{"id":622,"date":"2006-10-24T10:17:51","date_gmt":"2006-10-24T18:17:51","guid":{"rendered":"\/?p=622"},"modified":"2006-10-30T10:34:53","modified_gmt":"2006-10-30T18:34:53","slug":"first-law-of-identity","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=622","title":{"rendered":"First Law of Identity"},"content":{"rendered":"<p><a href=\"\/wp-content\/resources\/7_laws_brochure.pdf\" class=\"broken_link\"><img src=\"\/wp-content\/images\/2006\/10\/law-1.jpg\" \/><\/a><\/p>\n<p>Here is the First Law of Identity as expressed by Anne Cavoukian, Privacy Commissioner of Ontario. The &#8220;technology&#8221; law is on the left; the &#8220;privacy-embedded&#8221; form is on the right:<\/p>\n<div>\n<div style=\"padding-right: 10px; margin-top: 140px; padding-left: 10px; font-size: 14pt; background: #f0f0f0; float: left; padding-bottom: 10px; margin-left: 30px; width: 250px; line-height: 1.2em; padding-top: 10px; font-family: arial\">USER CONTROL<br \/>\nAND CONSENT&nbsp;&nbsp;<span style=\"font-size: 12pt\">Technical identity systems must only reveal information identifying a user with the user&#39;s consent. <\/span><\/div>\n<div style=\"padding-right: 10px; margin-top: 30px; padding-left: 10px; font-size: 14pt; background: #f0f0f0; float: left; margin-bottom: 0px; padding-bottom: 10px; margin-left: 30px; width: 250px; line-height: 1.2em; padding-top: 10px; font-family: arial; magin-top: 50px\">PERSONAL CONTROL<br \/>\nAND CONSENT&nbsp;&nbsp;&nbsp;<\/p>\n<p><span style=\"font-size: 12pt\">Technical identity systems must only reveal information identifying a user with the user&#39;s consent. Personal control is fundamental to privacy, as is freedom of choice. Consent is pivotal to both.<\/span><span style=\"font-size: 12pt\">>Consent must be invoked in the collection, use and disclosure of one&#39;s personal information. Consent must be informed and uncoerced, and may be revoked at a later date.<\/span><span style=\"font-size: 12pt\"> <\/span><span style=\"font-size: 12pt\">&nbsp;<\/span><span style=\"font-size: 12pt\">&nbsp;<\/p>\n<p \/><\/span><\/div>\n<\/div>\n<div>&nbsp;&nbsp;&nbsp;&nbsp;<\/p>\n<p>&nbsp;I&#39;ll be publishing&nbsp;Dr. Cavoukian&#39;s&nbsp;version of all the laws over the next little while.&nbsp; Readers new to this discussion might want to take a look at the <a href=\"\/?p=354\">Laws of Identity<\/a>, a technology paper which I think rings increasingly true and provides context about&nbsp;the intersection between identity and&nbsp;virtual reality.&nbsp; Amongst other things, it posits a model in which the user is an active and central participant.&nbsp;<\/p>\n<p>In the <a href=\"\/wp-content\/resources\/7_laws_brochure.pdf\" class=\"broken_link\">brochure<\/a> published by the commissioner, my original statement of&nbsp;each law appears on the left page,&nbsp;while the&nbsp;&#8220;privacy embedded&#8221;&nbsp;version&nbsp;appears on the right.&nbsp; It is kind of Talmudic (or&nbsp;should I say&nbsp;McLuhanesque?), and&nbsp;demonstrates the intersection of&nbsp;the purely technical with a policy-oriented view.&nbsp;&nbsp;I&#39;m very&nbsp;excited by this work, which clearly takes the Laws of Identity forward.<\/p>\n<p>The full title of the&nbsp;brochure&nbsp;is,&nbsp;&#8220;<a href=\"\/wp-content\/resources\/7_laws_brochure.pdf\" class=\"broken_link\">7 Laws of Identity &#8211; The&nbsp;Case for Privacy-Embedded Laws of Identity in the DIgital Age<\/a>&#8221;&nbsp;(the illustration above is taken from that publication).&nbsp;<\/p>\n<p>The <a href=\"\/wp-content\/resources\/7_laws_whitepaper.pdf\" class=\"broken_link\">Privacy Commissioner&#39;s Whitepaper<\/a>&nbsp;is&nbsp;an equally&nbsp;important&nbsp;document that drills into the notion of an Identity Metasystem and is intended to bring about&nbsp;collaboration&nbsp;between the privacy community and identity technologists as we build it.&nbsp;&nbsp;<\/p>\n<p>The paper version of the brochure is really a beautiful production.&nbsp; It can be ordered by calling 1-416-326-3333 \/ 1-800-387-0073 or by writing to <a href=\"mailto:publicat@ipc.on.ca\">publicat@ipc.on.ca<\/a>. Beyond that, here is&nbsp;the press <a href=\"http:\/\/www.ipc.on.ca\/index.asp?layid=86&amp;fid1=469\" class=\"broken_link\">statement<\/a> issued&nbsp;to announce&nbsp;Anne&#39;s work, along with&nbsp;the <a href=\"http:\/\/www.ipc.on.ca\/docs\/2006-10-19-IAPP-7Laws.pdf\" class=\"broken_link\">powerpoint<\/a>&nbsp;of her presentation to the IAPP.<\/p>\n<p>What a powerhouse she is.&nbsp; She is the thing history is made of.<\/p><\/div>\n<div>\n<div \/><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Consent must be invoked in the collection, use and disclosure of one&#39;s personal information.<\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[17,2,3,11],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/622"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=622"}],"version-history":[{"count":0,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/622\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=622"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=622"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=622"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}