This is a read only archive of pad.okfn.org. See the shutdown announcement for details.

Privacy_at_OKFestival_14 Privacy at OKFestival 2014

Hi  privacy enthusiasts! As you well know, we have all been so busy doing  many interesting things around my personal data , open data and privacy.  Well, OKFestival (http://2014.okfestival.org/ ) is a great opportunity to put it all together, and this is a space for us to plan for it!

Hackathon - Sat/Sun - 13, 14 July:
    Put up hackathon notices
    Sponsors 
    Locations:  
Open Knowledge / Open Notice Summit? - Monday

Here is the page for planning the hackathon:
    http://pad.okfn.org/p/hackathon

People

(add your name if interested join session preparation )



Pre-Festival (Satellite) Hackathon Planning

(what is pre-festival... just few days before or when? ~apoikola)
https://www.hackerleague.org/hackathons/data-privacy-legal-hackathon-2

Possible Rules & Issues

- (Notes: Chat with Mary - 
Mary thinks that the title open data and open privacy is too confusing as these are orthogonal.   So we need a better title. 
Hackathon should be on the Sat and Sun. Then have a Big Data Vs. Open Data, Vs Small Data, privacy discussion. Should small data control the use of big data? what are the exceptions? is their oversight? Transparency?  Sponsored day on the Tuesday , 
Agenda for the Tuesday
- Brief Summary Proposal
- Topic (title) Brainstorm
- What are the similarities and differences. 


OKF - Brief
--> The Personal Data and Privacy project is working at two levels- connecting with the larger community of projects that are exploring privacy concerns broadly, but at the core level, it is exploring and developing tools, and principles that guide individuals and data publishers when opening up personal data. This hackathon would serve the project's interests at both these levels in that, in the short term, it helps us align with Open Notice principles which are similar to our quest to explore ways of making information and education about individual rights to personal data available and accessible to them. In the long-term, it is an opportunity to increase the scale and scope of these activities in the  next phase of this project where a greater amount of this awareness raising and capacity building is expected to take place.

Proposed dates for hackathon July 13/14 (Saturday/Sunday might make it more accessible; Monday can be a collaboration day for Open Notice, showing items from the weekend Hackathon and beyond, like a VRM Day, asking what should ON goals be?)

How many people go to OKF Festival?
If we name an event around Open Data, then it may risk being at odds with personal data protection. An alternative would be to name it personal data and privacy (but we would of course keep the 'open data' element at the back of our minds, just not explicitly stated). Agreed, I've had many problems in the past trying to explain the 'open data about personal data' theme before; people usually hear 'personal data that has been made open'.

Meeting: 20 March 2014
 
Mark, Mary, Sally, Colette
 
- It is agreed that “Data Privacy Legal Hackathon” is acceptable name
 
- Clarity clarity on “Open Data”, distinguishing from Open Knowledge & Privacy 
- Discussion leads to shared focus on agency in personal data, opening control methods and information by entities use of data
- Hackathon to create tools that transform personal data, normalise it into big data; a tool that could pull out your data, retract personal data from big data
- Agreement that this theme ties in both OKF and ON approached to data; potential to reach point where OKF states that consent is critical
- Exploring themes around this: depersonalising consent alongside anonymous identifier to enable ability to still withdraw personal data from big data; make consent receipts anonymous (possibility to make data anonymous only to a degree?)
 
- Hack pad: distinguish themes for hackathon and session for festival
- Proposal 5 as Hackathon theme? -Mark
 
- Need to get graphic up with date, who is involved (participants, sponsors); Need to follow up ASAP with request for sponsorship
 
- Location: Need to confirm space in Berlin, weekend before festival & Monday for another event (Open Knowledge/Open Notice Summit; potential conflict with VRM meeting in California), then launching right into the festival (Hackathon is necessarily on weekend for participants)
 
Action items:
 
- ON website graphic with key information
- Get sponsor & then link graphic it to festival
- Next meeting with other Hackathon leaders to sort funding satellites
- Sally needs to confirm dates of venue, and ability of ON to use a “breakout” room ahead of festival
- How much funding is needed? Organisation pre-event; promotion; Staff on site; Logistics there? Does OKF has sponsor suggestions? Per location or mass sponsorship
- Need to decide on sponsorship rules
- What can OKF offer us in terms of sponsors? Suggestions, space, banners, etc. 
- Talk to Chaos Computer Club in Germany, German Data Protection Office
- Meeting 27 March 2014?

