CS代写 COMP90087 - Semester 1, 2022 - © University of Melbourne 2022 2

Image courtesy Unsplash / @mar5nsanchez
Week 7/S1/2022
Data Governance

School of Computing and Information Systems Centre for AI & Digital Ethics
The University of Melbourne
marc.cheong [at] unimelb.edu.au

Learning Outcomes
1. Define the concept of data governance from an organisational perspective.
2. Understand how laws such as the famous GDPR (EU) help protect users.
3. Discover how your data is stored and managed by the organisations you entrust them with (and also organisations you never knew had access to), as well as your rights.
4. Critically evaluate research and storage practices on large amounts of data.
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 2

Marc here – I’ll be in the driver’s seat for Weeks 7, 8, and 9 (and acting co-ordinator in Simon’s absence)
Office hours:
• For Week 8 and Week 9, my consultation hour will be the same as Tim’s (Fridays 2-3pm), Zoom link to be announced in the Announcement Post for those weeks (also in the main Canvas pageà).
• As the Friday of Week 7 is a public holiday (and thus, no uni on Friday), consultations for this week will be by appointment only.
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 3

Related Reading
This module on Data Governance has two readings, with very interesting (and relevant) contemporary studies which encompass data science, policy, and ethics.
Data and its (dis)contents: A survey of dataset development and use in machine learning research. , Inioluwa Deborah Raji, . Bender, , . arXiv [cs.LG], 9 Dec. 2020.
https://arxiv.org/abs/2012.05345
What if Facebook goes down? Ethical and legal considerations for the demise of big tech.
̈hman, . Internet Policy Review 9(3), 1-21, 2020. https://policyreview.info/articles/analysis/what-if-facebook-goes-down-ethical-and-legal-considerations- demise-big-tech
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 4

1. What is data governance? The ‘textbook definition’.
2. Data governance in practice. The ‘practitioner’s view’.
3. From organisations to users.
4. Laws that protect us (GDPR at a glance).
5. Organisations: ‘A Tale of Beacons and Pixels’.
6. Users: Your rights, freedoms, and countermeasures.
7. 💡 Case Study & Reflection: Does your data outlive you/the tech giants?
8. 💡 Case Study & Reflection: A ‘set’ of data versus a dataset.
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 5

Audience activity I [2-5 mins]
Facilitator: Head Tutor, Maddie.
Online: please use Canvas Chat to share your ideas.
In-person: chat with your neighbour, then share your views with the class. Incentive:
Image source: Cadbury
Think of the organisations you’ve interacted with, just this morning …
from getting to uni (or your home office)…
to getting breakfast (coffee shop, UberEats)… what data did you create/generate?
Now, what do you expect these organisations should do with your data?
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022

What is data governance? The ‘textbook definition’.
Image courtesy Unsplash / @martinsanchez

The ‘textbook’ definition #1
To appreciate the various ethical issues related to data governance, we first need to find out what it means!
“Data governance represents the program used by [an organisation] to manage the organi[s]ational bodies, policies, principles, and quality that will ensure access to accurate and risk-free data and information…”
– (2012). Data Governance: How to Design, Deploy and Sustain an Effective Data Governance Program (The Morgan on Business Intelligence) 1st Edition. .
Image source: Amazon/
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 8

The ‘textbook’ (industry) definition #2
“The Data Governance Institute defines data governance as “a system of decision rights and accountabilities for information-related processes, executed according to agreed-upon models which describe who can take what actions with what information, and when, under what circumstances, using what methods.” …
“The Data Management Association (DAMA) International defines data governance as the “planning, oversight, and control over management of data and the use of data and data-related sources.” …
– Olavsrud (2020)
Image source: CIO Magazine
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 9

Reflection.
Formal / system / process / model
Manage / management / oversight / control / planning Rights / accountability
Who / what / where
Accurate / risk-free
Image source: HowToGeek / Imagentle/Shutterstock
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 10

Data governance in practice.
The ‘practitioner’s view’.
Image courtesy Unsplash / @martinsanchez

