On design and deployment of two privacy-preserving procedures for judicial-data dissemination

摘要

Institutions such as governmental and scientific organizations share information to gain the public trust. Information sharing, on the other hand, may cause privacy breaches and undermine the stakeholders' trust in such information sharing institutions. Thus, information sharing may work against the purpose of gaining trust through transparency. Moreover, fear of potential privacy breaches compels information disseminators to share minimum or no information. In this contribution, we present two procedures - the so-called restricted access procedure and open access procedure - to disseminate information for the contending purposes of transparency and privacy preservation. These procedures enable sharing of data with data requesters directly or via a trusted third party, respectively, in the context of our public judiciary organization. We have developed and operationalized these design artifacts in an organizational context and the resulting procedures have emerged from operational interactions within our organization. As such, our inquiry of knowledge thereto can be considered as an action design research. This contribution describes our approach and reflects upon our practice inspired research, where we share the gained insights and present some design guidelines - like providing usage control through implicit and explicit feedback, sharing data with scientists and for scientific purposes, and adopting a pre-commitment strategy - for the information systems that aim at sharing information in a real setting and in a privacy preserving way. (C) 2016 Elsevier Inc. All rights reserved.