Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection...

27
“If you're not paying for it, you are the product“ Implications of Internet Tracking and Data Analysis for privacy and democracy Bettina Berendt Gebhard Dettmar Lesson series materials: www.schul-web.org/geschichte/kiwi/pgw.html Security and Privacy in Online Social Networks

Transcript of Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection...

Page 1: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

“If you're not paying for it, you are the product“

Implications of Internet Tracking and Data Analysis for privacy and democracy

Bettina Berendt

Gebhard Dettmar

Lesson series materials: www.schul-web.org/geschichte/kiwi/pgw.html

Security and Privacy in Online Social Networks

Page 2: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Trackers: Firefox Lightbeam

Page 3: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Informatics Economics Society and Politics

Trackers

Profiling

Data mining: correlational

Facebook‘s use of data

Data mining: intransparent

“Weblining“

Rule learning: Apriori

Preference Tool Usage context: Access to education and employment

Fundamental right to informational self-determination (ISD); Panopticism & chilling effects

Pluralism of opinion and democracy

Rights conflict: freedom of contract vs. ISD Fundamental rights as positive rights

Lesson series topical overview

Page 4: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

• FBs Data Use Policy: We use [...] the things we

infer from your use of Facebook. […] but we do

not tell the advertiser who any of those people

are.„

• no causality Intransparency

Tracker

FB Data

Use Policy

Data coll.

industry

Apriori

Preference-

Tool

Information.

self-deter-

mination

Positive

rights

Rights

conflicts

Page 5: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

• Lori Andrews: The data collection industry *

• Profiling can be disadvantageous (e.g.: people

who shop in guitar shops are less credit-worthy)

• Redlining becomes Weblining: Profiling

segments in wanted and unwanted customers

(social distinction and exclusion)

* I Know Who You Are and I Saw What You Did: Social Networks

and the Death of Privacy. Free Press (2012).

Tracker

FB Data

Use Policy

Data coll.

industry

Apriori

Preference-

Tool

Information.

self-deter-

mination

Positive

rights

Rights

conflicts

Page 6: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes
Page 7: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Association rules (examples) Soccer HSG support = 60%, confidence = 75%

Gutenberg-Gymn. + support = 40%, confidence = 100%

Soccer & HSG – support = 40%, confidence = 66%

User-ID Athletes, Education, Relationship

1 Dirk Nowitzki, Gutenberg-Gymn., +

2 Cristiano Ronaldo, HSG, -

3 Hans Sarpei, HSG, -

4 Leo Messi, Gutenberg-Gymn., +

5 van der Vaart, HSG, +

Tracker

FB Data

Use Policy

Data coll.

industry

Apriori

Preference-

Tool

Information.

self-deter-

mination

Positive

rights

Rights

conflicts

Page 8: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

2013: Psychometric Centre / University of Cambridge

determines 'personal attributes' from FB likes

Tracker

FB Data

Use Policy

Data coll.

industry

Apriori

Preference-

Tool.com

Information.

self-deter-

mination

Positive

rights

Rights

conflicts

Page 9: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

• Big 5 personality

traits (OCEAN)

• relevant for

education and

employment sectors

Tracker

FB Data

Use Policy

Data coll.

industry

Apriori

Preference-

Tool.com

Information.

Self-deter-

mination

Positive

rights

Rights

conflicts

Page 10: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Which institutions need

such information?

Tracker

FB Data

Use Policy

Data coll.

industry

Apriori

Preference-

Tool.com

Information.

self-deter-

mination

Positive

rights

Rights

conflicts

Page 11: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

The “Census Judgement“ –

Informational Self-determination as a fundamental right

in 1983, the German Constitutional Court ruled against a

census that government considered neccessary for

labor market-, health-, apartments policy etc.

Reasons: the planned processing of personal information

and the collation with population registers

Threats: Data linking and uncontrolled personality profiling

Informational self-determination is a basic pillar of German

and European data protection law ( 2018+: GDPR).

This constrains public and private actors.

Tracker

FB Data

Use Policy

Data coll.

industry

Apriori

Preference-

Tool

Information.

self-deter-

mination

Positive

rights

Rights

conflicts

Page 12: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

German Federal Constitutional Court: Census Ruling 1983

• “[The data] can, in addition – in particular, when integrated information systems are constructed – be combined with other data collections into a partial or complete personality model, without the individual being able to control this model‘s correctness or use. [...]

• The right to informational self-determination would be impossible to exercise in a societal order and underlying legal order in which citizens can no longer know who knows what, when and in which context about them.

• Being uncertain about whether deviant behaviour is continuously registered and persistently stored, used and transferred as information, people will try not to draw attention to themselves through such behaviours.“

Tracker

FB Data

Use Policy

Data coll.

industry

Apriori

Preference-

Tool

Information.

self-deter-

mination

Positive

rights

Rights

conflicts

Page 13: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

• Connection pluralism of opinion – democracy:

• Panopticism drives people into the mainstream, or

endangers free speech (chilling effects)

• Public interest will suffer from this

• fundamental rights are not only negative rights

(“defence“) of the citizen against government, but also

positive rights (“claim“), and they bind private actors

– e.g. German context: Lüth Judgement

– e.g. European context: European Court of Justice

case law *

• This enables participation in the democratic shaping of

society.

