{"id":303,"date":"2008-12-14T10:26:24","date_gmt":"2008-12-14T17:26:24","guid":{"rendered":"http:\/\/www.talesfromthe.net\/jon\/?p=303"},"modified":"2008-12-14T10:26:24","modified_gmt":"2008-12-14T17:26:24","slug":"open-for-questions-at-changegov-what-about-privacy","status":"publish","type":"post","link":"https:\/\/2024.thenexus.today\/index.php\/2008\/12\/14\/open-for-questions-at-changegov-what-about-privacy\/","title":{"rendered":"Open for Questions at change.gov: What about privacy?"},"content":{"rendered":"<p>The Obama transition team&#8217;s <a href=\"http:\/\/change.gov\/newsroom\/entry\/open_for_questions_comes_to_a_close_at_1200_am\/\"><strong>Open for Questions<\/strong> pilot<\/a> last week went extremely well for a first attempt.\u00c2\u00a0 Combined with all the other promising things Micah Sifry discusses in <a class=\"active\" href=\"http:\/\/www.techpresident.com\/blog\/entry\/33397\/kudos_to_the_change_gov_new_media_team\">Kudos to the Change.gov New Media Team<\/a>, it seems to me that the Obama administration is on track for some effective ways of leveraging cognitive diversity and &#8220;wisdom of the crowds&#8221; effects, cutting past the gatekeepers in the media, and getting Obama direct feedback from Americans.<\/p>\n<p>At least for those Americans who are willing to give away their privacy as the price for interacting with their government.<\/p>\n<p><!--more-->Bob Fertik&#8217;s <a href=\"http:\/\/www.democrats.com\/americans-want-real-change-from-obama-not-media-garbage \">Americans Want Real Change from Obama &#8211; Not Media Garbage<\/a> on Democrats.org is a good summary of <a href=\"http:\/\/change.gov\/page\/content\/openforquestions\">Open for Questions<\/a> first week from the perspective of a participant.\u00c2\u00a0 People from across the country submitted a wide range of questions.\u00c2\u00a0 The ones that were voted to the top were excellent: cleanly worded and on topics that need more attention.\u00c2\u00a0 Here&#8217;s one on civil rights, from Kari in Seattle, which finished #2 overall:<\/p>\n<blockquote><p>&#8220;What will you do as President to restore the Constitutional protections that have been subverted by the Bush Administration and how will you ensure that our system of checks and balances is renewed?&#8221;<\/p><\/blockquote>\n<p>Yeah, really.\u00c2\u00a0 There&#8217;s a lot that Obama can do here (the <a href=\"http:\/\/2009transition.org\/liberty-security\/\">Liberty and Security coalition&#8217;s recommendations<\/a> are a good summary).\u00c2\u00a0 Will he?\u00c2\u00a0 I&#8217;m all ears!<\/p>\n<p>So it&#8217;s great stuff, especially for a pilot.\u00c2\u00a0 At least until you pull back the covers &#8230;<\/p>\n<p>Change.gov&#8217;s <a href=\"http:\/\/change.gov\/about\/privacypolicy\">privacy policy<\/a> reassuringly says &#8220;It is our general policy not to make Personal Information available to anyone other than our employees, staff, and agents.&#8221;\u00c2\u00a0 However, as James Grimmelmann just pointed out in <a href=\"http:\/\/www.tnr.com\/politics\/story.html?id=80cdafca-1f22-4fce-9663-3f4845bc54f4\">Total Information Awarness<\/a> in TNR in describing the similar &#8220;mealy-mouthed&#8221; privacy policy on my.barackobama.com, courts have repeatedly found that statements about &#8220;general policy&#8221; have no legal force.<\/p>\n<p>And in fact the reality is very different.\u00c2\u00a0 Open for Questions&#8217; functionality is provided by Google Moderator, and seeing the &#8220;Sign in&#8221; link on a .gov site route through Google* is downright creepy.\u00c2\u00a0 <a href=\"http:\/\/www.radaronline.com\/from-the-magazine\/2007\/09\/google_fiction_evil_dangerous_surveillance_control_1.php\">Scroogled!<\/a> As Christopher Dorobek points out <a href=\"http:\/\/dorobekinsider.com\/2008\/12\/11\/what-would-you-ask-team-obama-changegov-is-now-open-for-questions\/\">on <em>DorobekInsider<\/em><\/a>, this means the information isn&#8217;t covered by the Privacy Act.\u00c2\u00a0 And that&#8217;s just the tip of the iceberg.