/  21
Privacy revisited, protect
and project
Adriana Lukas
VRM & the Mine! project
LIFT France
Marseilles 7 July 2010

Privacy is not a configuration of settings, it has little to do with privacy policies that you find on websites. It's my own policy that governs my behaviour. Privacy is
certainly not dead, it is essential to my autonomy and identity.
I'll be talking about the Mine! and VRM - a couple of projects that take the view that privacy starts from the individual user, not a platform or a web service. They
are both based on the need for users online to be the point of integration for their data and its sharing. Privacy is 'protected' and 'projected' through a 'user-driven'
design as well as through UX/UI.
As an individual interacting with others I am the best judge of my privacy requirements. When I talk to my friends I know what to tell them and what not to share. If
I mess up, I suffer the consequences and learn not to gossip with those who betray confidences.
Beyond my immediate social circles and when money or reputation is at stake, I need to understand the consequences of sharing information so I can manage my
privacy. But if my privacy is not up to me to manage, there can be no demand for such knowledge to be available. As a result many people have no idea about
how their data is used and abused.
The best privacy settings are in my head. At the moment, I have little ability toʻexecuteʼ my privacy policy. Why assume that such ability has to come from the
legal world and why not start building tools that help individuals manage their data and help them to determine their privacy behaviour themselves?
There are two levels on which privacy needs to be considered:
1. behavioural i.e. sharing
2. ownership, access or control of your data (meta-data, logs etc)

#
a) what can YOU do with your data

b) what can OTHERS do with your data
They are intrinsically linked and I'd argue you can't have the first without the second. I'd also argue that people tend to think of one or the other, depending
whether they are coming from the client or the server side...
Why does the second point matters as much, if not more, as the first. Because privacy is not “the one secret I donʼt want revealed” The problem is all the stuff that
I create in my online existence - the data dandruff of life, which is not secret in any way but which aggregates to stuff that we donʼt want anybody to know. It also
aggregates to predictive models about us that we would be very creeped out could exist at all.

So what is to be done? There is much wailing and gnashing of teeth over Facebook's encroachment on users privacy. This goes for most platforms, web
services and applications but FB is the poster whipping boy for this one, to mix metaphors. And for good reasons.
And yet, their user base does not diminish. FB does something useful for people and until better and freer and more privacy alternatives exist it will continue to
grow.

But privacy matters and unless we have autonomy, i.e. freedom to pursue it, it will be elusive.
On the practical level - online privacy is about creating tools that help the individual to control access to data to the point where he/she decides directly who gets to
see what - without reliance upon a third party or an intermediary.
Building privacy systems, instead of letting people implement their own privacy 'policies', makes privacy an awkward bolt-on when it should be natural and integral
to our behaviour. The more people who learn what "privacy" means and understand its merits and the price of its abuse, the betterʻpoliciesʼ they can devise for
themselves...

Yes, markets are conversations but they are also relationships and transactions. Imagine a marketplace - a bazaar, souk, your local stall market - you can talk to
the stall holders, the sellers about their product, you see the person, not the company first. If you frequent the market, you might even recognise the seller and
develop more continuous conversations i.e. relationship. And occasionally you buy something, i.e. transact. These components of market exchange are not evenly
distributed but they are all part of a balanced commerce. In theory.

1. I have far more conversations than I have relationships - already true.
2. The number of transactions is smaller than the number of relationships, in other words, not all relationships lead to transactions - at the moment, my
transactions are not a result of conversations and relationships with vendors.
3. Conversations and relationships are sound foundations for transactions - already my conversations and relationships with friends and contacts are
increasingly affecting my decisions about who to transact with but still a long way to go.
4. It's not all about vendors; the conversations and relationships are with my friends and contacts - vendors need to become part of my network in order to
improve transactions

When it comes to transactions we have little to almost no ability to influence it. Offline you go to a shop, you buy a product and you pay for it at the till. Online, you
go to site, you jump through various hoops to buy a product.

Share & Embed

More from this user

Add a Comment

Characters: ...