Exploring privacy for ubiquitous computing: Tools, methods and experiments

Ubiquitous computing is about making computers and computerized artefacts a pervasive part of our everyday lifes, bringing more and more activities into the realm of information. The computationalization, informationalization of everyday activities increases not only our reach, efficiency and capabilities but also the amount and kinds of data gathered about us and our activities. In this thesis, I explore how information systems can be constructed so that they handle this personal data in a reasonable manner. The thesis provides two kinds of results: on one hand, tools and methods for both the construction as well as the evaluation of ubiquitous and mobile systems---on the other hand an evaluation of the privacy aspects of a ubiquitous social awareness system. The work emphasises real-world experiments as the most important way to study privacy. Additionally, the state of current information systems as regards data protection is studied. The tools and methods in this thesis consist of three distinct contributions. An algorithm for locationing in cellular networks is proposed that does not require the location information to be revealed beyond the user's terminal. A prototyping platform for the creation of context-aware ubiquitous applications called ContextPhone is described and released as open source. Finally, a set of methodological findings for the use of smartphones in social scientific field research is reported. A central contribution of this thesis are the pragmatic tools that allow other researchers to carry out experiments. The evaluation of the ubiquitous social awareness application ContextContacts covers both the usage of the system in general as well as an analysis of privacy implications. The usage of the system is analyzed in the light of how users make inferences of others based on real-time contextual cues mediated by the system, based on several long-term field studies. The analysis of privacy implications draws together the social psychological theory of self-presentation and research in privacy for ubiquitous computing, deriving a set of design guidelines for such systems. The main findings from these studies can be summarized as follows: The fact that ubiquitous computing systems gather more data about users can be used to not only study the use of such systems in an effort to create better systems but in general to study phenomena previously unstudied, such as the dynamic change of social networks. Systems that let people create new ways of presenting themselves to others can be fun for the users---but the self-presentation requires several thoughtful design decisions that allow the manipulation of the image mediated by the system. Finally, the growing amount of computational resources available to the users can be used to allow them to use the data themselves, rather than just being passive subjects of data gathering.

Information legislation and management survey 2014

The 10th annual Jisc, GuildHE and Universities UK information legislation and management survey shows a rise in the number of Freedom of Information (FOI) requests for the tenth consecutive year. In contrast Environmental Information Regulations (EIR) requests appear to have levelled off to a fairly consistent rate, while Data Protection Act (DPA) requests have declined back to levels last seen in 2008. The average monthly number of FOI requests received by UK universities has risen by 19% since 2013 and by almost seven times over the last decade since our survey began. The average across the 46 participating institutions was 219 FOI requests with the highest of 454 reported by one participant.

Information legislation and management survey 2014

The 10th annual Jisc, GuildHE and Universities UK information legislation and management survey shows a rise in the number of Freedom of Information (FOI) requests for the tenth consecutive year. In contrast Environmental Information Regulations (EIR) requests appear to have levelled off to a fairly consistent rate, while Data Protection Act (DPA) requests have declined back to levels last seen in 2008. The average monthly number of FOI requests received by UK universities has risen by 19% since 2013 and by almost seven times over the last decade since our survey began. The average across the 47 participating institutions was 218 FOI requests with the highest of 454 reported by one participant.

MOOCs – your legal questions answered

This guidance is for staff in universities involved in developing Massive Open Online Courses (MOOCs), and considers the legal issues focusing particularly on the intellectual property rights (IPR) issues and data protection.

