Privacy Engineering From Principles to Practice: A Roadmap

Overview

• The paper discusses the concept of "privacy engineering" and provides a roadmap for transitioning from privacy principles to practical implementation.
• It argues for a broader view of privacy engineering beyond traditional approaches like anonymization, data minimization, and security.
• The paper recognizes the importance of both functional and non-functional properties of privacy mechanisms, emphasizing the need to address the latter.

Plain English Explanation

The paper explores the idea of "privacy engineering" - the practice of designing and building systems that respect and protect people's privacy. It suggests that traditional approaches to privacy, such as making data anonymous, collecting only the minimum required information, and focusing on security, are not enough on their own.

Instead, the paper argues for a more comprehensive view of privacy engineering. It proposes considering not just the technical "functions" of privacy mechanisms (like anonymization), but also their "non-functional" aspects - things like how usable, transparent, and accountable the privacy protections are. The authors believe these non-functional properties are just as important as the technical ones in ensuring people's privacy is truly respected.

The paper provides a roadmap for moving from high-level privacy principles to practical, real-world implementation. It aims to give guidance on how organizations and technology teams can take a more holistic approach to building privacy-preserving systems that work well for both the service provider and the people using the service.

Technical Explanation

The paper begins by defining "privacy engineering" and arguing for a broader view of the field. Traditionally, privacy engineering has focused on techniques like anonymization, data minimization, and security. The authors contend that this limited scope is insufficient, and that privacy engineering must also consider the user experience, transparency, and accountability of privacy mechanisms.

The paper then introduces the concept of "functional" and "non-functional" properties of privacy technologies. Functional properties are the technical capabilities, like anonymizing data or restricting access. Non-functional properties relate to how the technology is experienced and perceived, such as its usability, explainability, and alignment with users' expectations. The authors emphasize the importance of addressing both types of properties to achieve effective, trustworthy privacy protections.

To illustrate the need for this more comprehensive approach, the paper discusses several real-world examples where privacy harms have occurred due to a lack of attention to non-functional concerns. It also highlights research showing that users care about these non-functional aspects of privacy just as much as the technical functionality.

Finally, the paper outlines a roadmap for transitioning from privacy principles to practical, holistic privacy engineering. This includes steps like defining clear privacy requirements, designing for both functional and non-functional properties, and continuously evaluating and improving privacy protections.

Critical Analysis

The paper makes a compelling case for expanding the scope of privacy engineering beyond just technical mechanisms. Its emphasis on non-functional properties, such as usability and transparency, is particularly insightful. The real-world examples it provides demonstrate the very real consequences that can arise when these aspects are overlooked.

That said, the paper could have delved deeper into some of the specific challenges and tradeoffs involved in addressing non-functional privacy concerns. For instance, it briefly mentions the tension between privacy and other design goals like user experience, but does not explore this in detail. Additionally, the roadmap it outlines, while a helpful high-level guide, could be made more concrete with additional guidance and best practices.

Overall, the paper provides a valuable framework for rethinking privacy engineering. By highlighting the importance of the user experience and other non-technical factors, it encourages researchers and practitioners to take a more holistic, human-centered approach to building privacy-preserving systems.

Conclusion

This paper advocates for a significant expansion of the privacy engineering field, moving beyond a narrow focus on technical mechanisms like anonymization and security. It argues that effective privacy protection requires equal attention to the "non-functional" aspects of privacy technologies, such as usability, transparency, and accountability.

By outlining this broader, more comprehensive vision for privacy engineering, the paper lays the groundwork for developing systems that truly respect and safeguard people's privacy. Its roadmap provides a helpful starting point for organizations and technology teams looking to transition from high-level privacy principles to practical, real-world implementation.

Ultimately, the paper's key contribution is its insistence that privacy engineering must consider the human element - how people experience and interact with privacy protections - in addition to the technical specifications. This shift in perspective has the potential to drive meaningful progress in the field and deliver more trustworthy, user-centric privacy solutions.