* example overview: https://r.coe.int/168007ff4d

Tracker

FB Data

Use Policy

Data coll.

industry

Apriori

Preference-

Tool

Information.

self-deter-

mination

Positive

rights

Rights

conflicts

Page 14: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

• case: a Facebook user complained about FB‘s profiling of his user account

Role play

• core problem: freedom of contract vs. right to data protection

• both are, or are related to, fundamental rights

• debates over which takes precedence over the other

– e.g. in Germany: Böckenförde argument vs. Constitutional Court position (Lüth Judgement)

Tracker

FB Data

Use Policy

Data coll.

industry

Apriori

Preference-

Tool

Information.

self-deter-

mination

Positive

rights

Rights

conflicts

Page 15: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Informatics Economics Society and Politics

Trackers

Profiling

Data mining: correlational

Facebook‘s use of data

Data mining: intransparent

“Weblining“

Rule learning: Apriori

Preference Tool Usage context: Access to education and employment

Fundamental right to informational self-determination (ISD); Panopticism & chilling effects

Pluralism of opinion and democracy

Rights conflict: freedom of contract vs. ISD Fundamental rights as positive rights

Outlook

Page 16: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Informatics Economics Society and Politics

Trackers

Profiling

Data mining: correlational

Facebook‘s use of data

Data mining: intransparent

“Weblining“

Rule learning: Apriori

Preference Tool Usage context: Access to education and employment

Fundamental right to informational self-determination (ISD); Panopticism & chilling effects

Pluralism of opinion and democracy

Rights conflict: freedom of contract vs. ISD Fundamental rights as positive rights

Outlook

Page 17: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Informatics Economics Society and Politics

Trackers

Profiling

Data mining: correlational

Facebook‘s use of data

Data mining: intransparent

“Weblining“

Rule learning: Apriori

Preference Tool Usage context: Access to education and employment

Fundamental right to informational self-determination (ISD); Panopticism & chilling effects

Pluralism of opinion and democracy

Rights conflict: freedom of contract vs. ISD Fundamental rights as positive rights

Outlook

Page 18: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Informatics Economics Society and Politics

Trackers

Profiling

Data mining: correlational

Facebook‘s use of data

Data mining: intransparent

“Weblining“

Rule learning: Apriori

Preference Tool Usage context: Access to education and employment

Fundamental right to informational self-determination (ISD); Panopticism & chilling effects

Pluralism of opinion and democracy

Rights conflict: freedom of contract vs. ISD Fundamental rights as positive rights

Outlook

Page 19: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Informatics Economics Society and Politics

Trackers

Profiling

Data mining: correlational

Facebook‘s use of data

Data mining: intransparent

“Weblining“

Rule learning: Apriori

Preference Tool Usage context: Access to education and employment

Fundamental right to informational self-determination (ISD); Panopticism & chilling effects

Pluralism of opinion and democracy

Rights conflict: freedom of contract vs. ISD Fundamental rights as positive rights

Outlook

Page 20: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Informatics Economics Society and Politics

Trackers

Profiling

Data mining: correlational

Facebook‘s use of data

Data mining: intransparent

“Weblining“

Rule learning: Apriori

Preference Tool Usage context: Access to education and employment

Fundamental right to informational self-determination (ISD); Panopticism & chilling effects

Pluralism of opinion and democracy

Rights conflict: freedom of contract vs. ISD Fundamental rights as positive rights

Outlook

Page 21: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Informatics Economics Society and Politics

Trackers

Profiling

Data mining: correlational

Facebook‘s use of data

Data mining: intransparent

“Weblining“

Rule learning: Apriori

Preference Tool Usage context: Access to education and employment

Fundamental right to informational self-determination (ISD); Panopticism & chilling effects

Pluralism of opinion and democracy

Rights conflict: freedom of contract vs. ISD Fundamental rights as positive rights

Outlook

Education monitoring: Big Data for

aligning skills

demand & supply;

Long-term

surveillance

Page 22: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

What can we do?

Page 23: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Handout

Page 24: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Berendt & Dettmar. Symposium Data Science Education. Paderborn,

15 November 2017. Overview. Please find lesson & other materials at

http://www.schul-web.org/geschichte/kiwi/pgw.html and

https://people.cs.kuleuven.be/~bettina.berendt/Privacy-education/

Page 25: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Unused slides

Page 26: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Materials: http://www.schul-web.org/geschichte/kiwi/pgw.html

https://people.cs.kuleuven.be/~bettina.berendt/Privacy-education/

Page 27: Security and Privacy in Online Social Networksbettina.berendt/Talks/BB-GD-paderbor… · protection • both are, or are related to, fundamental rights • debates over which takes

Outlook:

Filter Bubbles - <Trump election discussion>?? <der meinungspluralismus leidet

auf mindestens zweierlei weise: 1. durch chilling-effects, 2. durch filter bubbles>

Big Data with biased Data - <bisher haben wir angenommen, dass die daten

stimmen; feedback loops sowieso, bsp. frauen und mintberufe, und durch filter

bubbles werden die feedback loops noch verstärkt>

Education monitoring: - <with big data, classroom mgt. systems, klassenarbeiten

vs. permanent and long-term surveillance (mein Zitat aus dem EU-Report); ziel

von education monitoring, im folgenden zitat klingt kosinski durch>

Using Big Data in aligning skills demand and supply

The forecast of skills demand on the labour market should impact educational

programmes in order to ensure that pupils and students are taught the right skills

to find the right job. [...] As such, there is a growing market for suppliers of

commercial technology in the education technology (EdTech) industry