SUBSCRIBE

Interview: Privacy guru Ann Cavoukian

Six months ago Ontarioโ€™s internationally-known privacy commissioner, Ann Cavoukian, left the government to become executive director of Ryerson Universityโ€™s Privacy and Big Data Institute.

Sheโ€™s spoken almost two dozen times at conferences since, but on Jan. 22 the institute will hold a coming-out of sorts by hosting its first seminar for organizations and the universityโ€™s faculty to explain what itโ€™s all about.

By coincidence, when I interviewed Cavoukian last Friday afternoon as news broke that police in Paris had just taken down three terrorists who combined killed 17 people. She worried the event will be used to erode security and privacy rights.

โ€œAny time thereโ€™s a major terrorist incident the pendulum swings back and there are calls to forget about privacy, we have to focus on security,โ€ she said as we sat down. โ€œItโ€™s always a zero-sum proposition โ€” โ€˜It would be nice if we could do both, but we canโ€™t so weโ€™re going to focus on public safety.โ€™ And that premise is what I want to banish โ€ฆ you can do both. Weโ€™ve demonstrated that in countless studies and papers we produced.โ€

Appointed the provincial privacy commissioner in 1997 after working in the commissionerโ€™s office for a decade, Cavoukian had taken an interest in information privacy for some time. In 1995 she and the Dutch data protection commissioner published a paper on ways of protecting identity in information systems.

That led to the creation of the concept of Privacy by Design, which urges organizations to build privacy into their entire operations.

As a privacy commissioner, Cavoukian was responsible for enforcing provincial legislation and handling complaints. Now she and her staff of three can focus more on research and advocacy, particularly around big data โ€” which almost every organization feels it has to take advantage of these days.

โ€œI honestly feel thatโ€™s the most important role I can fill,โ€ she says. โ€œDemonstrate to both business and governmentย  you can have privacy and various other functions, such as security.โ€

Itโ€™s a message she says is increasingly heard in many quarters โ€” the Pentagon, for example, whereโ€™s sheโ€™s been invited to speak twice. On the other hand, she doesnโ€™t hold much hope for agencies like the FBI and Canadaโ€™s electronic spy agency, the Communications Security Establishment Canada (CSEC).

Itโ€™s not that privacy has no role in law enforcement, she adds. But any organization has to make sure the personal data it holds is protected, and that only the necessary amount of personal data is held.

As for the private sector, she insists that โ€œyou donโ€™t have to forgo privacy in order to conduct data analytics.โ€

In fact, she insists, itโ€™s good business. Think Target or Home Depot.

โ€œWouldnโ€™t you rather use that data (your organization has) with confidence than have a fear that it will come back to bite you?โ€ she asks

โ€œWhen I talk to companies and tell them to embed Privacy by Design into their operations (I say) donโ€™t just do it because itโ€™s a good thing to do, or youโ€™reย  following the law. Treat privacy as a business issue, not a compliance issue.

โ€œBecause if you treat it as a business issue you will build trust and confidence of the customers you already have, and youโ€™ll attract new customers because you will give them the assurance you are using the information to provide them with a service they want, and the information wonโ€™t go to a third party without their consent โ€” you make them a player. If you give them the privacy assurance they will give their trust and repeat business.โ€

Her institute is also just getting started on research into ways people can protect personal data on the Internet, such as a token that allows information to be used in different ways by separate Web sites.

To futher that thereโ€™s an upcoming project with the Southern Ontario Smart Computingย  Innovation Platform, a consortium of 11 universities funded in part by IBM, Ottawa and the province of Ontario.

Cavoukianโ€™s passion for protecting personal data hasnโ€™t waned over the years, and, she notes, since the revelations of former NSA contractor Edward Snowden public distrust over government has only increased.

Businesses donโ€™t want to be seen to be allies of governments, so companies like Google and Apple are changing their mobile operating systems so data is encrypted by default. Thatโ€™s being fought by law enforcement agencies. โ€œThatโ€™s the big fight of this decade,โ€ predicts Cavoukian.

โ€œTo me the saddest thing is there is such a focus on public safety and surveillance that we lose our freedoms. And if we lose our freedoms, to me the terrorists have won.โ€

Tech Jobs

Categories