January 28 is Data Privacy Day, and on this 14th annual Data
Privacy Day, I find myself reflecting on the question of data
ethics.
Far from being an academic concept, "data ethics"
presents a model for data management with real practical
implications for organizations. (I should note that I am
focused here on personal data.) To understand what the
concept might entail, let's take a step back and talk about two
other models for data
management: compliance and
governance.
The compliance model of data
management looks at an organization's privacy practices and
asks what laws apply to the organization's practice, and what
must be done to be in compliance with those laws. It is a
sensible, resource-sensitive model that helps ensure a diligent
organization will not run afoul of current laws. It runs
certain risks, however: by focusing on compliance, an
organization might fail to appreciate other risks connected to
their data use. It also can tend to be one
