Merc: Battle brewing over control of personal data online

Mike Swift writes up the personal data space as a contest between individuals and large corporations. Swift interviewed Kaliya Hamlin of the Personal Data Ecosystem Consortium and PDEC members Reputation.com, Personal, and Singly. The Consortium doesn’t approach the challenge as a direct conflict. They see a realignment of behavior by people and enterprises producing . . . → Read More: Merc: Battle brewing over control of personal data online

IIW12: An NSTIC Project Risk Analysis

At last week’s Internet Identity Workshop in Mountain View, California, I led a brainstorming session to identify risks to the success of the new National Strategy for Trusted Identities in Cyberspace (NSTIC, pronounced “EN-stick”). The strategy is to encourage many non-government organizations to provide digital identity and personal data services in a way that meets the needs of individuals, identity providers and those who rely on digital identity. What could go wrong with a project like this? What can be done to avoid these threats and risks? To mitigate them when they show up? Meeting notes…

Continue reading IIW12: An NSTIC Project Risk Analysis

Tuesday’s DataPortability session at IIW12

We took a stab at rewriting the ten Portability Policy questions as user demands, behavior we want.  

The list so far.

Document your APIs and data formats. Support existing identities. Support referencing to authoritative data in a location of my choosing. (include by reference) Support auto-updating from authoritative data in a . . . → Read More: Tuesday’s DataPortability session at IIW12

World Economic Forum starts work on Data Portability

When titans of industry and state meet, worlds can change. The World Economic Forum launched a three year “Rethinking Personal Data” project, including data portability. Their first report, Personal Data: The Emergence of a New Asset Class, shows their direction.

A new asset class? That’s a telling use of language. Investopedia refers to securities with “similar characteristics, behave similarly in the marketplace, and are subject to the same laws and regulations.” Stocks, bonds, cash, real estate, and intellectual property are common asset classes. Some managerial accountants defined human capital as a new asset class.

Securities and IP go back hundreds of years. As a new asset class, personal data will have its own characteristics and market behavior, its own laws and regulations. We’ve barely mapped this new landscape. U.S. law doesn’t even recognize a theory of rights associated with personal data. So there is a great deal of work ahead. Some of that is ours, at the DataPortability Project. It falls to the DPP to crisply define data portability’s purpose, why it matters, how it fits into lives lived digitally. That’s some of our work at next week’s Internet Identity Workshop in Mountain View. [Skype me if you’d like an IIW discount code.]

Speed matters. A look at the chart below, from Bain, shows a rush to capitalize on billion dollar markets in data.

WEF report - Figure 4: The Personal Data Ecosystem: A Complex Web From Data Creation To Data Consumption

If we don’t embed data portability values and vision into the new identity and personal data infrastructure, it could take decades to achieve our goals.

So read WEF’s first report, below the fold. See where their thinking is now. And ask: where can we amplify their commitment to personal data portability?

Continue reading World Economic Forum starts work on Data Portability

#portability4trust: How we will bring data portability to trust frameworks this quarter.

Dial or Skype details for this Wednesday’s Conference Call to start before IIW.

Here’s how you can bring the ideas in our data portability policy to hundreds of millions of people. I’ll need your help in May and June to start. In short: build portability principles into boilerplate identity contracts.

What’s a trust framework? . . . → Read More: #portability4trust: How we will bring data portability to trust frameworks this quarter.

NYT: Companies should give usage data to customers

There’s data I create explicitly, like typing my name or dialing a phone number. Then there’s data I create as a byproduct of my using a product. Economist Richard H. Thaler writes in the New York Times that companies should share usage data with their customers. “Show Us the Data. (It’s Ours, . . . → Read More: NYT: Companies should give usage data to customers

Notes from the ActivityStreams lunch

The ActivityStreams group’s technical efforts to finalize a spec in time for the next OpenSocial event in May are coming along nicely. What about the other elements that make for healthy protocol adoption?

Why am I posting AS updates to the DataPortability blog?

Activity Streams reflects our data portability values, helping users have their data wherever they go online. I’m participating in the AS effort on behalf of the #DPP.

— Phil Wolff, editor

We talked about what it takes to launch the ActivityStrea.ms site. This was about a half hour of our April 1st, 2011, four-hour lunch at Chevy’s in San Francisco during the Web 2.0 Expo.

Activity Streams logoWe started with design questions.

Who is our site’s customer? We tried to categorize by organization size (BigCos, startups, individuals) but this didn’t work. Roles worked better. So far we’re clustering geeks (engineers, technologists) and non-geeks (suits, product managers, designers).

Goals? What might these users want when they visit?

  • Fix my stream. Technical help.
  • Learn. How to, specs, why.
  • Get. SDKs, code samples, books, t-shirts.
  • Discuss. Specs evolution, issues, implementation.
  • Promote my stream. Testimonials, leaderboard.
  • Build tools. Extensions, validators.

Continue reading Notes from the ActivityStreams lunch

Why Yahoo! Contributor Network Needs a DataPortability Policy

YCN is a creative content distribution point to various Yahoo! properties. Photographer Thomas Hawk can’t imagine losing access to or control over his photos in the Yahoo Contributor Network. The Contributor TOS says they can kick him off any time for any reason without notice or recourse. Thomas is angry because he’s seen Yahoo!’s . . . → Read More: Why Yahoo! Contributor Network Needs a DataPortability Policy

Deleting Your Account: Data portability policy questions for a graceful exit

PortabilityPolicy logoCameron Chapman explains How To Permanently Delete Your Account on Popular Websites. Perhaps your site’s Portability Policy should answer these questions:

How?

  • If you don’t allow account deletion, why?
  • What steps do you take to prevent someone else from deleting my account?
  • What steps do you take to prevent me from deleting my account when I might regret it? (a moment of anger, intoxicated confusion, suffering from dreadful lack of coordination
  • Do you distinguish between account deletion and deactivation?
  • How long will it take for my account to be invisible to others?
  • How long before my account is gone forever?
  • If I delete my account, can others claim my username?
  • If I delete my account, will I be able to use my email address to create a new account?
  • What happens if I don’t have access to the email address I used to start the account?
  • What can delay account closure? (For example, pending financial transactions?)
  • Where is the procedure for deleting my account? What happens after I make the request?

Completeness

  • Where is the list of authorized software/services that might log into my account? (So I can turn them off.)
  • If you let me log into other sites with your credentials (“Sign in with your X account”), what happens to my accounts on the other sites? Where is the list of sites where I use your credentials to login?
  • When you delete my profile and account, what happens to shared/community content, like my contributions to a wiki page or to a threaded conversation or gifts to another person?
  • When I delete my account, do you also cancel subscriptions to any related premium services?
  • Do you make downloading and saving my assets (photos, contacts, history, etc.) part of the account deletion process?
  • When I delete my account, do you also delete my contributions (like videos on YouTube) or should I delete those before requesting account deletion?
  • If I have money or credit balances in my account, what happens to that money when I delete my account?
  • What do you do to help reduce search engine caching of and links to my deleted profile and resources?
  • What do you do with my answer to “Why do you want to delete your account?”

Continue reading Deleting Your Account: Data portability policy questions for a graceful exit

Check out #OExchange, a data portability protocol

New: “OExchange is an open protocol for sharing any URL with any service on the web.” . . . → Read More: Check out #OExchange, a data portability protocol