Privacy and Information Quality

1
Privacy and Information Quality

• SEARCH Membership Group Meeting
• January 27-30, 2005
• Francis X. (Paco ) Aumand III
• Vermont Department of Public Safety
• Division of Criminal Justice Services

2
Objective of Breakout Session

• In today's integrated justice environment is
  there a need to be concerned with the use and
  dissemination of personal identifying
  information?
• This breakout session will discuss what privacy
  is, explain why the protection of personal
  identifying information is important, and
  describe some of the fundamental components of
  privacy policy.

3
Privacy - How do we define it?

• Privacy is the power to selectively reveal
  oneself to the world.

4
Privacy

• The appropriate use of personal identifying
  information under the circumstances. What is
  appropriate will depend on the context, law and
  the individuals expectation.

5
Right to Privacy

• The possible right to be left alone, in the
  absence of some reasonable public interest in a
  persons activities.

6
(No Transcript)
7
Personal Identifying Information

• Personal identifying information is one or more
  pieces of information when considered together,
  or combined with other information, and when
  considered in the context of how it is presented
  or how it is gathered, is sufficient to specify a
  unique individual.

8

Information Privacy relates to ones personal
information.
9
Criminal History
Intelligence Systems
CAD/RMS
10
Garbage In, Garbage Out
NO
11
Garbage In, Gospel Out
12
Eight Privacy Design Principles

• Purpose Specification
• Collection Limitation
• Data Quality
• Use Limitation
• Security Safeguards
• Openness
• Individual Participation
• Accountability

13
The right to privacy balanced against the
administration of justice, protecting the public
and the publics right to know continues to
provide a framework for fair information
practices in the U.S.
14
Privacy Policy

• Mapping data flows
• Determining data sensitivity
• Using a policy design template

15
Mapping Data Flows

• Mapping involves preparing a flowchart depicting
  each stage of the justice process and determining
  what information is collected, accessed, used,
  and disclosed at those stages.

16
Determining Data Sensitivity
Red-light Information, not disseminated outside
the holding agency.
Yellow-light Information. It is not always
available to other agencies or the public.
Green-light Information. It is available, by law
or tradition, to justice agencies or people or
organizations upon general request.
17
Privacy Policy Template

• Purpose Statement. This broad statement
  describes the justice agencys mandate, the need
  for information sharing, the privacy interests
  the agency seeks to protect, and the need for
  public access.
• What is the purpose of your information system?
• Does your collection procedures mirror your
  purpose?

18
. Purpose The Law Enforcement N-DEx will be an
incident- or event-based information-sharing
system for local, state, tribal, and federal law
enforcement agencies, which securely collects and
processes crime data in support of
investigations, crime analysis, law enforcement
administration, strategic/tactical operations,
and national security responsibilities.
19
Privacy Policy Template

• Privacy Policy Scope. This sets out the
  framework of interests to be protected and how
  the policy will be enforced.

20
Privacy Policy Template

• Verification, Maintenance, and Correction of
  Information. The agency spells out how it
  ensures data quality.
• What methods are in place to ensure quality?
• Does the system perform internal verification of
  information?
• Does the system require other sources to verify
  the accuracy of the information?

21
Privacy Policy Template

• Access Statement. The statement identifies the
  classification of information and which justice
  agencies have access to it, as well as identifies
  who may gain access to information under the
  publicly accessible category.
• Who are your justice partners?
• Who is the public?

22
Privacy Policy Template

• Access Method. The method-of-access statement
  should reflect the agencys best attempt to
  deliver yellow or green information to other
  justice agencies and the public.
• What information does your agency have?
• In what form is it in?
• Are there laws that sets limits on public access
  to this data?

23
Privacy policy helps to protect the integrity of
the investigative process. And the integrity of
our information systems.
Privacy Policy
Criticism related to Privacy Concerns
24
Resources

• http//www.ncja.org/pdf/privacyguideline.pdf
• Report of the National Task Force on Privacy,
  Technology and Criminal Justice Information
• http//it.ojp.gov/documents/200411_global_privacy_
  document.pdf
• http//it.ojp.gov/topic.jsp?topic_id42