What tasks are there in data governance?
Let’s see what a Data Governance Officer does at UniMelb
https://secure.dc2.pageuppeople.com/apply/TransferRichTextFile.ashx?sData=Fwg6i4Eli-DgfNqV- PbYvXeEOtAs0yXwPaCK7AQYFAk1mpHE7B7I4z2iK7fPjnJtkHDeTmWnOXw~
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 12

What tasks are there in data governance?
Let’s see what a Data Governance Analyst does at UniMelb
https://secure.dc2.pageuppeople.com/apply/TransferRichTextFile.ashx?sData=Fwg6i4Eli-DgfNqV- PbYvXeEOtAs0yXwPaCK7AQYFAnYbtT4zcnl02qpL-vZAUoPAQNdUPrhhDI~
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 14

Reflection.
Formal / system / process / model
Manage / management / oversight / control / planning Rights / accountability
Who / what / where
Accurate / risk-free
By this stage we should have a pretty clear picture of what data governance is, and what tasks are required in this space, and how an organisation like UniMelb implements this (to protect our data etc).
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 16

Audience activity II [2-5 mins]
Facilitator: Head Tutor, Maddie.
Online: please use Canvas Chat to share your ideas.
In-person: chat with your neighbour, then share your views with the class. Incentive:
Image source: Cadbury
Why do organisaKons need good data governance plans in place?
For starters: Risk.
To get the discussion going: suppose you’re a celebrity/influencer/billionaire, and you find out Organisa has accidentally leaked your data – what would you do?
(of course there’s more than that!)
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022

From organisations to users.
Image courtesy Unsplash / @martinsanchez

You might have nonced the pun there – we are users of many services run by many different organisanons.
Social media?
• Twiper/Facebook/TikTok… Search giants?
• Google…
Device/plaqorm manufacturers? • Apple/Google…
Also, we may be stakeholders even without consciously knowing!
Image source: Medium / @storjproject / lantechsystems
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 19

Audience activity III [2-5 mins]
Facilitator: Head Tutor, Maddie.
Online: please use Canvas Chat to share your ideas.
In-person: chat with your neighbour, then share your views with the class. Incentive:
Image source: Cadbury
Recall AcKvity I:
Think of the organisaVons you’ve interacted with, just this morning …
from geYng to uni (or your home office)…
to geYng breakfast (coffee shop, UberEats)… what data did you create/generate?
Now, trick quesKon:
Assume you prefer buying books from retail stores with cash; assume you buy DVDs and CDs with cash;
assume you don’t even do any online shopping
What has Amazon’s data governance have to do with you?
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022

Our relationship with tech orgs. (us ❤ tech?)
Point to ponder: is this relationship symmetrical?
• Consider, say, your relationship with a small business vendor selling coffee, and paying cash.
The data you share with the vendor is just a coffee loyalty card on paper, your usual orders, etc.
The vendor might use the data for e.g. how many total loyalty cards were used in a week to predict sales, your usual orders to personalise their service to you/thank you for being a loyal customer, etc.
• Your only records are:
Image source: Designwizard.com
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 21

Our relationship with tech orgs. (us 💔 tech?)
Big tech knows more about users.
• Consider the Target case studyà • Asymmetric?
Now, not just Target, but…
• Also Target’s data providers, vendors, database hosting…
• E.g. if (for example) Target uses Google Cloud?
Image source: Forbes
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 22

Our relationship with tech orgs. (us 💔 tech!)
Some scholars call for a ‘duty’ (a la ’s philosophy) for us to thwart microtargeting.
Reflection: Are we truly helpless as we constantly depend on big tech to stay connected, conduct business transactions, learn and study, especially during the 2019-2021 Covid pandemic?
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 23

☕ Break time! See you in 5
Image courtesy Unsplash / @marNnsanchez

Time to apply what Simon has taught you!
Image courtesy Unsplash / @martinsanchez

