General Data Protection Regulation (GDPR). It seems to be gaining momentum as a framework for personal data protection. Various governments have been releasing data protection Acts of their own lately too. At the moment the focus appears to be on data privacy within public bodies, but big business is sure to be required to meet similar demands too.
It hadn’t really dawned on me just how important data privacy was in the world of OSS until a few things clicked into place.
Having worked with data, I’ve worked within privacy frameworks defined by customers and undertaken compulsory training courses on their policies, so I certainly have an awareness of privacy.
Knowing the expanses of data lakes and their ability to connect data dots together means I had an awareness that if you aggregate enough seemingly insensitive data points, you can start getting a more personal viewpoint than policies had allowed. This article from Carl Piva and Sarah Wray of TM Forum compares this aggregation to junk bonds – when you bundle too many bonds with varying risk profiles together, eventually you might not know ‘what’s in the box’.
Margot Robbie explains it here in relation to sub-prime mortgages (language warning).
But it clicked for me when I was doing some research on TM Forum’s API Portal, specifically the Privacy API, and began thinking about what IoT, smart homes, smart cities, connected cars, wearables, etc represent. Privacy becomes a whole lot more important in the design of OSS now. It’s no longer just getting the right people/policy frameworks in place, but designing OSS and data collection with privacy in mind. From the link above, Carl and Sarah are thinking along exactly the same lines!Read the Passionate About OSS Blog for more or Subscribe to the Passionate About OSS Blog by Email