- Information Assymetry, and
- Public/Peer Judgement.
Information assymetry is a major issue facing society on many fronts. It is a key factor in many activities in life: In markets, buyers and sellers both think (and often do) know more or different things than the other; negotiation is founded upon it - although enlightened negotiation endeavours to eliminate it as part of the process; the justice system in most democratic societies is based on the recognition of the existence of this assymetry and although it is designed to eliminate it, lawyers inevitably try to increase it. In terms of privacy, it is present in many forms. In the ideal fully private society, the knowledge of your activities rests with you alone and with those with whom you share those activities. In addition, none of your activities are recorded unless you yourself record them for personal use (such as a journal). Until the last century, this was a fair description of life on earth. With the advent of computers, gathering and analysing "transactional information" (an interaction, even if not commercial in nature, can be considered a transaction) which was once far too labour intensive, has become simple and valuable. Customer relationship management is a business process that is designed to gather as much information as possible about transactions between a business and its customers. As we conduct more and more transactions online and governments and businesses gather more and richer information on those transactions, we begin to exist in a "surveillance" society. All this, without discussing the pervasive deployment of video cameras throughout our world, all with effectively infinite storage capability. Here we have a significant assymetry because there is a veritable mountain of information in the hands of a few, while the rest of us have only our personal information - much of which is no longer private and therefore has no value in the balance of assymetry.
Judgement is the issue that causes us the true problem with our growing lack of privacy. Few people would really care if the world knew that they had purchased a Starbuck's double tall soya latte on Tuesday at 8:46 am at the Pine Street Starbuck's in Seattle. They might be less happy about people finding out about the singles community web sites that they frequent (especially if they are married!), and they would probably be very upset to have their juvenile sexual assault charge (never convicted) brought to the attention of their community. Now, all of the above (assuming the acts are factual) are in and of themselves innocuous. What makes them disconcerting is not the "record" but the judgement of others regarding the record. I don't really care if everyone knows all the embarrassing things I've done in my life - but I do care if people choose to judge me badly (and therefore treat me poorly) because of it. Since general social behaviour predicts that the one almost always leads to the other, we get very up tight when we find out that our entire lives are being monitored and we have little or no control over the disposition of the information.
So what do we do about this? Unfortunately there is little an individual can do alone, except conduct themselves in the most exemplary and invisible manner possible.
Especially in the US, information gathering is becoming a real problem, as government attempts to augment their already considerable database of personal data, with the data from other sources such as telecom company account records, search engine query histories, and business' customer databases both online and offline; and businesses are constantly developing new methods of capture and inference to increase the value of their customer data assets.
There are very few people in western society who would support the disclosure (say to the press or their peers) of their private activities. So risk number one (thanks to the Judgement issue) is that the holders of this data could use it for extortion purposes. However, it is important to note the distinction that this is really only an issue in a situation where there is information assymetry. If everyone already knows (or can know easily) a piece of information, then the value to those who attempt to profit from assymetry or judgement is non-existent.
Given that the data capture and surveillance capabilities of technology are going to only increase in the future, and there is little hope that regulation of any kind will be able to keep pace with technology, we are left with little to do in terms of reining in the gathering and consolidation/analysis of our personal information. That leaves us with only two options;
- No More Secrets: Make all information gathered, as well as all derivative works, available to everybody.
- Everybody Secret: Create an infrastructure that anonymizes everything in our lives.
The No More Secrets concept appears at first blush to be ridiculous. Who would agree to have all of their private information made available to everyone anytime, even knowing that it would be the same for everybody? But if you have ever spent any time in a small town, you may have a sense of what it would be like. There are very few secrets in a small town, and yet there is also a sense of propriety - just because you know something, doesn't mean you make it a public issue - you keep your counsel and everyone else does, it's the polite thing to do. Now just bring that up a notch, to worldwide - people would be more polite, I suspect. While this would cause a whole bunch of upheaval, especially from those who regularly profit from assymetry, it would create an environment where abuse would be very difficult indeed.
The Everybody Secret concept is much more difficult to implement, because it requires constant updating of systems, and a trusted third party organisation to manage those systems without disclosing internal linkages. The solution would work similar to some of the new "virtual credit-card" services currently in use for internet purchases. Users would register and prove their identity to the trusted third party; they would then be provided "virtual identities" for every activity they undertake including financial transactions. Shipping would be handled by anonymised mailing systems and disconnected from the purchase wherever possible. There are hundreds of components that would need to be developed and then constantly evolved as technology evolved. It is not a trivial project and it would effectively render "customisation"
systems, customer management systems, and most law enforcement systems useless. People would be able to operate with exceptional privacy, at least online. Obviously, being able to operate completely anonymously online will not remove real world surveillance, but it will seriously reduce existing capabilities in many countries to monitor criminal activity.
Of the two solutions, only one effectively deals with information assymetry. Both (to varying degrees) deal with the judgement issue.
As I see it, these are the extremes on the continuum of solutions to the privacy debate. I would love to hear other models that could address this issue.