Chapter 15: Emerging Issues

Question 1

Big Data

Answer 1

A term to describe the ubiquitous collection of data about individuals from a multitude of sources, coupled with new storage, data mining, and predictive techniques.

Question 2

It is challenging to apply the FIPPs to Big Data because…

Answer 2

There may not be a clear understanding of how the data is used, and advanced analytics may fall outside the scope of the original purpose of collection.

Question 3

Moore’s Law (1975)

Answer 3

The notion that the number of transistors on a circuit board doubles every 18 to 24 months.

Translates to big data which, as of 2025, doubles by 12 hours.

Question 4

Three problematic characteristics of Big Data

Answer 4

• velocity
• volume
• variety

Question 5

“Friends and Family” Test

Answer 5

When creating a big data base, would data managers want themselves or their loved ones information in it?

Question 6

Which two Fair Information Practice Principles are particularly important to Big Data?

Answer 6

“Data Minimization” and “De- Identification”

• organizations should process beneficial data, while suppressing portions of records that can reveal individuals identities.

Question 7

Direct Identifiers

Answer 7

Data that identifies an individual with little or no additional effort.

Question 8

Indirect Identifiers

Answer 8

Data (such as gender or age) that can increase the likelihood of identifying an individual.

Question 9

Pseudonymous Data

Answer 9

When direct identifiers have been eliminated, but indirect identifiers remain in tact.

Question 10

De-Identified Data

Answer 10

When direct and known indirect identifiers have been removed.

Question 11

Anonymous Data

Answer 11

When direct and indirect identifiers have been removed for technically manipulated to prevent re-identification.

Question 12

Blurring

Answer 12

This technique reduces the precision of disclosed data to reduce the certainty of individual identification.

Question 13

Masking

Answer 13

Replacing the original values in a data set.

(ex. perturbation)

Question 14

Differential Privacy

Answer 14

Uses a mathematical approach to ensure the risk to an individuals privacy is not substantially increased as a result of being part of a data base.

Question 15

3 products offered by data brokers, according to the FTC:

Answer 15

• marketing
• risk mitigation
• location of individuals

Question 16

FTC suggestions to data brokers:

Answer 16

• minimize data
• carefully review collection practices related to children and teens
• take precautions against downstream users abusing the data for discrimination or crime

Question 17

Internet of Things

Answer 17

• there is no universally accepted definition
• when devices can connect to the internet without need for human interaction

Question 18

FTC definition of “Internet of Things”

Answer 18

Devices or sensors (other than computers, smartphones, or tablets) that connect, communicate, or transmit information with or between each other through the internet.

Question 19

Notable “Internet of Things” Characteristics

Answer 19

• The devices interact with software running elsewhere (often in the cloud) and function autonomously.
• When coupled with data analysis, the devices may take proactive steps and make decisions about or suggest next steps for users.

Question 20

Internet of Things Cybersecurity Concerns

Answer 20

1.) Limited used interfaces in products

2.) Lack of industry experience with privacy and cybersecurity

3.) Lack of industry incentives to deploy updates after the product has been purchased

4.) Limitation of the devices, like hardware security

Question 21

Privacy concerns regarding wearables:

Answer 21

• right to forget
  -impact of location disclosure
• shoulder surfing
• video and audio recording
• lack of control of data
• auto-syncing with social media
• facial recognition

Question 22

2017 FTC advice to smart watch consumers

Answer 22

• secure watch with a PIN or lock pattern
• lock the watch if it is too far from the associated phone

Question 23

Which federal agencies have all considered regulating connected cars?

Answer 23

• The National Highway Traffic Safety Administration
• The Federal Trade Commission
• The Federal Communication Commission

Question 24

Smart Cities

Answer 24

Municipalities and other government entities using sensors to monitor functions and improve government functions.

Question 25

DHS 2015 cyber security risks regarding smart cities:

Answer 25

- evolving connection points between systems, organizations, and technologies - inconsistent adoption - increased automation creates new security challenges

Question 26

Broadband Internet Technical Advisory Group Report Recommendations on Internet of Things (2016)

Answer 26

- should follow security and encryption practices - should be tested in different possible configurations - should be designed to facilitate automated secure software updates - should be secured by default by the inclusion of a password - should be shipped originally with reasonably up-to-date software - should be shipped with a comprehensible and easy to find privacy policy - should communicate restrictive rather than permissive protocols - should continue to function if internet connectivity is disrupted or if cloud backup fails.