Os efeitos da cidade digital: o direito à privacidade e à liberdade de informação

O presente trabalho analisa a formação da cidade digital nas relações sociais, ressaltando os efeitos da garantia do direito à privacidade no ambiente dos navegantes de sites e redes sociais, em função das repercussões jurídicas do vazamento de informações da vida pessoal dos usuários da rede, e do tratamento dos dados coletados pelos prestadores de serviço. Através do ciberespaço formam-se comunidades virtuais que ultrapassam a necessidade de localidade e sociabilidade, criando um isolamento social e abandonando as interações face a face em ambientes reais, originando uma sociabilidade baseada no individualismo. Avaliamos os novos padrões de interação que se originam nesta nova formatação de coletividade informacional e suas repercussões no âmbito do direito. Em uma perspectiva mais detalhada, esse estudo indica quais as hipóteses de responsabilidade civil dos provedores na Internet em decorrência de atos ilícitos cometidos por terceiros e as alternativas de um sistema de tutela da privacidade à proteção de dados, face à lesão no ambiente informacional. O levantamento das possíveis situações de responsabilização civil foi efetuado através da análise da jurisprudência e da doutrina dominante, ressaltando os aspectos fáticos que caracterizam sua formatação. Esse modelo se impõe, através de uma relação hierárquica a uma multiplicidade de indivíduos, criando um encarceramento perfeito através do exercício do biopoder. Tais papéis são reforçados por uma cultura consumista e a sociedade do espetáculo, que transforma o indivíduo em mercadoria levantando perfis de usuários conectados em rede, propiciando uma categorização dos consumidores. Nesse contexto, apresentamos os riscos de uma sociedade de vigilância que se apresenta factível como um produto das relações de mercado, que possibilita dispor livremente de um conjunto crescente de informações. Esta constante vigilância invade todos os espaços, custodiando nosso comportamento independente do tempo, com uma implacável memória no âmbito das comunicações eletrônicas, tornando nosso passado eternamente visível e fazendo surgir situações constrangedoras a nos assombrar.

La libertad de información y revelación de datos fiscales

[ES]Con el desarrollo de las nuevas tecnologías, se han facilitado las relaciones, acortado el tiempo de espera y agilizado los trámites con la Administración Pública. Estos adelantos, sin embargo, han propiciado que sea necesario proporcionar información de carácter personal de los ciudadanos, que en la mayoría de los casos es sensible. Es por esto que en los últimos años se han ido modificando e introduciendo nuevas leyes que permiten proteger estos datos de carácter personal. Cuando un contribuyente realiza sus obligaciones tributarias suministra datos de carácter personal a Hacienda, datos que están protegidos por la Ley Orgánica de Protección de Datos. El Sistema Tributario deber ser eficaz y transparente. Sin embargo, cabe preguntarse dónde se sitúa el límite a esa transparencia. Con el fin de que la transparencia sea máxima y de que la ciudadanía se conciencie de la importancia de cumplir con sus obligaciones tributarias el legislador se ha planteado la posibilidad de publicar una lista de deudores y las sentencias firmes condenatorias de grandes defraudadores. Esta publicación de las listas aparentemente vulneraría los derechos de los ciudadanos en lo referente a la protección de datos con opiniones encontradas. Tras informes de diferentes organismos se ha llegado al Proyecto de Ley de Modificación parcial de la Ley 58/2003, General Tributaria (Boletín Oficial de las Cortes Generales del 30 de abril de 2015), que permitiría publicar las listas con ciertos límites: publicación únicamente del nombre de la persona física o jurídica y DNI o NIF. Además, para permitir la publicación de las sentencias firmes de los defraudadores, recientemente se ha aprobado el Proyecto de reforma de la Ley Orgánica del Poder Judicial.

