Nissenbaum’s Contextual Integrity

Privacy is contextual integrity. Does it meet expectations - legitimate.

A flow occurs in a social context (medical vs marketplace) and includes a subject (patient or shopper) a sender and a recipient (doctor, ad network), information type (medical info, financial info) transmission principle (consent, coersion, confidentiality).

descriptive claims:

Privacy is provided by appropriate flows of information.

Appropriate information flows are those that conform with contextual information norms

Contextual informational norms refer to five independent parameters: data subject, sender, recipient, information type, and transmission principle

Conceptions of privacy are based on ethical concerns that evolve over time

Contextual integrity ties adequate protection for privacy to norms of specific contexts, demanding that information gathering and dissemination be appropriate to that context and obey the governing norms of distribution within it.

Calo’s Harms Dimensions

objective - subjective

Legal compliance

a. Full life cycle protection

b. Embedded into design

c. Full functionality

d. Visibility and transparency

e. Proactive not reactive

f. Privacy by default

g. Respect for users

a. How design affects users

b. 14 methods

c. Strategies for skillful practice

a. Collection

b. Use

c. Disclosure

d. Retention

e. Destruction