# Presentation: 689069

## What “Techies" bring to Privacy: Designing Privacy Principles into Systems

**What “Techies" bring to Privacy:**** **Designing Privacy Principles into Systems

- Cindy Southworth, MSW
- Director of Technology
- National Network to End Domestic Violence

## Discussion Outline

- The connection between Privacy and Information Sharing Technologies
- How Domestic Violence is related
- Global Privacy and Information Quality Working Group
- Designing Privacy Into Systems

## What’s Privacy got to do with it?

## Cindy Southworth, Director of Technology
National Network to End Domestic Violence
660 Pennsylvania Ave, SE Suite 303
Washington, DC 20003
phone: 202-543-5566   fax: 202-543-5626
www.nnedv.org	cs@nnedv.org

SafetyNet@nnedv.org

**Cindy Southworth**, Director of Technology
- National Network to End Domestic Violence
- 660 Pennsylvania Ave, SE Suite 303
- Washington, DC 20003
- phone: 202-543-5566   fax: 202-543-5626
- www.nnedv.org	cs@nnedv.org
**SafetyNet@nnedv.org**

**Safety Net: ***the National Safe & Strategic Technology Project*

## Privacy = Security

**Justice = Privacy**

## Global Privacy &Information Quality Working Group

## “Fair Information Practices”

- 1. Limit the collection of personal information to that required for the purposes intended. (“Collection Limitation Principle”)
- 2. Ensure data accuracy. (“Data Quality Principle”)
- 3. Define agency purposes for information to help assure agency uses of information are appropriate. (“Purpose Specification Principle”)
- 4. Assure appropriate limits on agency use of personal information. (“Use Limitation Principle”)

## 5. Maintain effective security over personal information. (“Security Safeguards Principle”)
6. Promote a general policy of openness about agency practices and policies regarding personal information. (“Openness Principle”)
7. Allow individuals reasonable access & opportunity to correct errors in their personal information held by the agency. (“Individual Participation Principle”)
8. Identify, train, and hold agency personnel accountable for adhering to agency information quality and privacy policies. (“Accountability Principle”)

- 6. Promote a general policy of openness about agency practices and policies regarding personal information. (“Openness Principle”)
- 7. Allow individuals reasonable access & opportunity to correct errors in their personal information held by the agency. (“Individual Participation Principle”)
- 8. Identify, train, and hold agency personnel accountable for adhering to agency information quality and privacy policies. (“Accountability Principle”)

## Designing Privacy Into Systems 

- What and Why
- Current Initiatives
- What you can do
- Reaching beyond privacy folks

## Designing Privacy Discussion

- Ideas	*Balance between privacy, tech, policy, exchanges
- Vague Statutes	*Ownership	*Hiring critics 
- Identification of individuals – correct info – personal information
- Getting information out to broad audience
- Requirements – GJXDM structures     *Role based definitions, data fields
- Database modeling, If__, then__
- HIPAA service models – RADS (restricted access)
- Need to know – track information – identity & location only if needed
- Responsibility of Developers – awareness is essential
- Governance Based access – MOU, tag electronically
- Sometimes don’t need a database – don’t need to keep the data, need to be able to query existing information
- MS RMS – PKI – apply to documents, email, etc – once applied, templates
- Whole list of names – victims & witnesses
- PrivacyJournal.net  - Directory of Privacy Professionals (Court Access)

## Cindy Southworth, Director of Technology
National Network to End Domestic Violence
660 Pennsylvania Ave, SE Suite 303
Washington, DC 20003
phone: 202-543-5566   fax: 202-543-5626
www.nnedv.org	cs@nnedv.org

SafetyNet@nnedv.org

**Cindy Southworth**, Director of Technology
- National Network to End Domestic Violence
- 660 Pennsylvania Ave, SE Suite 303
- Washington, DC 20003
- phone: 202-543-5566   fax: 202-543-5626
- www.nnedv.org	cs@nnedv.org
**SafetyNet@nnedv.org**

**Safety Net: ***the National Safe & Strategic Technology Project*