1224 1225 1226 Task 2: Catalog general contextualfactors. 1227 Data Action Personal Information Specific Context Summary Issues Full Name Collection from the action (per user) between social social credential profile ‐Self‐Asserted ‐One‐time ‐Full Email Social Media Site credential and ACME IDP, but establishes access (including picture ‐Validated of Friends an ongoing relationship between user’s and list of friends) is not ‐List Photograph social presence and ACME IDP necessary for fulfilling ‐Profile operational purpose. credential linkingis vis ible touser ‐Social of social credential simplifies users understand the ‐Linking ‐Will access to government benefits system eventual high‐assurance profile may contain information the credential is controlled by ‐User user considers sensitive ACME and not by their social profile may contain information from credential provider? ‐User other users not participating in the system will perception of the ‐How profile includes information social media organization’s ‐User unrelated to the purpose and operations of privacy practices impact the system willingnessto consent to PI is consented by user to this data action? ‐Access of the API: full profile access is the user understand ‐Nature ‐Will granted (by default: name, validated ACME will have ongoing profile photograph, and list of friends) access to information stored in their social profile? social media ‐Will privacy settings allow this data action? 1228 1229 1230
1224 1225 1226 Task 2: Catalog general contextualfactors. 1227 Data Action Personal Information Specific Context Summary Issues Collection from the Social Media Site ‐Self‐Asserted Full Name ‐Validated Email ‐List of Friends ‐Profile Photograph ‐One‐time action (per user) between social credential and ACME IDP, but establishes an ongoing relationship between user’s social presence and ACME IDP ‐Social credential linkingis vis ible touser ‐Linking of social credential simplifies access to government benefits system ‐User profile may contain information the user considers sensitive ‐User profile may contain information from other users not participating in the system ‐User profile includes information unrelated to the purpose and operations of the system ‐Access to PI is consented by user ‐Nature of the API: full profile access is granted (by default: name, validated profile photograph, and list of friends) ‐Full social credential profile access (including picture and list of friends) is not necessary for fulfilling operational purpose. ‐Will users understand the eventual high‐assurance credential is controlled by ACME and not by their social credential provider? ‐How will perception of the social media organization’s privacy practices impact willingnessto consent to this data action? ‐Will the user understand ACME will have ongoing access to information stored in their social profile? ‐Will social media privacy settings allow this data action? 1228 1229 1230
nistir_8062_draft.docx