<\/p>\n<p><a href=\"http:\/\/www.theregister.co.uk\/2008\/11\/20\/barack_obama_website_insecurity\/\">Dan Goodin in <\/a><em><a href=\"http:\/\/www.theregister.co.uk\/2008\/11\/20\/barack_obama_website_insecurity\/\">The Register<\/a> <\/em> and <a href=\"http:\/\/news.cnet.com\/why-obama-should-ditch-youtube\/\">Chris Soghoian\u00c2\u00a0on CNet&#8217;s <\/a><em><a href=\"http:\/\/news.cnet.com\/why-obama-should-ditch-youtube\/\">Surveillance State<\/a> <\/em>have already described the issues with change.gov&#8217;s usage of Google Analytics and YouTube giving a private corporation the ability to track people as they interact with a government site; this is more of the same and even worse.\u00c2\u00a0 The precise information about people&#8217;s opinions from Open For Questions adds a whole new level of concern.<\/p>\n<p>Mike Stark made a really interesting point to me in email that I haven&#8217;t seen expressed so crisply elsewhere:<\/p>\n<blockquote><p>Google could (conceivably &#8211; and especially for those of us with gmail addresses) use a record of this data to really get involved in people&#8217;s personal political predilections.<\/p><\/blockquote>\n<p>Indeed.\u00c2\u00a0 <a href=\"http:\/\/www.npr.org\/templates\/story\/story.php?storyId=97216369\">They wouldn&#8217;t do it to be evil<\/a>, of course, they&#8217;d just think of it in terms of &#8220;efficiency&#8221;, &#8220;user convenience&#8221;, and &#8220;monetization&#8221; &#8230; but still, it starts to look a lot like selling democracy.\u00c2\u00a0 I wonder if anything in change.gov&#8217;s contract with Google prohibits this?<\/p>\n<p>Not according to the privacy policies.\u00c2\u00a0 A quick glance at the relatively-short <a href=\"http:\/\/www.google.com\/intl\/en_us\/privacy-change.gov.html\">Google Moderator on change.gov privacy policy<\/a> gives the impression that the only way Google will this information is internally, &#8220;to deliver the best possible service to you. &#8221; If you click through a couple more links,** though, you get to the <a href=\"http:\/\/www.google.com\/intl\/en\/privacy_highlights.html\">Google Privacy overview<\/a> and  <a href=\"http:\/\/www.google.com\/intl\/en\/privacypolicy.html\">privacy policy<\/a> and there are a bunch of other uses.\u00c2\u00a0 Like for example<\/p>\n<blockquote><p>We may share with third parties certain pieces of <a href=\"http:\/\/www.google.com\/intl\/en\/privacy_faq.html#aggregatedinfo\">aggregated, non-personal information<\/a>, such as the number of users who searched for a particular term &#8230;. Such information does not identify you individually.<\/p><\/blockquote>\n<p>Even giving everybody involved the benefit of the doubt that this information can&#8217;t be <a href=\"http:\/\/www.talesfromthe.net\/jon\/?p=234\">disaggregated and used to identify individuals<\/a>, I don&#8217;t much care for our government giving Google control over which third parties it &#8220;shares&#8221; this information with.\u00c2\u00a0 About that selling democracy &#8230;<\/p>\n<p>And then there&#8217;s this:<\/p>\n<blockquote><p>Google processes personal information on our servers in the United States of America and in other countries. In some cases, we process personal information on a server outside your own country.<\/p><\/blockquote>\n<p>Um, isn&#8217;t this something people might want to know <strong>before<\/strong> using change.gov, instead of having to chase down three levels of links?\u00c2\u00a0\u00c2\u00a0 Shouldn&#8217;t there be something in big red letters on the main page of Open for Questions along the lines of<\/p>\n<blockquote>\n<h2><span style=\"color: #ff0000;\"> Warning: this site whose URL looks like part of the US government may send your personal information to another country where it is governed by local laws.<br \/>\n<\/span><\/h2>\n<\/blockquote>\n<p>Or hey, even better, why not provide this functionality in a way that <em>doesn&#8217;t <\/em>put people&#8217;s personal information at risk in this and a zillion other ways?<\/p>\n<p>To be fair, Open for Questions is a pilot.\u00c2\u00a0\u00c2\u00a0 If things like this start to get addressed now, they&#8217;ll be seen in retrospect part of the growing pains of change.gov &#8211; it&#8217;s far from the first V1 product that ignored privacy early on.