The Architecture of Privacy: On Engineering Technologies that Can Deliver Trustworthy Safeguards

Technology’s influence on privacy not only concerns consumers, political leaders, and advocacy groups, but also the software architects who design new products. In this practical guide, experts in data analytics, software engineering, security, and privacy policy describe how software teams can make privacy-protective features a core part of product functionality, rather than add them late in the development process.

Ideal for software engineers new to privacy, this book helps you examine privacy-protective information management architectures and their foundational components—building blocks that you can combine in many ways. Policymakers, academics, students, and advocates unfamiliar with the technical terrain will learn how these tools can help drive policies to maximize privacy protection.

• Restrict access to data through a variety of application-level controls
• Use security architectures to avoid creating a single point of trust in your systems
• Explore federated architectures that let users retrieve and view data without compromising data security
• Maintain and analyze audit logs as part of comprehensive system oversight
• Examine case studies to learn how these building blocks help solve real problems
• Understand the role and responsibilities of a Privacy Engineer for maintaining your privacy architecture

Table of Contents

Part I. Getting Started
Chapter 1. What Is Privacy?
Chapter 2. Personal Data and Privacy
Chapter 3. Case Studies in Data Collection
Chapter 4. Information Security: Protecting Data from Unauthorized Access

Part II. Access and Control: Controlling Authorized Data Access
Chapter 5. Security Architecture
Chapter 6. Access Controls
Chapter 7. Data Revelation

Part III. Oversight: Holding Users and Systems Accountable
Chapter 8. Federated Systems
Chapter 9. Audit Logging
Chapter 10. Data Retention and Data Purging

Part IV. Putting It All Together
Chapter 11. Practical Applications and Use Cases
Chapter 12. Enter the Privacy Engineer
Chapter 13. The Future of Privacy