Lecture

Abusive Data Collection: Risks and Protections

Graph Chat

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

Description

This lecture covers the risks associated with abusive data collection, including the definition of personal data, sensitive data, and potential consequences. It also explores how seemingly innocuous data can become sensitive when combined from various sources. The instructor discusses three key protections for personal data: Differential Privacy, Hashing, and Encryption. Additionally, the lecture delves into the importance of careful planning before collecting user data, emphasizing the need for transparency and security measures. Various techniques for data protection, such as encryption and de-identification, are explained in detail, highlighting the challenges and ongoing research in this field.

Official source

Ontological neighbourhood

Computer engineering

Computer security: Privacy

Related concepts (32)

Personal data

Personal data, also known as personal information or personally identifiable information (PII), is any information related to an identifiable person. The abbreviation PII is widely accepted in the United States, but the phrase it abbreviates has four common variants based on personal or personally, and identifiable or identifying. Not all are equivalent, and for legal purposes the effective definitions vary depending on the jurisdiction and the purposes for which the term is being used.

Data Protection Directive

The Data Protection Directive, officially Directive 95/46/EC, enacted in October 1995, was a European Union directive which regulated the processing of personal data within the European Union (EU) and the free movement of such data. The Data Protection Directive was an important component of EU privacy and human rights law. The principles set out in the Data Protection Directive were aimed at the protection of fundamental rights and freedoms in the processing of personal data.

Data security

Data security means protecting digital data, such as those in a database, from destructive forces and from the unwanted actions of unauthorized users, such as a cyberattack or a data breach. Disk encryption Disk encryption refers to encryption technology that encrypts data on a hard disk drive. Disk encryption typically takes form in either software (see disk encryption software) or hardware (see disk encryption hardware). Disk encryption is often referred to as on-the-fly encryption (OTFE) or transparent encryption.

Information privacy

Information privacy is the relationship between the collection and dissemination of data, technology, the public expectation of privacy, contextual information norms, and the legal and political issues surrounding them. It is also known as data privacy or data protection. Data privacy is challenging since attempts to use data while protecting an individual's privacy preferences and personally identifiable information. The fields of computer security, data security, and information security all design and use software, hardware, and human resources to address this issue.

General Data Protection Regulation

The General Data Protection Regulation (Regulation (EU) 2016/679, abbreviated GDPR) is a European Union regulation on Information privacy in the European Union (EU) and the European Economic Area (EEA). The GDPR is an important component of EU privacy law and human rights law, in particular Article 8(1) of the Charter of Fundamental Rights of the European Union. It also governs the transfer of personal data outside the EU and EEA.

Related lectures (64)

Privacy Technologies and Data Protection

Explores privacy technologies, data protection, surveillance risks, and Privacy Enhancing Technologies for social and institutional privacy.

Privacy technologies and data protection

Explores privacy importance, PETS, anti-surveillance technologies, and the SwissCovid case study.

Data Protection Law: Principles and Rights

Covers the principles and rights of data protection law under GDPR.

Privacy: Paradigms and Adversaries

Covers privacy paradigms, data collection by companies, legal frameworks, trust in data providers, and the security vs. privacy debate.

Personal Devices: Security and Privacy