A proteção jurídica dos dados clínicos de testes em medicamentos para humanos

A discussão jurídica versa acerca da proteção ou não dos dados clínicos e informações não divulgadas Data Package, obtidos através de pesquisas clinicas, a partir do desenvolvimento de um novo medicamento. È importante realizar-se uma investigação prévia para descobrir se o novo medicamento a ser comercializado, possui efeitos benéficos ou adversos, que possam afetar os seres humanos, garantindo assim a eficácia e a segurança de sua utilização. O dossiê contendo os dados clínicos é submetido à Agência Nacional de Vigilância Sanitária que, no uso de sua atribuição específica, e em função da avaliação do cumprimento de caráter jurídico-administrativo e técnico-científico relacionado com a eficácia, segurança e qualidade do medicamento conforme a Lei 6360/76 e o Decreto 79.094/77 determina o registro sanitário. A tese defendida pelas sociedades farmacêuticas de pesquisa é a de que seria vedado à ANVISA deferir registros de medicamentos genéricos e similares de mesmo princípio ativo, com base nas pesquisas clinicas realizada, enquanto vigente o período de exclusividade, com fundamento no artigo 5, inciso XXIX da Constituição Federal, artigos 39.1, 39.2, 39.3 do Acordo sobre Aspectos dos Direitos de Propriedade Intelectual Acordo TRIPS, artigo 195, XIV da Lei n 9.279/96 (Lei da Propriedade Industrial), artigo 421, 884, 885 e 886 do CC, artigo 37, caput, da CF e artigo 2, da Lei 9.784/99 e aplicação analógica da Lei 10.603/2002. A ANVISA ao permitir aos fabricantes dos medicamentos genéricos e similares a utilização do pacote de dados clínicos, fornecido pelo titular do medicamento de referencia, estaria promovendo a concorrência desleal e parasitária, ao permitir que as versões genéricas e similares, ingressem no mercado, sob custos de produção e comerciais substancialmente menores, do que os praticadas pelos medicamentos de referencia. Este argumento tem fulcro na norma do artigo 39.3 do Acordo TRIPS firmado entre os membros da Organização Mundial do Comércio OMC, em 1994, no qual o Brasil é signatário, e que se comprometeram a adotar providências no sentido de manter em sigilo e protegidos contra o uso comercial desleal os dados clínicos relativos à pesquisa clínica, necessários à aprovação da comercialização de produtos farmacêuticos. A divulgação, exploração ou a utilização dos dados clínicos, sem a autorização do respectivo titular, o qual demandou recursos materiais e humanos consideráveis e desde que estas informações tenham sido apresentadas a entidades governamentais como condição para aprovação da comercialização de um medicamento, devem ser protegidas. Os Estados membros da OMC e subscritores do acordo internacional devem assegurar que os concorrentes não tenham acesso às informações recebidas pelo ente estatal, que não as explorarem ou delas possam aferir indevidamente tanto direta quanto indiretamente de vantagens que as beneficiem do conhecimento técnico-cientifico, investimentos e esforços realizados pelo titular daquela pesquisa clínica. Dentro deste cenário, faz-se necessário que o Estado produza um marco regulatório capaz de prover uma segurança jurídica, que permita as sociedades farmacêuticas disponibilizar elevado investimento, viabilizando a realização de pesquisa clinica e introdução de novos medicamentos.

Using Social Media Content for Screening in Recruitment and Selection: Pros and Cons.

The article considers the arguments that have been made in defence of social media screening as well as issues that arise and may effectively erode the reliability and utility of such data for employers. First, the authors consider existing legal frameworks and guidelines that exist in the UK and the USA, as well as the subsequent ethical concerns that arise when employers access and use social networking content for employment purposes. Second, several arguments in favour of the use of social networking content are made, each of which is considered from several angles, including concerns about impression management, bias and discrimination, data protection and security. Ultimately, the current state of knowledge does not provide a definite answer as to whether information from social networks is helpful in recruitment and selection.

Use and non-use of electronic information sources by undergraduates at the University of the West Indies

Ramlogan, R.,& Tedd, L. (2006). Use and non-use of electronic information sources by undergraduates at the University of the West Indies. Online Information Review, 30(1), 24-42.