Session ideas: OKF main festival


-(our  main event- the hackathon proposal has to be 'chopped' up into smaller,  shorter sessions as it is unlikely to be supported within the event  schedule). I have included ideas below- Sally.



This could happen in a pre-festival event if time would not support it at the main festival.
@apoiloka, sorry,we meant the hackathon :-)


Proposals (deadline 16.3.2014- Extended to 31st March)

Hi all, I started turning some of these ideas into the proposal write-up. See below and comment/edit where you see fit. (Sally)


Proposal 1

First Name Sally

Last Name* Deffor

E-mail Address* sally.deffor@okfn.org

Organisation OKF, ORG

Twitter account

Blog/ Personal Website http://personal-data.okfn.org/

If your session will be co-facilitated with others, please note their names here
Sally Deffor, Javier Ruiz, Mark Lizar, Zara Rahman, Tim Davies

Stream* Society

Session Title* Personal data and privacy considerations: principles and tools that work in the developing context 

Session description* Max 1000 characters
At the intersection of personal data and open data is the very important consideration of privacy. For the individuals who accept to have their data opened and for the publishers who do open them (for example government, corporate bodies), there should be principles and tools in place to guide this. These key principles and tools though assembled with UK case studies/scenarios have applicability in the international development field, for example when aid money is used to fund certain activities in the developing world (not exclusive to data collection). 

At this session therefore, participants would be given the chance to evaluate these principles and tools and adapt them to developing country-specific scenarios. This session would be highly interactive but is also intended to be quite informative, as it would begin with an introduction to the field:  issues (eg. ethics, anonymisation), terminology (eg. personal data,shared data, open data), linked projects (eg.Open Notice projects, Responsible Data Forum).

A good starting point for concrete examples of 'open personal data' is this list curated by Jon Gray last year http://bit.ly/personalinfo-publicrecord . This could help us focus the discussion, and help guide evaluation - we could for instance pick examples and try to apply the principles, to see if they capture all the issues in an appropriate way. (Reuben)

Are you concerned about how your personal data is managed, shared, published? Get involved in this!

Session motivation*  This session tackles a very relevant challenge, which is translating and adapting strategies and ideas to fit local contexts. It also considers the input of communities of people (developing country actors)  who may be affected by UK or EU privacy policies  but may not have the platform to connect to the discussions. 


Session outcomes* It is expected that participants would be more informed about the privacy considerations with opening up personal data. They would have a first hand experience of how specific tools and principles are used and would have tried their hand at adapting it to their individual contexts. 


How would the session be structured?* A maximum of 1 hour is required. It starts with an introduction to the personal data and privacy environment, this may require a projector and screen. The interactive session which follows would require the use of post-its, poster sheets, markers and enough room for breakout sessions.  


How does your session contribute to OKFestival’s narrative and aims?* Opening up personal data comes with the valid concern about privacy. A progressive society is one where individuals not only have the knowledge but also access to the tools that enable them to deal with this issue of privacy. This session equips them with both. 

Is this session appropriate and interesting for a younger audience (under 18)?* No

Would you prefer to facilitate your session in a language other than English? If so, what language?  No


Will your session involve physical movement?* Yes

If so, how will you ensure that people with all levels of physical ability are able to participate? Yes

Please indicate if you'd like support from the staff in planning. Yes



---------------
Proposal 2 (Cancelled)
---------------

First Name*  Mark 

Last Name* Lizer

E-mail Address* mark@smartspecies.com

Organisation: Open Notice, OKF, ORG

Twitter account

Blog/ Personal Website 

If your session will be co-facilitated with others, please note their names here: Mark, Colette, Sally

Stream* Tools

Session Title* Personal data and privacy rights sprint 


Session description* Max 1000 characters
Individuals and groups who find their data collected and stored by either government, non profit or corporate agencies need to be aware of their rights to be informed and most importantly to choose. Technology can facilitate this process, and the specific  tools have been developed in a pre-festival hackathon that gives this knowledge and rights to the individuals (whose data is being held).  


During this session, there would be practical demonstrations of these tools, as well as discussions about how practical or effective they are. This would enable the tools to be refined.


Session motivation*  This session involve the often neglected, yet relevant stakeholders who deal with personal data privacy concerns- that is developers and individuals. it allows them to make a vital input towards finding solutions, and it is an opportunity for the developers and the conveners to test the tools and refine them.


Session outcomes*It is expected that at the end of the session, participants would have the experience of accessing and using the tools that give them knowledge about the data held on them, and most importantly, the control to make the decision about what happens to it. 


