Project Description

The goal of the Law and Policy project at the Data Privacy Lab is to inform and analyze ways in which the law can and should relate to technology in terms of de-identification, anonymity and privacy risks.

Our work in the Law and Policy project includes:

• the legal basis for de-identification
• legal standards of de-identification
• technology's ability to satisfy legal and regulatory standards for de-identifying data
• assessmnents of policies as they relate to privacy risks
• assessments of a technology's appropriateness for use as it relates to legal and regulatory constraints
• recommendations of policies as they relate to technologies

Research results

• HIPAA and the de-identification of health data
• HIPAA De-identification for bioterrorism surveillance: Privacert
• Privacy-preserving surveillance
• Computer science research and privacy

Publications

• L. Sweeney, Weaving technology and policy together to maintain confidentiality. Journal of Law, Medicine and Ethics. 1997, 25:98-110.

• L. Sweeney, Navigating Computer Science Research Through Waves of Privacy Concerns: Discussions among Computer Scientists at Carnegie Mellon University. ACM Computers and Society. 34 (1), April 2004.

Tell me more about:

• Data Privacy Lab Projects
• Data Privacy Lab results
• Data Privacy Lab demonstrations