THE INFORMATION ERA THREATENS PRIVACY: A Comparative Study of Electronic Money’s Privacy Policies and Privacy Laws

This thesis consists of an analysis of electronic money (e-money), e-money’s privacy policies and relevant privacy laws. The value of information and the development of technology enhance the risk of privacy violations in the information era. Consumer privacy interests with respect to e-money are governed in part by the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and by the European Union’s Data Protection Directive. The analysis is directed at whether the privacy policies of three kinds of e-money – Octopus Card, PayPal and MasterCard – comply with the spirit and letter of these laws. In light of technology change, the laws should be interpreted to apply broadly to protect privacy interests. Enhanced privacy protection may in fact lead to greater adoption of e-money by consumers.

The Routledge Guide to Interviewing: Oral History, Social Enquiry & Investigation

The Routledge Guide to Interviewing sets out a well-tested and practical approach and methodology: what works, difficulties and dangers to avoid and key questions which must be answered before you set out. Background methodological issues and arguments are considered and drawn upon but the focus is on what is ethical, legally acceptable and productive:
-Rationale (why, what for, where, how)
-Ethics and Legalities (informed consent, data protection, risks, embargoes)
-Resources (organisational, technical, intellectual)
-Preparation (selecting and approaching interviewees, background and biographical research, establishing credentials, identifying topics)
-Technique (developing expertise and confidence)
-Audio-visual interviews
-Analysis (modes, methods, difficulties)
-Storage (archiving and long-term preservation)
-Sharing Resources (dissemination and development)

From death row to the mansion of a head of state, small kitchens and front parlours, to legislatures and presbyteries, Anna Bryson and Seán McConville’s wide interviewing experience has been condensed into this book. The material set out here has been acquired by trial, error and reflection over a period of more than four decades. The interviewees have ranged from the delightfully straightforward to the painfully difficult to the near impossible – with a sprinkling of those that were impossible.
Successful interviewing draws on the survival skills of everyday life. This guide will help you to adapt, develop and apply these innate skills. Including a range of useful information such as sample waivers, internet resources, useful hints and checklists, it provides sound and plain-speaking support for the oral historian, social scientist and investigator.

Factors influencing European consumer uptake of personalised nutrition. Results of a qualitative analysis.

The aim of this research was to explore consumer perceptions of personalised nutrition and to compare these across three different levels of "medicalization": lifestyle assessment (no blood sampling); phenotypic assessment (blood sampling); genomic assessment (blood and buccal sampling). The protocol was developed from two pilot focus groups conducted in the UK. Two focus groups (one comprising only "older" individuals between 30 and 60 years old, the other of adults 18-65 yrs of age) were run in the UK, Spain, the Netherlands, Poland, Portugal, Ireland, Greece and Germany (N = 16). The analysis (guided using grounded theory) suggested that personalised nutrition was perceived in terms of benefit to health and fitness and that convenience was an important driver of uptake. Negative attitudes were associated with internet delivery but not with personalised nutrition per se. Barriers to uptake were linked to broader technological issues associated with data protection, trust in regulator and service providers. Services that required a fee were expected to be of better quality and more secure. An efficacious, transparent and trustworthy regulatory framework for personalised nutrition is required to alleviate consumer concern. In addition, developing trust in service providers is important if such services to be successful. (C) 2013 Elsevier Ltd. All rights reserved.

Psychological determinants of consumer acceptance of personalised nutrition in 9 European countries

OBJECTIVE: To develop a model of the psychological factors which predict people's intention to adopt personalised nutrition. Potential determinants of adoption included perceived risk and benefit, perceived self-efficacy, internal locus of control and health commitment.

METHODS: A questionnaire, developed from exploratory study data and the existing theoretical literature, and including validated psychological scales was administered to N=9381 participants from 9 European countries (Germany, Greece, Ireland, Poland, Portugal, Spain, the Netherlands, the UK, and Norway).

