The Norwegian Data Protection Authority - privacy built in
Martha Eike - @marthaeike
Hvordan kan utvikleren ivareta personvernet til den enkelte?
Privacy: you have the right to know where your personal information is stored and what it consists of.
Lol @ Android
As a platform vendor you need to take privacy seriously, the opportunities given to developers will be misused.
Datatilsynet has an anonymity guidance that should be considered before publishing private information.
“Godt personvern for apputviklere” contains guidance for app developers.
Privacy by design
- Do a Data Protection Impact Assessment (DPIA) early in the projects lifecycle. Assess, determine risks, schedule activities and remedies and document that this has been done.
- Make it private by default, aka. do the opposite of what Facebook does. Don collect information “just in case you need it”.
- Think privacy also during design. Example is the iOS location tracking icon (which ironically is off by default).
- Balance privacy whit business concerns. It’s not either or, it’s both at the same time.
- Use systems thinking, privacy should be considered in all aspects of the projects solution.
- Openness. The user should know what information is being stored and what it is used for. The user should be able to op out if needed.
- Respect the user!