IGF 2021 WS #251
Raising the bar for privacy and security practices

Organizer 1: Andrew Campling, 419 Consulting Ltd
Organizer 2: Vittorio Bertola, Open-Xchange
Organizer 3: ,

Speaker 1: Geoff Huston, Technical Community, Asia-Pacific Group
Speaker 2: paul vixie, Technical Community, Western European and Others Group (WEOG)
Speaker 3: Susie Hargreaves, Civil Society, Western European and Others Group (WEOG)
Speaker 4: Joey Salazar, Civil Society, Latin American and Caribbean Group (GRULAC)

Moderator

Andrew Campling, Private Sector, Western European and Others Group (WEOG)

Online Moderator

Vittorio Bertola, Private Sector, Western European and Others Group (WEOG)

Rapporteur

Andrew Campling, Private Sector, Western European and Others Group (WEOG)

Format

Panel - Auditorium - 60 Min

Policy Question(s)

Data governance and trust, globally and locally: What is needed to ensure that existing and future national and international data governance frameworks are effective in mandating the responsible and trustworthy use of data, with respect for privacy and other human rights?
Additional Policy Questions Information: Can standards be set for transparency and privacy policies to encourage the adoption of best practice by resolver operators, improving privacy and security outcomes for all?
Can a standardised approach help build trust amongst end users that their personal data is not being monetised?

The panel discussion will explore the way that policies, developed through cross-industry cooperation, can help protect the privacy and security of personal data. In particular, the panel will consider the policies used by the operators of recursive resolvers, a key part of the infrastructure of the Internet but one that is little understood by end-users. Recent developments have emphasised the privacy benefits of new, encrypted protocols without looking too closely at the way that user data can still be gathered and exploited for operational or commercial gain by the resolver operators.

The panel discussion will also consider whether a more standardised approach to transparency and privacy policies will aid understanding as well as encouraging the adoption of best practice by resolver operators.

SDGs

9.1


Targets: By focusing attention on the way that personal data extracted from the use of DNS can be exploited for commercial gain, the intent is to improve the associated privacy and security practices of the resolver operators. This will, in turn, improve the privacy of their users' personal data as well as leading to more resilience in a key part of the Internet's infrastructure.

Description:

The panel discussion will explore the way that policies, developed through cross-industry cooperation, can help protect the privacy and security of personal data. In particular, the panel will consider the policies used by the operators of DNS resolvers, a key part of the infrastructure of the Internet but one that is little understood by end-users. Recent developments have emphasised the supposed privacy benefits of new, encrypted protocols without looking too closely at the way that user data can still be gathered and exploited for operational or commercial gain by the resolver operators.

The panel discussion will also consider whether a more standardised approach to transparency and privacy policies will aid understanding as well as encouraging the adoption of best practice by resolver operators, improving privacy and security outcomes for all.

Expected Outcomes

A summary of the discussion will be produced and shared via other fora with resolver operators as well as other stakeholders including regulators, legislators, civil society groups and participants in the tech and telecoms sectors.

The expectation is that some of the speakers will be present on-site, with the mix of on-site and online speakers helping to encourage interaction as the style of delivery will not be biased towards either group. The speakers will be asked to make relatively short opening comments, ensuring that at least 50% of the time allocation is available for interaction between the speakers and the participants.

The speakers bring the following perspectives:
* Dr Paul Vixie, Internet pioneer and DNS thought leader - a deep technical understanding
* Susie Hargreaves, CEO Internet Watch Foundation - strong views on child safety
* Geoff Huston, Chief Scientist at APNIC - bringing a quantitative and qualitative understanding of the data
* Joey Salazar, Senior Programme Officer at Article 19 - the importance of meaningful user choice

We are also hoping to include a Polish participant to give a local perspective and are waiting for confirmation of their availability. In addition, the two moderators bring extensive experience: Andrew Campling is the author of the European Resolver Policy and Vittorio Bertola leads on public policy for Open-Xchange, a market leader in DNS-based security services.

Online Participation



Usage of IGF Official Tool.