\u00c2\u00a0 But will they?<\/p>\n<p>There&#8217;s a broader pattern of the Obama transition ignoring privacy concerns, discussed in posts by <a href=\"http:\/\/blog.wired.com\/27bstroke6\/2008\/11\/barack-obamas-p.html\">Sarah Lai Stirland on Wired&#8217;s <em>Threat Level<\/em><\/a>, <a href=\"http:\/\/www.techpresident.com\/blog\/entry\/33143\/vetting_in_the_age_of_facebook_update_background_checks_to_be_done_by_choicepoint\">Nancy Scola on <em>techPresident<\/em><\/a>, and me in <a href=\"http:\/\/www.talesfromthe.net\/jon\/?p=283\">Some early disquieting signs<\/a>.\u00c2\u00a0 There&#8217;s no way to know if this is an intentional decision by the transition team not to prioritize this &#8212; or just lack of attention to it or understanding of the issues &#8212; but in any case it&#8217;s a bad sign.<\/p>\n<p>The risk is that if nobody&#8217;s paying attention to it, this kind of privacy-invasive behavior get institutionalized and the participative democracy of the future is also a panopticon.\u00c2\u00a0 And if it&#8217;s a lack of understanding, that also bodes ill for the discussions coming up about behavioral advertising, the PATRIOT Act, and other privacy-related issues.***<\/p>\n<p>It sure would be great to hear the Obama team&#8217;s thinking on this.\u00c2\u00a0 Their technology policy commits to \u00e2\u20ac\u0153safeguard our right to privacy&#8221; but their actions certainly don&#8217;t match the words.<\/p>\n<p>Maybe I&#8217;ll ask about it in next week&#8217;s Open for Questions \ud83d\ude42<\/p>\n<p>jon<\/p>\n<p>* yea, really: the Sign In button routes you to a URL that starts with https:\/\/www.google.com\/a\/change.gov\/ServiceLogin?service=<\/p>\n<p>** to get there from <a href=\"http:\/\/change.gov\/page\/content\/openforquestions\">Open for Questions<\/a>, scroll down to the fine-print Disclaimer and click on the <a href=\"http:\/\/www.google.com\/intl\/en_us\/privacy-change.gov.html\">privacy policy<\/a>.\u00c2\u00a0 Then ignore all the big and bolded headlines and instead click on the <a href=\"http:\/\/www.google.com\/intl\/en\/privacy.html\">Google Privacy Policy<\/a> link which takes you to a page with the headline &#8220;At Google, we\u00e2\u20ac\u2122re committed to transparency and choice&#8221;.\u00c2\u00a0 Then you can click on either the <a href=\"http:\/\/www.google.com\/intl\/en\/privacy_highlights.html\">Privacy overview<\/a> and <a href=\"http:\/\/www.google.com\/intl\/en\/privacypolicy.html\">privacy policy<\/a>.\u00c2\u00a0 Studies consistently show that most people don&#8217;t read privacy policies &#8230; when you have to go through hoops like this, is it any surprise?<\/p>\n<p>*** <a href=\"http:\/\/get-fisa-right.wetpaint.com\/\">like FISA, for example<\/a>, where Obama&#8217;s actions similarly haven&#8217;t matched his rhetoric.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Obama transition team&#8217;s Open for Questions pilot last week went extremely well for a first attempt.\u00c2\u00a0 Combined with all the other promising things Micah Sifry discusses in Kudos to the Change.gov New Media Team, it seems to me that the Obama administration is on track for some effective ways of leveraging cognitive diversity and [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,8,14],"tags":[70,164,245,275],"class_list":["post-303","post","type-post","status-publish","format-standard","hentry","category-political","category-privacy","category-social-sciences","tag-changegov","tag-google","tag-obama","tag-privacy"],"_links":{"self":[{"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/posts\/303","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/comments?post=303"}],"version-history":[{"count":0,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/posts\/303\/revisions"}],"wp:attachment":[{"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/media?parent=303"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/categories?post=303"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/tags?post=303"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}