2.3 Privacy and Personal Data Protection PDF

29/09/2024 Objectives Questions?...

29/09/2024 Objectives Questions? 01 Understand the impacts of integrated multi-source data by location on privacy 02 Understand why restrictions may be placed on the use of drones and Streetview cameras. 03 Consider the European example 2.3: Privacy and Personal Data Protection 1 2 1 2 Objectives Group discussion 01 Understand the impacts of integrated multi-source data by location on privacy What types of data 02 Understand why restrictions may be placed on the use of do businesses hold drones and Streetview cameras. on you? 03 Consider the European example 3 4 3 4  29/09/2024 Your data is not yours! Privacy and Data Protection (1) To allow citizens the privacy and protection in the digital age. Businesses know your: The Government knows your: Data volumes, data integration and a multitude of applications are making Name Name privacy increasingly challenging. Family and Networks Family and Networks Foundation geospatial data is not about people. But it’s role as a means to Credit cards and bank details Credit cards and bank details integrate data means that we must understand the law and regulations on Shopping habits Shopping habits privacy. Property and Possessions Property and Possessions Mobility data, tracking where people move, becoming increasingly Places you visit and stay Places you visit and stay prevalent. Where you live and go Where you live and go Imagery and drones that allow individuals to be recognised. What you believe in and do What you believe in and do Contact details Contact details Health Health Wealth Wealth and tax 5 6 5 6 Privacy and Data Protection (2) Its not one type of data, it’s the power to integrate to learn more about us. Cyber-attacks as a means of accessing personal data. Geospatial data ethics remain relevant as regulation cannot keep up with the increasing use of data and algorithms. UK Geospatial Commission’s ABC: Accountability - Governing location data responsibly, with the appropriate oversight and security. Bias - Considering and mitigating different types of bias, and highlighting the positive benefits of location data. Clarity - Being clear about how location data will be used and the rights of individuals. Privacy and data protection require organisational security, particularly information security. 7 8 7 8  29/09/2024 The power of data integration by location (1) The power of data integration by location (2) Flood prediction by Ride-sharing by private company. Government. Meteorology Individual addresses, individual scenarios integrated with routes, individual finance fundamental geospatial information integrated with information such as terrain fundamental geospatial data such models, soil data, water as national addressing and road courses, buildings and networks to support ride-sharing day/night population data to and ride-hailing applications such determine impacts of floods. as Careem. Privacy concerns once we get Privacy concerns met by to ‘person’ level. appropriate data protection. 9 10 9 10 Epidemiology The rise of the Covid dashboard and geo-stats Epidemiology provides Geospatial Knowledge on disease incidence, distribution and possible controls. By it’s nature it is geospatial, predictive and concerns people. The 5 W’s: diagnosis or health event (what), person (who), place (where), time (when), and https://idechile.maps.arcgis.com/apps/opsdashboard/index.html#/bde9421cea3047088482909bbba47a78 causes, risk factors, and modes of transmission (why/how). This Photo by Unknown Author is licensed under CC BY-NC-ND 11 12 11 12  29/09/2024 The rise of the Covid dashboard and geo-stats The rise of the Covid dashboard and geo-stats https://idechile.maps.arcgis.com/apps/opsdashboard/index.html#/bde9421cea3047088482909bbba47a78 https://idechile.maps.arcgis.com/apps/opsdashboard/index.html#/bde9421cea3047088482909bbba47a78 13 14 13 14 Covid tracking applications Covid tracking alternative approaches: China The Chinese government, supported Bluetooth proximity Primary and by tech industry, used its massive secondary uses surveillance system to gather and integrate people’s smartphone Level of geolocation - GPS, Cell towers, location data, body temperatures, travel history, facial recognition, Bluetooth, Wi-Fi personal spending and other details in Absolute geolocation v proximity data a centralized database. Analysis using AI/Machine Learning to Centralised v distributed architecture track, trace and monitor those who should be isolating and give individuals Trust in privacy now and downstream an automatic ‘Covid health rating’. 