Six months ago Ontarioโs internationally-known privacy commissioner, Ann Cavoukian, left the government to become executive director of Ryerson Universityโs Privacy and Big Data Institute.
Sheโs spoken almost two dozen times at conferences since, but on Jan. 22 the institute will hold a coming-out of sorts by hosting its first seminar for organizations and the universityโs faculty to explain what itโs all about.
By coincidence, when I interviewed Cavoukian last Friday afternoon as news broke that police in Paris had just taken down three terrorists who combined killed 17 people. She worried the event will be used to erode security and privacy rights.
โAny time thereโs a major terrorist incident the pendulum swings back and there are calls to forget about privacy, we have to focus on security,โ she said as we sat down. โItโs always a zero-sum proposition โ โIt would be nice if we could do both, but we canโt so weโre going to focus on public safety.โ And that premise is what I want to banish โฆ you can do both. Weโve demonstrated that in countless studies and papers we produced.โ
Appointed the provincial privacy commissioner in 1997 after working in the commissionerโs office for a decade, Cavoukian had taken an interest in information privacy for some time. In 1995 she and the Dutch data protection commissioner published a paper on ways of protecting identity in information systems.
That led to the creation of the concept of Privacy by Design, which urges organizations to build privacy into their entire operations.
As a privacy commissioner, Cavoukian was responsible for enforcing provincial legislation and handling complaints. Now she and her staff of three can focus more on research and advocacy, particularly around big data โ which almost every organization feels it has to take advantage of these days.
โI honestly feel thatโs the most important role I can fill,โ she says. โDemonstrate to both business and governmentย you can have privacy and various other functions, such as security.โ
Itโs a message she says is increasingly heard in many quarters โ the Pentagon, for example, whereโs sheโs been invited to speak twice. On the other hand, she doesnโt hold much hope for agencies like the FBI and Canadaโs electronic spy agency, the Communications Security Establishment Canada (CSEC).
Itโs not that privacy has no role in law enforcement, she adds. But any organization has to make sure the personal data it holds is protected, and that only the necessary amount of personal data is held.
As for the private sector, she insists that โyou donโt have to forgo privacy in order to conduct data analytics.โ
In fact, she insists, itโs good business. Think Target or Home Depot.
โWouldnโt you rather use that data (your organization has) with confidence than have a fear that it will come back to bite you?โ she asks
โWhen I talk to companies and tell them to embed Privacy by Design into their operations (I say) donโt just do it because itโs a good thing to do, or youโreย following the law. Treat privacy as a business issue, not a compliance issue.
โBecause if you treat it as a business issue you will build trust and confidence of the customers you already have, and youโll attract new customers because you will give them the assurance you are using the information to provide them with a service they want, and the information wonโt go to a third party without their consent โ you make them a player. If you give them the privacy assurance they will give their trust and repeat business.โ
Her institute is also just getting started on research into ways people can protect personal data on the Internet, such as a token that allows information to be used in different ways by separate Web sites.
To futher that thereโs an upcoming project with the Southern Ontario Smart Computingย Innovation Platform, a consortium of 11 universities funded in part by IBM, Ottawa and the province of Ontario.
Cavoukianโs passion for protecting personal data hasnโt waned over the years, and, she notes, since the revelations of former NSA contractor Edward Snowden public distrust over government has only increased.
Businesses donโt want to be seen to be allies of governments, so companies like Google and Apple are changing their mobile operating systems so data is encrypted by default. Thatโs being fought by law enforcement agencies. โThatโs the big fight of this decade,โ predicts Cavoukian.
โTo me the saddest thing is there is such a focus on public safety and surveillance that we lose our freedoms. And if we lose our freedoms, to me the terrorists have won.โ