EAGER: Collaborative: A Research Agenda to Explore Privacy in Small Data Applications

隐私设计（PbD）背后的一个关键思想是，隐私应该在设计过程中被考虑，而不是像经常发生的那样，只是在事后才被考虑。然而，这一理想未能获得广泛的实际牵引力，部分原因是缺乏成熟的方法，也因为隐私概念的复杂性，这阻碍了其可操作性。该项目同时解决了这两个挑战，寻求(i)证明隐私的稳健运作如何导致有意义的PbD， （ii）通过参与小数据应用领域的持续研究和开发，即通过利用个人日常活动（如电子邮件、杂货店购物、看电视、交通、移动设备）的数字跟踪来促进健康和个人生产力的系统，为方法论提供见解。等等。采用隐私作为上下文完整性的定义，该项目将重点关注目前在PI Deborah Estrin的小数据实验室“在绘图板上”的选定的小数据应用程序。有了这些设计案例，该项目面临着PbD的挑战之一，即在开发的早期考虑隐私，作为一个研究企业，其主要目标是发现更多和更少的方法方法来实现这一目标，从而使系统特征与隐私需求良好相关。同时，该项目将为如何实现上下文完整性提供宝贵的见解，上下文完整性将隐私视为个人信息的适当流动，将适当的流建模为符合特定于上下文的信息规范，这些规范根据三个参数规定（和禁止）信息流：参与者（主题、发送者、接收者）、信息类型和传输原则（流的功能约束）。采用上下文完整性作为操作定义意味着研究人员将通过仔细映射数据流来评估隐私属性，并根据应用和使用的上下文评估这些流。该项目还通过演示如何将信息规范整合到设计实践中，扩展了过去关于信息规范的正式表示的工作。除了它的实质性贡献之外，这个项目还体现了一种创新的合作模式——计算机科学家Deborah Estrin（康奈尔大学）和哲学家Helen Nissenbaum（纽约大学）的新颖配对，他们平等合作，共同打造体现有意义的隐私的技术。

One of the crucial ideas behind Privacy by Design (PbD) is that privacy should be taken into consideration in the process of design, not merely after-the-fact, as so often happens. Yet, this ideal has failed to gain widespread practical traction, challenged, in part, by the lack of developed methodologies and also because of privacy's conceptual complexity, which hampers its operationalization. This project addresses both challenges simultaneously, seeking (i) to demonstrate how a robust operationalization of privacy can lead to meaningful PbD and (ii) to contribute methodological insight by engaging with ongoing research and development in the area of small data applications, namely, systems that advance wellness and personal productivity by utilizing digital traces from individuals' day-to-day activities, such as e-mail, grocery shopping, TV watching, transportation, mobile devices, and so forth. Adopting the definition of privacy as contextual integrity, the project will focus on selected small-data applications currently "on the drawing board" in PI Deborah Estrin's Small Data lab. With these design cases, the project rises to one of the PbD challenges, namely consideration of privacy early on in development and, as a research enterprise, its primary aim is to uncover more and less productive methodological approaches for doing so, resulting in system characteristics well correlated with privacy requirements. At the same time, the project will provide invaluable insight into how to operationalize contextual integrity, which conceives of privacy as appropriate flow of personal information, modeling appropriate flow as conformance with context-specific informational norms, which, prescribe (and prohibit) information flows according to three parameters: actors (subject, sender, recipient), information types, and transmission principles (functional constraints on flow). Adopting contextual integrity as an operational definition means that researchers will assess privacy properties by carefully mapping data flows, and evaluating these flows in terms of the context of application and use. The project also extends past work on formal representations of informational norms by demonstrating how they may be integrated into design practices. In addition to its substantive contributions this project embodies an innovative collaborative model -- a novel pairing of a computer scientist, Deborah Estrin (Cornell), with a philosopher, Helen Nissenbaum (NYU), in an equal partnership to forge technologies that embody meaningful privacy.