Privacy by Design

Introduction to Data Privacy

Tiffany Lewis

Security and Privacy Instructor

Privacy by Design principles

Proactive, not Reactive
Privacy as the Default Setting
Privacy Embedded into Design
No Loss in Functionality
End-to-End Security
Visibility and Transparency
Respect for User Privacy: Keep it User-Centric

Building Privacy

¹ Cavoukian, A. (2011, January). Privacy by design ² information and privacy commissioner of Ontario. Privacy by Design The 7 Foundational Principles . Retrieved November 28, 2022, from https://www.ipc.on.ca/wp-content/uploads/Resources/pbd-implement-7found-principles.pdf

Privacy user interface

Privacy by Design impacts users daily
User Interface (UI) - user interaction with websites and applications
User interface privacy design
Feel natural, not clunky

Tiffz Backpackz webpage

Just in time notice

Just in Time Notice - Notice appears just in time for users
Increasing popularity due to privacy laws
Goal: inform users "what", "why", and "how" data is being collected

Just in Time Notice

Tiffz Backpackz Cookies on the landing page

Tiffz Backpackz landing page

Tiffz Backpackz Terms of Service landing page

Tiffz Backpackz Privacy Policy on the landing page

Tiffz Backpackz Privacy Policy page

Tiffz Backpackz Account Info on the landing page

Tiffz Backpackz Wishlist on the landing page

¹ Li, Y., Zheng, N., Wang, H., Sun, K., & Fang, H. (2020, October 26). A measurement study on Amazon Wishlist and its privacy exposure. A Measurement Study on Amazon Wishlist and Its Privacy Exposure. Retrieved November 28, 2022, from https://csis.gmu.edu/ksun/publications/icc17_wishlist.pdf

Orders and Returns on the Landing page

Let's practice!

Introduction to Data Privacy