Mapping a Privacy Framework to a Reference Model of Learning Analytics
-
Upload
yong-sang-cho -
Category
Education
-
view
164 -
download
0
Transcript of Mapping a Privacy Framework to a Reference Model of Learning Analytics
![Page 1: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/1.jpg)
Mapping a Privacy Framework to a Reference Model of Learning Analytics
Yong-Sang Cho, Tore Hoel and Weiqin Chen
Korea Education & Research Information ServiceYong-Sang Cho, [email protected]
FB: /zzosang Twitter: @zzosang
LAK 2016 WorkshopApril 25, 2016
![Page 2: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/2.jpg)
“This paper is a first exploration of how the privacy framework found in the ISO/IEC 29100 standard could be applied to learning analytics. In this case study a mapping is provided between the published ISO/IEC standard and the learning analytics framework under development as a reference model for learning analytics, ISO/IEC 20748. This mapping and the identified privacy requirements and principles will prove useful in designing learning analytics system as well as performing risk management to avoid privacy breaches.”
Abstract
![Page 3: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/3.jpg)
Overview ISO/IEC 29100
ISO/IEC 29100 is an international standard providing a high-level framework for the protection of Personally Identifiable Information (PII) within information and communication technology (ICT) systems. This standard describes organizational, technical, and procedural aspects in overall privacy framework.
• specifying a common privacy terminology; • defining the actors and their roles in processing PII; • describing privacy safeguarding requirements; and • referencing known privacy principles.
![Page 4: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/4.jpg)
Basic Elements of Privacy Framework
• actors and roles;• Interactions;• recognizing PII;• privacy safeguarding requirements; • privacy policies; and • privacy controls.
![Page 5: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/5.jpg)
Basic Elements of Privacy Framework
• actors and roles;
• Interactions;
• recognizing PII;
• privacy safeguarding requirements;
• privacy policies; and
• privacy controls.
a) PII Principalsb) PII Controllerc) PII Processord) Third party
![Page 6: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/6.jpg)
Basic Elements of Privacy Framework
• actors and roles;
• Interactions;
• recognizing PII;
• privacy safeguarding requirements;
• privacy policies; and
• privacy controls.
Provide PII between actors
![Page 7: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/7.jpg)
Basic Elements of Privacy Framework
• actors and roles;
• Interactions;
• recognizing PII;
• privacy safeguarding requirements;
• privacy policies; and
• privacy controls.
a) Identifierb) Other distinguishing
characteristics c) Any information
linked to a PII principal d) Pseudonymous data e) Metadata f) Unsolicited PII g) Sensitive PII
![Page 8: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/8.jpg)
Basic Elements of Privacy Framework
• actors and roles;
• Interactions;
• recognizing PII;
• privacy safeguarding requirements; Risk Management
• privacy policies; and
• privacy controls.
![Page 9: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/9.jpg)
Basic Elements of Privacy Framework
• actors and roles;
• Interactions;
• recognizing PII;
• privacy safeguarding requirements;
• privacy policies; and
• privacy controls.
a) Provide frameworkb) Satisfy privacy
safeguarding requirements
![Page 10: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/10.jpg)
Basic Elements of Privacy Framework
• actors and roles;
• Interactions;
• recognizing PII;
• privacy safeguarding requirements;
• privacy policies; and
• privacy controls. to meet the privacy safeguarding requirements identified by the privacy risk assessment and treatment process
![Page 11: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/11.jpg)
Privacy Principles
![Page 12: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/12.jpg)
Privacy Principles
1. Consent and choice 2. Purpose legitimacy and specification 3. Collection limitation 4. Data minimization 5. Use, retention and disclosure limitation 6. Accuracy and quality 7. Openness, transparency and notice 8. Individual participation and access 9. Accountability 10. Information security 11. Privacy compliance
![Page 13: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/13.jpg)
ISO/IEC 29748-1 LAI - Reference Model
![Page 14: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/14.jpg)
![Page 15: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/15.jpg)
Adoption of Privacy Framework to Learning Analytics
![Page 16: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/16.jpg)
![Page 17: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/17.jpg)
![Page 18: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/18.jpg)
![Page 19: Mapping a Privacy Framework to a Reference Model of Learning Analytics](https://reader031.fdocuments.net/reader031/viewer/2022020314/58758cc81a28ab901c8b5f6f/html5/thumbnails/19.jpg)
Questions?
Korea Education & Research Information ServiceYong-Sang CHO, [email protected]: /zzosang Twitter: @zzosang