15 16 15 16  29/09/2024 Which fundamental geospatial data themes are Which fundamental geospatial data themes are commonly used for integrating personal information? commonly used for integrating personal information? 17 18 17 18 The AI privacy risk Objectives Place Activity and or time 01 Understand the impacts of integrated multi-source data belief by location on privacy 02 Understand why restrictions may be placed on the use of Person drones and Streetview cameras. Data from vast numbers of sources Little of no control on the data 03 Consider the European example Integration and insights lead to privacy breaches GenAI not at that point, yet. Privacy breach 19 20 19 20  29/09/2024 Imagery and Privacy Imagery and Privacy 21 This Photo by Unknown Author is licensed under CC BY-SA 22 21 22 Imagery and Privacy Drones This Photo by Unknown Author is licensed under CC BY-SA This Photo by Unknown Author is licensed under CC BY-NC 23 24 23 24  29/09/2024 Street View and similar services Privacy and data protection Benefits v privacy. To allow citizens the privacy and protection in the digital age. Minor national security impacts as images are Data integration through AI and applications. taken from public roads. Foundation geospatial data – it’s not about people. But it is relevant as a Systematic collection and private collection and means of integrating data that does impact privacy: publication. Addressing? In Europe, privacy is considered main concern. Buildings? Automatic blurring of car registration plates Networks? and faces. Mobility data. Individuals can also request blurring of their Cyber-attacks as a means of accessing personal data properties. Imagery and drones Some countries blocked collection until privacy Privacy and data protection requires information security. concerns met (Japan, Austria, Germany). This Photo by Unknown Author is licensed under CC BY-SA-NC https://www.google.com/streetview/explore/#sv-headed 25 26 25 26 Example: European Union General Data Objectives Protection Regulations (GDPR) Understand the impacts of integrated multi-source data 4 Components: 01 by location on privacy Data protection principles Rights of data subjects 02 Understand why restrictions may be placed on the use of Legal bases for data processing drones and Streetview cameras. Responsibilities and obligations of organisation data controllers and processors 03 Consider the European example 27 28 27 28  29/09/2024 Example: European Union General Data Example: European Union General Data Protection Regulations (GDPR) Protection Regulations (GDPR) 4 Components: Most comprehensive and restrictive law on data in World. Data protection principles Physical features (geospatial information) not included but Rights of data subjects location (of people) can be. Legal bases for data processing Very large fines for breaking the law – up to 4% of total global Responsibilities and obligations of organisation data revenue. controllers and processors Major incentive for organisations to take information security seriously. Being emulated in many countries. 29 30 29 30 EU GDPR – data protection breaches EU GDPR – data protection breaches In September 2018, British Airways suffered a data breach that exposed Meta violated GDPR by transferring the personal data of the personal information of approximately 500,000 customers, including European users to the United States without adequate data their login and travel booking details, names, addresses, as well as credit protection mechanisms. Fined EUR 1.2 billion. card information including card numbers, expiry dates, and the three- digit CVV code. British Airways had failed to take adequate measures to protect its customers' personal data. Fined EUR 204.6 million. 31 32 31 32  29/09/2024 AI privacy regulation Geospatial Data Ethics Place People share their location data with governments and businesses EU regulation – the following are to Activity and be banned: or time Data rarely used for a single purpose – data supply chain…. Emotion recognition. belief Public trust and confidence in this system of data use, sharing and Subliminal advertising. reuse. Predictive policing. Person ABC for the ethical use of location data Live facial-recognition by law- Accountability enforcement agencies. Bias South Korea has banned deep fake videos of Clarity politicians before elections. California is considering regulations aimed at Privacy breach ‘rogue AI’ causing large-scale catastrophic harm 33 34 33 34 Objectives 01 Understand the impacts of integrated multi-source data by location on privacy Questions? 02 Understand why restrictions may be placed on the use of drones and Streetview cameras. 03 Consider the European example 2.3: Privacy and Personal Data Protection 35 36 35 36