Government & Health Technologies Conference and Expo
March 8 - 9, 2006
Ottawa Congress Centre - Capital Hall Ottawa, Canada
Alec Campbell
Executive Director, Privacy & Policy Assessment, Government of Alberta

Privacy by Design: Making It Real

The presentation will focus on some important architectural issues that must be addressed by application developers and database designers if they are to ensure that privacy is addressed as an integral feature of applications and data repositories. Examples will be provided from Alberta's privacy architecture.

Topics to be addressed include the following:

Vocabulary: Common vocabulary for the description of privacy requirements, architecture elements and related concepts.

Identifier Isolation: The isolation of identifiers from the personal attributes of those whom they identify.

Privacy Transformation: The ability to optimize on demand the amount of personal information that is revealed in screens, reports and data warehouses, to achieve a balance between privacy requirements and business objectives.

Private Access: Access by data subjects to their own personal information.

Accountability: logs, exception reports and other features to support the legal accountability of the organization.

Privacy Metadata: Metadata to record privacy-related data characteristics and policies

Policy Automation: Rules and rules engines to automate routine privacy decisions at the transaction level.

Biographical Summary:

Alec is Executive Director of Privacy Policy and Assessment with the Office of the Corporate Chief Information Officer in the Government of Alberta. He leads the development of IT privacy strategy and architecture.
Alec has been involved in the administration of freedom of information and privacy legislation since 1993. He has held privacy-related directorships in both the Government of Alberta and Alberta’s Office of the Information and Privacy Commissioner.
In 2001 he introduced the Alberta Information and Privacy Commissioner's privacy impact assessment template and process.
In 2002 and 2003 he led the development of Alberta's award-winning Privacy Architecture, which is the first fully-elaborated privacy architecture to have been included in a functioning enterprise architecture. He currently leads the implementation of the privacy architecture, as well as corporate IT initiatives in privacy impact assessment and IT privacy policy.