RESULTS: Structural equation modelling indicated that the greater participants' perceived benefits to be associated with personalised nutrition, the more positive their attitudes were towards personalised nutrition, and the greater their intention to adopt it. Higher levels of nutrition self-efficacy were related to more positive attitudes towards, and a greater expressed intention to adopt, personalised nutrition. Other constructs positively impacting attitudes towards personalised nutrition included more positive perceptions of the efficacy of regulatory control to protect consumers (e.g. in relation to personal data protection), higher self-reported internal health locus of control, and health commitment. Although higher perceived risk had a negative relationship with attitude and an inverse relationship with perceived benefit, its effects on attitude and intention to adopt personalised nutrition was less influential than perceived benefit. The model was stable across the different European countries, suggesting that psychological factors determining adoption of personalised nutrition have generic applicability across different European countries.

CONCLUSION: The results suggest that transparent provision of information about potential benefits, and protection of consumers' personal data is important for adoption, delivery of public health benefits, and commercialisation of personalised nutrition.

Protecção de dados pessoais na Internet

The present dissertation has as object of study the right to be forgotten, a new right for increase the control of subject over their data. It’s analyzed the data protection on Internet, especially, some scenarios of processing and the regulation applicable to it (directive 95/46/CE and directive 2002/58/CE).

O âmbito de aplicação material da legislação de proteção de dados pessoais e o tratamento de imagem por pessoa singular

Images have gained a never before seen importance. Technological changes have given the Information Society extraordinary means to capture, treat and transmit images, wheter your own or those of others, with or without a commercial purpose, with no boundaries of time or country, without “any kind of eraser”. From the several different ways natural persons may engage in image processing with no commercial purpose, the cases of sharing pictures through social networks and video surveillance assume particular relevance. Consequently there are growing legitimate concerns with the protection of one's image, since its processing may sometimes generate situations of privacy invasion or put at risk other fundamental rights. With this in mind, the present thesis arises from the question: what are the existent legal instruments in Portuguese Law that enable citizens to protect themselves from the abusive usage of their own pictures, whether because that image have been captured by a smartphone or some video surveillance camera, whether because it was massively shared through a blog or some social network? There is no question the one's right to not having his or her image used in an abusive way is protected by the Portuguese constitution, through the article 26th CRP, as well as personally right, under the article 79th of the Civil Code, and finally through criminal law, articles 192nd and 193rd of the Criminal Code. The question arises in the personal data protection context, considering that one's picture, given certain conditions, is personal data. Both the Directive 95/46/CE dated from 1995 as well as the LPD from 1998 are applicable to the processing of personal data, but both exclude situations of natural persons doing so in the pursuit of activities strictly personal or family-related. These laws demand complex procedures to natural persons, such as the preemptive formal authorisation request to the Data Protection National Commission. Failing to do so a natural person may result in the application of fines as high as €2.500,00 or even criminal charges. Consequently, the present thesis aims to study if the image processing with no commercial purposes by a natural person in the context of social networks or through video surveillance belongs to the domain of the existent personal data protection law. To that effect, it was made general considerations regarding the concept of video surveillance, what is its regimen, in a way that it may be distinguishable from Steve Mann's definition of sousveillance, and what are the associated obligations in order to better understand the concept's essence. The application of the existent laws on personal data protection to images processing by natural persons has been analysed taking into account the Directive 95/46/CE, the LPD and the General Regulation. From this analysis it is concluded that the regimen from 1995 to 1998 is out of touch with reality creating an absence of legal shielding in the personal data protection law, a flaw that doesn't exist because compensated by the right to image as a right to personality, that anyway reveals the inability of the Portuguese legislator to face the new technological challenges. It is urgent to legislate. A contrary interpretation will evidence the unconstitutionality of several rules on the LPD due to the obligations natural persons are bound to that violate the right to the freedom of speech and information, which would be inadequate and disproportionate. Considering the recently approved General Regulation and in the case it becomes the final version, the use for natural person of video surveillance of private spaces, Google Glass (in public and private places) and other similar gadgets used to recreational purposes, as well as social networks are subject to its regulation only if the images are shared without limits or existing commercial purposes. Video surveillance of public spaces in all situations is subject to General Regulation provisions.