Audience activity IV [5-10 mins] Kantian Duty Ethics
Facilitator: Head Tutor, Maddie.
Online: please use Canvas Chat to share your ideas.
In-person: chat with your neighbour, then share your views with the class. Incennve:
Image source: Cadbury
One of the arguments in the paper goes something similar to the following:
“Does Kant’s categorical impera3ve provide ethical bases for opposing the collec3on, aggrega3on, and instrumentaliza3on of digital data for the purpose of behavioral microtarge3ng?”
• You know how it’s done on FB (e.g. personaliza3on algos);
• To do nothing (if everyone were to do nothing) is bad – the status
quo e.g. CA will keep interfering with elec3ons.
• Therefore, it is a duty for you to stop CA interfering elec3ons using
• Therefore, (to stop CA using FB), it is a duty for you to do all you can to stop this – e.g. privacy apps, ad blockers, disable FB personaliza3on, delete your FB?
So, is this philosophical argument sound? Any counterarguments? (e.g. should a senior ci=zen be subject to this ‘duty’)?
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022

Laws that protect us.
(& GDPR at a glance).
Image courtesy Unsplash / @marNnsanchez

Disclaimer: I am not a lawyer
The informanon provided in this mini-lecture is summarized from various sources to explain how laws such as the GDPR and local laws protect users (at a glance).
This lecture won’t make you an expert in the GDPRJ Image source: CAPCOM / Cinemablend.
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 28

🍪 Remember these?
These GDPR banners seem to have popped up everywhere after mid-2018…
Image source: Cookiebot / JQueryScript
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 29

The EU General Data Protection Regulation (GDPR)
Read more here: hpps://gdpr.eu/what-is-gdpr/
The cookie popups?
“The data subject gave you specific, unambiguous consent to process the data.”
— summary by Proton Technologies AG (2021)
Also: EU ePrivacy Direcnve (hpps://www.cookiebot.com/en/c ookie-law/ )
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022

The EU General Data Protection Regulation (GDPR)
Amongst other things, any “organization that processes the personal data of people in the EU must comply with the GDPR…” (https://gdpr.eu/faq/)
(all quotes below are from https://gdpr.eu/checklist/ )
• “data protection is something you now have to consider whenever you do anything with other people’s personal data”, not just an afterthought
• “People have the right to see what personal data you have about them and how you’re using it” Though in practice, this is tricky…
• “You are also required to quickly communicate data breaches to your data subjects” and not just keep quiet about it!
• NB: A ‘right’ to explainability – this is the subject of many scholarly works in legal studies and digital ethics. (Our very own Prof Tim Miller will be able to provide the technical details about what it means to have explainable AI)
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 31

In Australia…
hLps://www.oaic.gov.au/privacy/ australian-privacy-principles-guidelines/
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022

Reflection.
Laws protect us users.
Companies cannot abuse our trust and/or data.
We still need to be aware about how our data is used; gain an awareness of the issues involving data use/reuse; and find out how we can protect ourselves and others.
If a social media or search giant wants to profile you to monetize your data, time for you to voice your “Objection”
(insert Ace Attorney meme here)
Image source: CAPCOM / Cinemablend. – COMP90087 – Semester 1, 2022 – © University of Melbourne 2022

Organisations, and
‘A tale of Beacons and Pixels’
Image courtesy Unsplash / @martinsanchez

Of Beacons 🚨 and Pixels 🔳
Image sources: Wikipedia / Facebook
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 35

Implications
Your web-browsing life ‘off’ social media could potennally be picked up and used for ads, targenng, etc (and vice versa).
Facebook is not the only one.
Consider a shopping website and a news website using a tracking pixel system XYZ.
From Wikipedia (hpps://en.wikipedia.org/wiki/Web_beacon )
• “The image could be as small as a single pixel… (thus the name “tracking pixel”).
• “When a user opens the page or email where such an image was embedded, they might not see the image, but their web browser … would…
• “…typically includes its IP address… existence of cookies previously sent by the host server … [which can] associate it with a session idennfier or tracking token that uniquely marks the interacnon. “
Image source: The Verge
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 36

