设计企业隐私权原则来扩展价值链【外文翻译】.doc

1、1本科毕业论文（设计）外文翻译外文题目EXTENDEDINGTHEVALUECHAINTOINCORPORATEPRIVACYBYDESIGNPRINCIPLES外文出处IDENTITYINTHEINFORMATIONSOCIETY外文作者JULIESMITHDAVIDMARILYNPROSCH原文EXTENDINGTHEVALUECHAINTOINCORPORATEPRIVACYBYDESIGNPRINCIPLESINBOUNDLOGISTICSINBOUNDLOGISTICSENCOMPASSESTHEACTIVITIESPERFORMEDTORECEIVEMATERIALSINTOANO

2、RGANIZATIONFORPRODUCTIONFACILITIES,THEMATERIALSAREIN“RAW”FORM,FORMERCHANDISINGORGANIZATIONS,THEYMAYBEINSEMIFINISHEDORFINISHEDGOODSFORMFORSERVICEORGANIZATIONS,THEINBOUNDMATERIALSMAYTAKEMANYFORMSLITERALLY,INTHEMEDICALPROFESSION,THEINTAKEWOULDBETHEPATIENTS,ANDINTHELEGALPROFESSION,THECLIENTSFORMANUFACTU

3、RINGFACILITIES,THESEACTIVITIESAREPERFORMEDBYPURCHASINGANDRECEIVINGEMPLOYEESWITHINTHEFOCALFIRM,ANDTHESALESANDDISTRIBUTIONEMPLOYEESATTHESELLERSORGANIZATIONGIVENTHATPRIVACYCONCERNSAREGENERALLYABOUTUNCONTROLLEDAND/ORIMPROPERUSEOFPERSONALDATA,USUALLYEITHERCOLLECTEDFROMORABOUTCUSTOMERSOREMPLOYEES,NOSIGNIF

4、ICANTPRIVACYCONCERNSAREIDENTIFIEDINTHEMANUFACTURINGINDUSTRYINTHETYPICALINBOUNDLOGISTICSFUNCTIONFORTHESERVICEINDUSTRY,HOWEVER,THEINTAKEPROCESSCANINVOLVETHECOLLECTIONOFASIGNIFICANTAMOUNTOFPERSONALINFORMATION,SUCHASPRIORMEDICALHISTORY,ALLERGIES,LEGALRECORDS,ORFINANCIALINFORMATIONINTHESERVICEINDUSTRY,DE

5、SIGNINGPRIVACYINTOTHEINTAKEOFPERSONALINFORMATIONREGARDINGCUSTOMERSISIMPERATIVEPOLICIES,PROCEDURESANDCONTROLSNEEDTOBEPUTINTOPLACETOENSURETHATONLYNECESSARYDATAISCOLLECTEDDURINGTHEINTAKEPROCESSOFSERVICEORGANIZATIONS,ANDTHATITISACCURATE,COMPLETE,ANDPROTECTEDFURTHERCUSTOMERSMUSTBEGIVENAPPROPRIATENOTICEAN

6、DASKEDFORCONSENTONLYINSPECIALCASESWOULDTHISNOTBEAREQUIREMENT2REFERRINGBACKTOTHESEVENFOUNDATIONALPRINCIPLES,WEPROPOSESOMEGUIDELINESFORDESIGNINGPRIVACYINTOTHEINBOUNDLOGISTICSPHASEOFTHEVALUECHAININORDERTOBEPROACTIVE,ORGANIZATIONSSHOULDENGAGEINTHEPROCESSOFCLEARLYIDENTIFYINGWHATPERSONALINFORMATIONISABSOL

7、UTELYNECESSARYFORTHEESTABLISHMENTOFTHEINDIVIDUALINTOTHESYSTEM,ANDONLYCOLLECTTHATDATAIFANORGANIZATIONHASATRUEBUSINESSNEEDTOCOLLECTCERTAINPIECESOFPERSONALINFORMATION,THENTHATDATASHOULDBETHOUGHTOFASADDINGVALUETOTHEEXPERIENCEOFTHECUSTOMERTHEPOSITIVESUMAPPROACHNECESSITATESTHATSUCHVALUEADDEDASARESULTOFCOL

8、LECTINGANDPOSSESSINGTHEDATABEEXPLICITLYIDENTIFIEDANDCONSIDEREDCOLLECTINGDATAJUSTBECAUSE“YOUCAN”WITHOUTANASSOCIATEDBUSINESSNEEDCANACTUALLYRESULTINTHEORGANIZATIONCREATINGAPOTENTIALLIABILITYPROSCH2009INORDERTOSETPRIVACYASTHEDEFAULT,THESYSTEMSHOULDBESETUPWITHTHEASSUMPTIONTHATTHEINDIVIDUALDOESNOTWISHTOHA

9、VETHEIRINFORMATIONSHAREDINORDERTORESPECTUSERPRIVACY,THEUSERSHOULDBEGIVENNOTICEABOUTALLUSESOFTHEIRPERSONALINFORMATIONATTHEPOINTOFCOLLECTIONANDTHEYSHOULDBEGIVENCHOICESABOUTHOWTHATDATAWILLBESHAREDALLINPUTSCREENSANDFORMS,ASWELLASACCESSTOSUCHDATA,SHOULDBEDESIGNEDWITHPROTECTIONOFTHEDATAINMINDFOREXAMPLE,EL

