How do you make sure that privacy implications are considered during the design of a new product? Explore what it takes, and what needs to taken into account when it comes to personal data use.
(gentle music) - [Male] There are so many amazing developments in AI that really, it's impossible to describe all the ways that it affects your life now and in the future. But it's also worth pointing out that AI is not a universal cure for every problem, and that like all developing technologies, it runs into unexpected technical difficulties and introduces new legal, ethical, and social challenges. - So I define privacy and data protection as the authorized processed of personally identifiable data according to fair principles. So many people ask me for one rule, just tell me what PII is. The difficulty is that the definition of PII is expanding along with our capabilities in data. So information that before, was simply observational information that could never be associated with an individual, can now be combined with other data elements and identify an individual. - Let me assure you that privacy by design is much easier said than done. And it takes a team of committed legal, engineering, design, and security folks. But it's an essential part of operationalizing privacy and ensuring that your products stand up to the privacy commitments you've made to your customers. One of the toughest challenges facing privacy professionals today is making sure that the privacy implications of a product are considered throughout the design process, rather than slapped on at the end as a legal hurdle that must be cleared. So how do you get privacy taken into consideration from the very inception of the product? - Well, what would it look like if every company asked their data scientists or technologists they're interviewing an ethics question? What would it look like if every person who is a data scientist or technologist, when they are interviewed getting a question, they said, "do you have any questions," say, "hey, how do you approach ethical issues?" And judges a company on their response. Maybe what we need is equivalent of some type of descent channel, maybe there should be a whistleblower protection, like you can have the time for those kind of conversations is now.