Balancing Privacy, Security and Innovation
Charles Mok
Legislative Councillor (Information Technology)
Privacy & Innovation (In Pursuit of Right Incentives) @ HKU
8 June 2015
By 2020,
Everyone will be carrying mobile supercomputers
Every action in our digital life creates traces of data...
money is in the data
...what happens to these data?
Empowered by
data technologies
Cloud
Mobility
Big Data
Data Economy
Unlocking value through data mining and analytics to create insight
Users' riding history can show where a person goes, when and how often
Location,
Location,
Location...
Your virtual helper
...or a 'big brother'?
Combines users' location, calendar, email, searches, apps to generate search and recommendations
Facial recognition learns better than we do
What does it mean for privacy protection?
Implicit
consent
Users giving up personal data in exchange for free services/apps
Metadata
Logs and records reveals more about a person than the content of communication
Usage of data
How are data stored and mined?
Users have little knowledge or control
Connections, roles and relationships multiply exponentially
What is the future of our data generated today?
credit rating, insurance, job search and social welfare?
Social media and credit rating
Lenders are turning to social media to assess borrowers
Where is the line between innovation and
privacy protection?
Challenges
-
Implementing privacy policies in the cloud
-
Increasing ease of linking and analyzing information from multiple sources
-
Cross border data transfer
-
Usage of personal data in public domain
How to balance data protection, privacy and open access to information?
Besides education for public awareness...
...what can the government do?
the value of economic growth
fueled by this data driven innovation and technological development
Need to balance
protection of privacy
Laws need to stay relevant
to protect customer data in a data-driven world with opportunities and threats
Controversy: 'Consumer Privacy Bill of Rights Act'
-
Transparency
-
Individual Control
-
Respect for Context
-
Focused Collection and Responsible Use
-
Security
-
Access and Accuracy
-
Accountability
Law or self-regulation?
What about Hong Kong?
eHealth Record Sharing System Bill and beyond...
Stakeholders first
Data security, anonymity, risks
Facilitate innovation with clarity
Thank you
charlesmok@charlesmok.hk
Facebook: Charles Mok 2012
Twitter: @charlesmok