It Takes a Village: A Community Based Participatory Framework for Privacy Design

Mir, Darakhshan; Shvartzshnaider, Yan; Latonero, Mark

doi:10.1109/eurospw.2018.00022

Cited by 6 publications

(15 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Further, the GKC‐CI approach is also practically valuable to subcommunities, as standardized privacy guarantees and information flows are often inappropriate across multiple contexts and across all populations. It provides a practical tool to understand differences between and within communities that can support participatory approaches to better reflect all impacted actors, building on efforts to reflect specific contexts (Mir et al, 2018).…”

Section: Discussion and Future Workmentioning

confidence: 99%

GKC‐CI: A unifying framework for contextual norms and information governance

Shvartzshnaider

Sanfilippo

Apthorpe

2022

Asso for Info Science & Tech

Self Cite

View full text Add to dashboard Cite

Privacy-enhancing technologies that incorporate a socially meaningful conception of privacy, one that meets people's expectations and is ethically defensible, need to factor in contextual privacy norms and information governance as part of their design. This involves understanding what information handling practices users deem acceptable, what factors influence users' perceptions and behaviors, and how informational norms evolve. In this paper, we present GKC-CI, a unifying framework for examining contextual privacy norms and information governance in a given context to help structure research inquiries around these questions.

show abstract

Section: Discussion and Future Workmentioning

confidence: 99%

GKC‐CI: A unifying framework for contextual norms and information governance

Shvartzshnaider

Sanfilippo

Apthorpe

2022

Asso for Info Science & Tech

Self Cite

View full text Add to dashboard Cite

show abstract

“…A small fraction, 3.9%, doesn't fit neatly into the goal or risk categories. These approaches are distinct in that they engage users directly to gather requirements or solutions, leading us to define them under the umbrella of a user-centered approach [25]- [27]. The distribution of these methodologies is illustrated in Figure 4.…”

Section: Rq13: What Primary Methodology Is Adopted In Privacy Require...mentioning

confidence: 99%

“…To gather input from the stakeholders, the following methods can be used: workshops [44], [45], meetings [4], interviews [4], working groups [45], questionnaires [46], [47], or brainstorming sessions [4], [45]. A participatory approach by directly engaging with the community can also be implemented [27]. STS-ml (Socio-Technical Security Modeling Language) can be used to represent and analyze the objectives of the stakeholders [46]- [48].…”

Section: ) Understanding Users Stakeholders and Organizationmentioning

confidence: 99%

Toward a Holistic Privacy Requirements Engineering Process: Insights From a Systematic Literature Review

Herwanto,

Ekaputra,

Quirchmayr

et al. 2024

IEEE Access

View full text Add to dashboard Cite

Privacy requirements engineering is a crucial aspect of privacy engineering. It aims to integrate privacy principles into organizational and technical processes throughout the software development lifecycle. This specialized field involves various strategies, including compliance with regulatory frameworks, asset analysis, and system diagram development for threat modeling. The wide range of approaches, while beneficial in providing different perspectives, presents a significant challenge to the novice privacy engineer or developer in identifying the most effective methodologies. The lack of a single methodology highlights the need for a systematic literature review (SLR) to establish a standardized process for privacy requirements engineering that promotes consistency across different methodologies. To address this issue, we conducted a comprehensive SLR to synthesize existing privacy requirements engineering methodologies. Our analysis involved dissecting each method's processes, tasks, techniques, work products, and resources. Our review examined 40 privacy requirements engineering methodologies detailed in 50 papers, from which we extracted five key processes commonly followed in privacy requirements engineering research. We used this as the foundation for a holistic approach to facilitate the adoption of a comprehensive privacy requirements engineering process. The review also identifies ongoing challenges and suggests future directions in this field.INDEX TERMS privacy requirements engineering, privacy design engineering, privacy engineering, privacy by design

show abstract

“…(Sanfilippo, Frischmann, and Strandburg 2018, 127) Scholarly and political commitments to democratic decision-making in the governance of privacy takes us down the route of exploring connections to PD, and its democratic and political ideals, in particular. Some preliminary attempts in this Designing for the Privacy Commons direction are due to Mir et al (2018) and Shilton et al (2008). Yet, at the time of writing this chapter, there is almost no work on operationalizing PD to conceptualize privacy.…”

Section: Formulation and Governance Of Privacy Norms Via Participatory Designmentioning

confidence: 99%

Designing for the Privacy Commons

Mir¹

2021

Governing Privacy in Knowledge Commons

Self Cite

View full text Add to dashboard Cite

This chapter frames privacy enforcement processes through the lens of governance and situated design of sociotechnical systems. It considers the challenges in formulating and designing privacy as commons (as per the Governing Knowledge Commons framework (Sanfilippo, Frischmann, and Strandburg 2018)) when privacy ultimately gets enacted (or not) in complex sociotechnical systems.Privacy has traditionally (in computing, legal, economic, and other scholarly communities) been conceptualized in an individualistic framing, often as a private good that is traded off against other goods. In this framing, meaningful decision-making processes about one's data are available to oneself, and any resulting decisions are assumed to impact only one's own self. While social scientists have articulated and studied social conceptualizations of privacy (Petronio and Altman

show abstract

It Takes a Village: A Community Based Participatory Framework for Privacy Design

Cited by 6 publications

References 4 publications

GKC‐CI: A unifying framework for contextual norms and information governance

GKC‐CI: A unifying framework for contextual norms and information governance

Toward a Holistic Privacy Requirements Engineering Process: Insights From a Systematic Literature Review

Designing for the Privacy Commons

Contact Info

Product

Resources

About