Privacy-consciousness-as- business-model
Image source: Firefox (https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop ) Apple (https://support.apple.com/en-au/guide/safari/ibrw35004465/14.0/mac/11.0 )
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 37

Audience activity V [2-5 mins]
Facilitator: Head Tutor, Maddie.
Online: please use Canvas Chat to share your ideas.
In-person: chat with your neighbour, then share your views with the class. Incentive:
Image source: Cadbury
Refer to the headline from Leswing (CNBC) above: Do you think that the ‘privacy as business model’ approach works?
Why? (think: are you the ‘product’ or ‘customer’)
Why not? (think: will there be side effects, those lef out?)
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022

Your rights, freedoms, and countermeasures.
Image courtesy Unsplash / @martinsanchez

Find the odd one out.
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022
Image sources: Wikipedia via Google infobox / Mozilla / ACMA / TheHackerNews / Innersloth

Our ethical duty?
We have a right to privacy!
• With events such as the Cambridge Analytica scandal (using Facebook data) reminding us…
• … and initiatives by Firefox/Apple to encourage us.
From Ward (2018)’s claim that we have a duty to avoid microtargeting
• I might add, phenomena such as algorithmic personalisation (leading to Pariser’s 2011 filter bubble phenomenon) has shown us that it’s not just us, but those in our network are also at stake.
Some more philosophy…
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 41

Ethics of care and existentialism Some [more] philosophy:
Simone de Beauvoir is a prominent feminist philosopher and also an
existenKalist philosopher.
[Important: we *do not* cover existennalism in the syllabus/assessment, but it’s good for you to know]
Some philosophers think of “Beauvoir as a precursor of the ethic of care tradiKon in feminist ethics…”
‘strong parallels to the approach to ethics subsequently labeled the “ethic of care” by feminists are nevertheless discernible. …
Arp suggests that Beauvoir’s work furnishes an important contribunon to discussions of these issues’
(Fisher, 2000; in her introducnon to Arp, 2000).
Image source: Wikipedia
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 42

Ethics of care and existentialism
We are free only if we recognise our responsibilities to others in promoting their freedom to pursue their own projects.
– Simone de Beauvoir (Pyrrhus and Cinéas, 1944).
This is one of the aspects covered in Beauvoir’s existentialism…
…which can be applied to, say, our ethical analysis of the CA micro-targeting issue as covered before.
If what we do online (e.g. FB activity) can then be used to microtarget those in our social network (i.e. not ‘just’ us), then did we just deny others’ freedom?
Tough ethical question in the same vein as Kant’s CI.
Reflection: this again links back to Simon’s lectures on ethics
– there are many schools of thought, and not ‘one’ single answer.
Image source: Wikipedia
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022 43

💡Case Study: Does your data outlive you/the tech giants?
Kind note – a brief content warning: One of the legal case studies within discusses the topic of death.
Image courtesy Unsplash / @martinsanchez

Audience activity VI [5-10 mins]
Facilitator: Head Tutor, Maddie.
Online: please use Canvas Chat to share your ideas.
In-person: chat with your neighbour, then share your views with the class. Incentive:
Image source: Cadbury
Inspired by Ohman & Aggarwal’s reading, here’s a ficKonal ‘thought experiment’.
Imagine, if one day, Facebook shuts down all community groups or pages on its plakorm (say, to save costs, or to introduce a new product).
Imagine again, that you and your friends have been running a charity group online on FB to help feed the homeless. The group has been a success, where it has successfully ensured that over 1000 meals have been distributed to those who need them.
• What is the legal duty of Facebook?
• What is the ethical duty of Facebook?
• Does Facebook owe you anything?
– COMP90087 – Semester 1, 2022 – © University of Melbourne 2022

Bonus content (and please remember to do the reading)
Kind note – a brief content warning: One of the legal case studies within discusses the topic of death.
Image courtesy Unsplash / @m

程序代写 CS代考加微信: powcoder QQ: 1823890830 Email: powcoder@163.com

Related Posts