2018 (p. 2/3)

Reposting a Tweet by Webkongress Erlangen ‏

twitter.com

Exciting! Got invited to present my latest “Privacy as UX” talk at the “Webkongress Erlangen” conference in September, alongside a great a11y & webdev/des line-up (event in German)
2018

Self-hosting maps: taking control over UX and users' privacy

OpenMapTiles allows for efficient self-hosting of embeddable OSM maps without significant resource requirements and with reasonable effort for a web professional.
2018

Reposting a Tweet by Frederike Kaltheuner

twitter.com

"Privacy was once misconstrued as being about hiding and secrecy. Now it’s understood to be something much more pressing: power dynamics between the individual, the state and the market."
2018

Can we PLEASE talk about privacy, not GDPR, now?

Let’s not bury this under “achievement unlocked by May 25” but use the momentum to work on new ideas how to proceed from here. Likely everybody had to take shortcuts in recent weeks. Now, with pressure off, is the time to share what we have learned – and continue to keep working on new ideas for privacy first, compliance second.
2018

Reposting a Tweet by DataEthics

twitter.com

"Data Ethics" is an inspiring book making the case for ethical design of businesses and products; PDF now available for free
2018

Privacy by Design: Building a Privacy Policy People Actually Want to Read

artificiallawyer.com

A detailed walk-through of the design process behind juro.com’s acclaimed attempt to create a user-centered privacy policy document (see here) through a rigorous legal design process.
2018

Next week: "Website Privacy Extreme" in Helsinki (Wed 16.5.)

10 more days to go, and we will assemble for an evening to discuss and work on improving the privacy of our websites (for real, not for "GDPR compliance").
2018

Reply to a post by Daniel Goldsmith

ascraeus.org

Daniel, thank you for your elaborate response to my article on “The Indieweb privacy challenge”. As I explicitly state whenever writing about the GDPR: I am not a lawyer. In recent months, I spent more hours on legal research and debates than many […]
2018

The Indieweb privacy challenge (Webmentions, silo backfeeds, and the GDPR)

With privacy on the agenda everywhere (aka. “last-minute GDPR panic”), I regularly receive inquiries about my implementation of some Indieweb features on this website. I have always been openly enthusiastic about the long overdue regulation of the […]
2018

On Weaponised Design

ourdataourselves.tacticaltech.org

This may well be the most comprehensive article I’ve read this year so far on the topic of the ethical responsibility of designers. Its author, Cade, discusses “weaponised design”: “electronic systems whose designs either do not […]
2018

Event: "Website Privacy Extreme" (16 May in Helsinki/FIN)

An experimental hacking event for active webizens concerned about privacy first and legal compliance second. The goal is to take it to the extreme: challenging 'common practices' and pushing the boundaries.
2018
2018

Collaborative list of GDPR-compliant DPA contracts

twitter.com

One of many GDPR tasks before May 25 is to sign Data Processing Agreements with third-party services you use for your website, newsletter, etc. For an easy start, we created a collaborative online list to provide an easy starting point - please use for your […]
2018

"Working Draft" podcast on privacy and GDPR (in German)

Baltasar, Joschi and I discuss importance and implications of the GDPR for web designers and developers - on the Working Draft podcast, hosted by Hans Christian Reinl.
2018

Workshop 9.5.2018: "Datenschutz im Web — Fallstricke, Strategien, Risikomanagement, DSGVO

Neuauflage unseres Praxisworkshops zu Datenschutz im Web und ethischen Fragen der DSGVO in Düsseldorf, am Tag nach der beyond tellerrand -Konferenz.
2018

GDPR: 10 examples of best practice UX for obtaining marketing consent

econsultancy.com

I was delighted to find this blog post, reviewing recent examples of UX solutions for GDPR-compliant marketing consent. This is the kind of reviews designers concerned with privacy need, in order to generate an industry-wide debate about (slowly emerging) practices and work out optimal solutions over time.
2018

Challenge GDPR: undesirable effort or entrepreneurial opportunity?

The efficient combination of legal risk management and privacy-sensitive design ensures a good ROI for GDPR compliance efforts.
2018

The Good Room

frankchimero.com

Frank Chimero’s talk about recalibrating digital design speaks to me in many ways. Not only for the reference to the Amish’ approach to technology (I talked about that at an IxDA Helsinki meetup in the context of my non-use research a few years ago, and it’s always an analogy I enjoy coming back to), but for the difference between the hypercapitalist internet, focused on quick revenues and increasing control, and an internet that is deeply concerned with cultural and societal development.
2018

Workshop 5.3.2018: "Datenschutz im Web — Fallstricke, Strategien, Risikomanagement, DSGVO

DSGVO-Grundlagen, praxisorientiert verbunden mit konkreten Webdesign-Fragen und Ansätzen zum Risikomanagement. Am 5.3.2018 in Nürnberg - jetzt anmelden!
2018

Eight valuable insights from a discussion panel on opportunities of the GDPR

Hosted by privacy messenger company Wire.com, the panel discussion chaired by David Meyer (of Connected Rights) brought together Jan Philipp Albrecht (MEP and chief negotiator of the regulation for the parliament), Katharina Miller (lawyer, and president of […]
2018

When Trading Track Records Means Less Privacy

eff.org

Just anonymising data does not mean it is no longer personal data - more often than not it needs to be treated with similar care as data that carries individual identifiers.
2018

a11y Issues, by a11y.rocks

issues.a11y.rocks

issues.a11.rocks is a website project pointing out a11y failures of big web sites. On their Github page, the authors share their motivation:
On the web platform, technologies and guidelines have been built so we can build a web that includes […]

Every Step You Fake: A Comparative Analysis of Fitness Tracker Privacy and Security

citizenlab.ca

Following the Strava heatmap debacle, I encountered this study by the University of Toronto’s Citizen Lab via Twitter:
Fitness tracking devices monitor heartbeats, measure steps, sleep, and tie into a larger ecosystem of goal setting, diet […]
2018

Ethical Ads — Read the Docs 1.0 documentation

docs.readthedocs.io

Readthedocs.io, a popular platform for creating and publishing software documentation, documents their responsible approach to online ads on their service:
EthicalAds respect users while providing value to advertisers. We don’t track you, sell […]
2018

#DataProtectionDay 2018

All personal data stored may eventually pose a risk to somebody. Three stories of how data stored or shared can have unwanted consequences.
2018