人以前所未有的方式进行更深入的联系。然而，收集和使用如此大量的数据存在重大风险。消费者越来越关注他们的隐私和安全，因为他们越来越“智能”的设备。如果我们不能向消费者证明，他们可以自信地在数字生态系统中分享他们的数据，那么这些机会就会失去。我们正处于一个临界点，消费者的信任取决于我们如何开发产品或流程，以确保消费者的隐私得到保护。赢得、建立和保持这种消费者信任的一种方法是采用合理的原则，如隐私和安全设计。
Privacy by Design (PbD) was developed to address the need to treat privacy concerns as design requirements when developing technology, rather than trying to retrofit privacy controls after technology is built. Dr. Ann Cavoukian developed the Privacy by Design framework in 1995 which achieved international acceptance when the 2010 International Conference of Data Protection Authorities and Privacy Commissioners unanimously passed a resolution recognizing Privacy by Design as an essential component of fundamental privacy protection. Further, in May 2018, the EU’s General Data Protection Regulation (GDPR) enshrined Privacy by Design into legislation. So successful has this concept been that it has now extended to security, with Security by Design (SbD, aka Secure by Design) principles now firmly entrenched as a best practice. As a society, we have never before created as much data as we do today. We have never had as many technological opportunities to leverage that data. As a society, we have the opportunity to use data to improve business, social and health outcomes, and to help organizations and individuals connect in more profound ways than were ever before possible. However, there are significant risks to the collection and use of such vast amounts of data. Consumers are increasingly concerned about their privacy and security as they engage with increasingly “smart” devices. If we are not able to demonstrate to consumers that they can confidently share their data in the digital ecosystem, these opportunities will be lost. We are at a tipping point, where consumer trust is dependent on how we develop products or processes that ensure that consumer privacy is protected. One way to earn, build and maintain such consumer trust is through embracing sound principles such as Privacy and Security by Design.