How would the session be structured?* The session begins with a presentation of the winning tools. The tools are then showcased and tested, with feedback and discussions on each case. 


How does your session contribute to OKFestival’s narrative and aims?* Technological tools enable solutions to be found to a the many problems that come with data management. With the tools that are developed and presented during this session, we are able to offer solutions that help deal with privacy concerns in opening up personal data. This is one step closer to achieving a transformed society where data is harnessed for good, and not evil.  


Is this session appropriate and interesting for a younger audience (under 18)?* Yes


Would you prefer to facilitate your session in a language other than English? If so, what language?  No


Will your session involve physical movement?* Yes

If so, how will you ensure that people with all levels of physical ability are able to participate? Yes

Please indicate if you'd like support from the staff in planning. Yes



---------------
Proposal 3
---------------

First Name*  Javier 

Last Name* Ruiz

E-mail Address* javier@openrightsgroup.org

Organisation OKF, ORG

Twitter account

Blog/ Personal Website http://personal-data.okfn.org/

If your session will be co-facilitated with others, please note their names here
Javier Ruiz, Sally Deffor

Stream* Society

Session Title* Taking privacy considerations forward- the role of the data publisher 



Session description* Max 1000 characters
This session develops at the back of the June workshop to be held with privacy experts during which some key principles will be developed to guide data publishers when opening up personal data. These principles are only intended as a guide and how they are appropriated in each case is dependent on the individual agency or country. We have to take into account the particular motivations and capacities with which each of the different agencies work. This is in order to refine the guidelines and make it applicable across board. It is also an opportunity to find the loopholes that need to be filled with capacity-building and training programmes (a key objective of the personal data and privacy project).  At this session, participants drawn from data publishing agencies would be given a presentation about the 'guiding principles' and its specific requirements, after which there would be break-out sections  to discuss how the principles are to applied to specific (agency) scenarios. Come along and help shape the principles and policies that govern how you share (open up) personal data! 



Session motivation*  This session is motivated by the need to have as much input as possible into the development of the principles guiding privacy. It also offers a unique opportunity (in having participants from all sectors and countries) converged at the same place, and we would like to capitalize on that to expand the network of data publishers that we connect to.


Session outcomes* It is expected that participants would be more informed about the specific requirements in the principles. It is also expected that the session conveners would become more knowledgeable about what are the capacity gaps with implementing the principles that could be filled with further training. 


How would the session be structured?* A maximum of 1 hour is required. It starts with a presentation of the (this would require a projector and screen). This leads to a break oup section where data publishers are going to be given a sample dataset to open up. They would then be required to follow the principles in order to do so. This leads to a discussion/closing session where the identified outcomes are shared with the whole group. May require the use of post-its, poster sheets, markers and enough room for breakout sessions.  


How does your session contribute to OKFestival’s narrative and aims?* Opening up personal data comes with the valid concern about privacy. The community of agencies and individuals that ope up personal data need to make an input into the principles and policies that guide this behaviour. This would ensure a greater adherence to teh rules and a more effective change overall. 

Is this session appropriate and interesting for a younger audience (under 18)?* No

Would you prefer to facilitate your session in a language other than English? If so, what language?  No


Will your session involve physical movement?* Yes

If so, how will you ensure that people with all levels of physical ability are able to participate? Yes

Please indicate if you'd like support from the staff in planning. Yes

This proposal seems quite similar to Proposal #1. Could any of the organisers help clarify what's in and out of scope for each?



---------------
Proposal 4
---------------

First Name*: Antti
Last Name*: Poikola
E-mail Address*: jogi@okf.fi
Organisation: Open Knowledge Finland / My Data Working Group
Twitter account: @apoikola
Blog/ Personal Website: http://okf.fi/my-data/
If your session will be co-facilitated with others, please note their names here: Kai Kuikkaniemi, Reuben Binns,
Stream*: Tools(?)
Session Title*: My Data Principles (My Data Architecture, My Data Certification)


Session description* Max 1000 characters
as the OKfestival proposal deadline was extended to March 30th  we didn't draft any proposal yet but our OKF Finland My Data working  group will meet again this Thursday. Initially we have identified at  least three interesting session topics:

Session motivation*  
Personal Data is important part of data environment. Open Data principles do not directly apply to personal data, but there is evident need for promoting opening access to personal data, not for everybody, but for the one who data is derived from. As noted by reports from World Bank personal data is leading driver in world economy. Currently companies are collecting and utilizing data without individuals awareness. This is damaging for society and for individuals. Turning the system around, and allowing companies to utilize data originating from individuals transparently, we could potentially create more transparent economy, but also enable more efficient and functional use of personal data. For example instead of implicit profile generation we might be able to promote and generate explicit profiles, which again can translate to better service intelligence, personalized services and higher quality recommendations. Ultimately the session motivation is to advance adoption of My Data and creating foundational describtion for My Data that could be then used in promotion of the concept. 

