1 / 4

Forgetfulness and Data Retention: Balancing Privacy and Security

Explore the challenges of implementing forgetfulness in distributed systems like the Internet and the implications of data retention. Discover strategies for data avoidance, minimization, unlinkability, and more to ensure privacy protection.

rcordova
Download Presentation

Forgetfulness and Data Retention: Balancing Privacy and Security

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Intern. Conf. Computers, Privacy & Data Protection; Brussels, Jan. 2010 Panel 1: Forgetfulness and Data Retention Since the bad guys will retain all data they can get anyway, the good guys probably are better off if they retain data as well Andreas PfitzmannTechnische Universität Dresden, Faculty of Computer Science, D-01062 Dresden Nöthnitzer Str. 46, Room 3071 Phone: +49 351 463-38277, e-mail: pfitza@inf.tu-dresden.de, http://dud.inf.tu-dresden.de/

  2. My Position: Forgetfulness • Forgetfulness cannot be reliably implement-ed in a distributed system like the Internet. This is a show stopper: If A forgets, but B does not, this gives an advantage to B. So A would be stupid to let her computer forget in spite of B not doing the same with his computer. • When we discussed forgetfulness in my group at Karlsruhe University around 1986, this complete lack of reliable implementability caused us not to write any line of text about it. Since then, my position did not change much.

  3. My Position: Data Retention • Data retention quite probably will be data retention forever. Probably not by the entities being entitled to access the data retained officially, like police or domestic secret services, and not by the telcos, either. But by foreign secret services and organized crime, getting to the retained data by hacking or social engineering. • Of course, all officials will always tell us that the retained data are reliably erased as promised. And I even assume that most people telling us so really believe what they tell us.

  4. Priorities • Data avoidance: Avoid that personal data can be gathered by others at all. • Data minimization: Minimize the amount of personal data and their sensitivity others can/do gather. • Unlinkability: Chunks of personal data should be unlinkable to other chunks. • Minimal spread: The set of entities which ever get to know a chunk of personal data should be minimal. • Minimal linkability: The set of entities which ever can link different chunks of personal data should be minimal. • Policies how long to retain and how to use personal data should be agreed, and if possible, enforced. User-specified expiration dates are additional sensitive data. Implies that chunks do not contain too specific attribute values nor that chunks identify persons. Suggests that chunks do not contain too specific attribute values nor that chunks identify persons.

More Related