Slashdot Mirror
Privacy Policies For Local Government?
stinkydog asks: "I am in the interesting position of developing a privacy policy for a parks and recreation department for a urban local government. I have watched with interest all the complaints about government and privacy and don't necessarily want my personal data on a billboard. One the flip side, I need to collect enough data to justify a several million dollar budget. Our management wants usage and regristration data down to the Census Block Group level to make decisions. We currently gather name, address, phone and age. For some Federal programs we also gather income level and number of childern in the home. If I put all this info in the same database am I providing good customer service or being intrusive? Where should I draw the line? I have been charged with creating an understandable, user-friendly policy on what we collect and how we use it (while fighting with the lawyers all the way I'm sure). Is this possible? " I think a better question is why a Park Service needs this kind of level of information about its users to justify its funding.
Disparaging comments about Milwaukee aside, they have the oldest, best, most complete GIS system for any city, /in the world/.
http://www.gis.ci.mil.wi.us/
And what's GIS? Geographic Information Systems. In really overly-simplified terms, it's like a computer-aided drawing system (CAD) linked to a relational database. http://www.esri.com is the largest vendor of this sort of stuff.
Anyway, the City of Milwaukee has used this system for urban forestry management, crime analysis, poverty analysis, slum analysis, and a whooole lotta other things. If you ain't got a GIS system involved in your process (meaning you're dealing with spatial information -- information that has a specific location in space), then you're seriously not approaching things correctly.
You don't need to put it all in one database. That's the whole point of a relational database. Doing that allows you to compartmentalize things.
And compartmentalizing is what you'll have to do. I'm sure the parents will be up in arms if they knew you were posting how many kids, of what age, lived in which houses. Likewise, if you're posting phone numbers that are unlisted, or names differing from how people have chosen to list them in the phone directory, then you'll hit problems.
The strange thing is, you really need to talk with a lawyer that works for the same group you do. They'll be able to tell you what's legal, and what isn't. If you can't find a lawyer, then start talking to judges (who'll either answer, or refer you to someone they think well of).
Having said all that, I'll now take a step back. WHY do you need all this information? How will fine-grained information help? What reports will you generate based upon this data? How much will collecting, filtering, correcting, updating, maintaining, hosting, backing up, and searching this information cost? If you make a business case, meaning, it's gonna cost $X to do this, then the management folks may back down, or change their plans.