Session outcomes*
Under  the 'architecture' topic; what are the considerations for releasing  personal data back to the individual whom it is about? I started  thinking about this last summer, wrote a short blog post - http://www.reubenbinns.com/blog/5-stars-of-personal-data-access/  which roughly follows Tim Berners-Lee's 5 stars of open data in arguing  for certain formats for personal data release. Perhaps we could develop  these further and maybe even create a scoring system for how well an  organisation is releasing personal data back to individuals.
Goal is to generate a categorization and scale for My Data principles that could be further on used in creation of My Data  

How would the session be structured?* 
There will be two short introductory presentation, and after that the session will be run as an workshop with the help of live participation systems. Audience will be split in to small groups that iteratively compose and comment different formulations of the My Data principles. Later on the work will be continued in online forums. 

How does your session contribute to OKFestival’s narrative and aims?*


Is this session appropriate and interesting for a younger audience (under 18)?*: maybe not


Would you prefer to facilitate your session in a language other than English? If so, what language?: english

Will your session involve physical movement?*: not much

If so, how will you ensure that people with all levels of physical ability are able to participate?: n/a

Please indicate if you'd like support from the staff in planning: no special needs, wifi, projector, preferably space that allows groups to come together (hence not neccesarily auditorium). 


---------------
Proposal 5: 
---------------

First Name*: Dazza & Mark
Last Name*: 
E-mail Address*:
Organisation: Open Notice & MIT Media Labs
Twitter account: 
Blog/ Personal Website: If your session will be co-facilitated with others, please note their names here: Kai Kuikkaniemi, add name here
Stream*: Tools(?)
Session Title*: "If Small Data is used to Control Big Data"  (& Transformed Data is Open Data)  Under what exceptions and conditions can data be transformed? (both small and big)  

(note this hackpad was used as a scrum to talk about current big data dialogue with the idea that this would be used for a discussion/panel on big data on March 13, then subsequently turned into a session at OKF or into a  Data Privacy Legal Hackathon Theme)  

Using some language from --> http://personal-data.okfn.org/2013/12/13/open-data-privacy/

For big data definition 
" For purposes of this Request For Information, the phrase “big data” refers to datasets so large, diverse, and/or complex, that conventional technologies cannot adequately capture, store, or analyze them" 
we are using --> https://www.federalregister.gov/articles/2014/03/04/2014-04660/government-big-data-request-for-information 


Small data controls big data theme (meaning that personal data and its control should extend to big data)  
Looking forward, a New Deal on Data is needed that both ensures aligned economic incentives for all stakeholders and workable enforcement.  To evaluate whether or to what extent a potential model adequately addresses economic and enforcement needs it is recommended that the following scenario be used to test and assess the model:  
    Scenario Question For the Big Data Dialogue: What happens when a "data subject" (aka "master controller") withdraws consent?  If the act of withdrawing consent would; severely limit or destroy the economic assumptions of the model, or would demonstrate enforcement is ineffective to ensure a right to withdraw consent then the model fails the litmus test. 
    
     As part of the LegalScienceSalon at MIT Media Lab, there is a session on Big Data and Privacy: http://legalscience.tv/legalsciencesalon/   and this includes starting the conversation with the big data dialogue on the 13th of March --> http://bigdatadialog.org/white-house-rfi-questions/  in regards to the Whitehous  request for information on Big Data Policy --> https://www.federalregister.gov/articles/2014/03/04/2014-04660/government-big-data-request-for-information
    
    Topically: The New Magna Carta was in the news from Tim Berners Lee
   
    http://www.theguardian.com/technology/2014/mar/12/online-magna-carta-berners-lee-web
    http://www.bbc.co.uk/news/uk-26540635
    
    What are the provisions of the needed Magna Carta? (renew the consent to be governed)
    What would it take to start an effort that would nee d for such a monumental civic action? 
    
    A 'new deal' would sum up the existing rights so that we could use them more effectively.  --