10、ECTRONICCLIPBOARDUSEFORCOLLECTINGMEDICALHISTORIESOFNEWPATIENTSSHOULDHAVEENCRYPTIONEMBEDDEDINTOTHEDEVICESFORDATATRANSMISSION,SOTHATDATACANNOTBETRANSMITTEDANYOTHERWAYOTHERTHANENCRYPTEDDATATHATISCOLLECTEDATTHEINTAKEDOESNOTMAGICALLYSELFDESTRUCTONCEITSUSEFULNESSHASEXPIREDALTHOUGHTHATWOULDBEANICEPRIVACYBY

11、DESIGNTECHNIQUE,SOTHECONSIDERATIONOFWHENITSHOULDBEDESTRUCTEDNEEDSTOBECONSIDEREDATTHEOUTSET,ASWELLASTHEMETHODOFDESTRUCTIONOFALLINSTANCESREPLICATIONSOFTHEDATATABLE1SUMMARIZESPRIVACYCONSIDERATIONSACROSSTHESEVENFOUNDATIONALPRINCIPLESFORTHEINPUTLOGISTICSACTIVITIESOFTHEVALUECHAINOPERATIONSOPERATIONACTIVIT

12、IESARETHE“PRODUCTION”ACTIVITIESAFIRMPERFORMSTOCREATEGOODSORSERVICESTHATAREVALUEDBYTHEIRCUSTOMERSINITIALLY,OPERATIONSRESEARCHFOCUSEDONMANUFACTURINGPROCESSESOFMADETOSTOCKPHYSICALGOODSINTHISINITIALCASE,NOPRIVACYISSUESAREREADILYAPPARENTHOWEVER,ASORGANIZATIONSHAVEMOVEDTOWARDMASSCUSTOMIZATIONFORTHEIRPRODU

13、CTIONPROCESSES,ANDASSERVICE3DELIVERYHASBECOMEMOREIMPORTANTTOTHEECONOMY,PRIVACYPROCESSESMUSTBEINCORPORATEDINTOTHESEACTIVITIESWHENORGANIZATIONSADOPTMASSCUSTOMIZATIONPROCESSES,THEYCREATEPRODUCTSINRESPONSETOSPECIFICCUSTOMERDESIRESFIRMSMAYELECTTOCUSTOMIZETHEPHYSICALPRODUCTSASTHEYAREMANUFACTUREDORENABLETH

14、ECUSTOMERTOCUSTOMIZETHEPRODUCT,BUTMAYALSOCUSTOMIZETHESALESPROCESSESORPACKAGINGVARIATIONSRESEARCHHASFOUNDTHATORGANIZATIONSTHATADOPTMASSCUSTOMIZATIONAREOFTENABLETOINCREASESALES,ANDWHENEVERTHECUSTOMIZATIONISBEINGPERFORMEDBYTHEORGANIZATION,THEFIRMMUSTCOLLECTCUSTOMERPREFERENCEINFORMATION,ANDMAKEITAVAILAB

15、LETOTHEOPERATIONSTEAMDASILVEIRAETAL2001IFDONESUCCESSFULLY,RESEARCHINDICATESTHATORGANIZATIONSADOPTINGMASSCUSTOMIZATIONPRACTICESMAYBEABLETOINCREASEREVENUESTHROUGHPRODUCTDIFFERENTIATION,ANDCUSTOMERSAREWILLINGTOSHAREINFORMATIONANDBECOME“COPRODUCERS”OFGOODSIFTHEYENJOYTHECOPRODUCTION“EXPERIENCE”ANDRECEIVE

16、APRODUCTTHATMEETSTHEIRNEEDSFIOREETAL2004CUSTOMIZATIONBYNATUREREQUIRESCUSTOMERSTOSHARETHEIRPREFERENCESWHICHARETRANSFERREDTOTHEOPERATIONSTEAMTHISPRACTICE,WHICHISOFTENENABLEDTHROUGHINFORMATIONTECHNOLOGYTHATSUPPORTSAHIGHVOLUMEOFTRANSACTIONS,EXPOSESTHEORGANIZATIONTOPOTENTIALPRIVACYRISKSFOREXAMPLE,THEINTE

17、RNETHASENABLEDORGANIZATIONSTOEASILYCOLLECTCUSTOMERPREFERENCESANDPERSONALINFORMATIONSUCHASPERSONALBODYMEASUREMENTSUSEDTOCREATECUSTOMIZEDLEVISJEANSORPERSONALMESSAGESENGRAVEDONCUSTOMIZEDPRODUCTSFIOREETAL2004PROCESSESSHOULDBEDESIGNEDSOTHATAMINIMALNUMBEROFEMPLOYEESHAVEACCESSTOTHEPERSONALINFORMATIONOFCUST

18、OMERSDURINGTHEOPERATIONSPROCESSESFURTHER,LOGSOFSUCHACCESSSHOULDBEKEPTANDMONITOREDFORCOMPLIANCEWITHPRIVACYPOLICIESANDPROCEDURESASMENTIONEDINTHEINBOUNDLOGISTICSSECTION,PRIVACYISSUESALSOEXISTFORSERVICEPROVIDERSSIMILARTOMASSCUSTOMIZEDMANUFACTURING,INMOSTSERVICEORGANIZATIONS,CUSTOMERREQUIREMENTSARECOLLEC

19、TEDANDUSEDTOCUSTOMIZEANDDELIVERTHESERVICEINADDITION,MANYSERVICESHAVESIGNIFICANTINFORMATIONCONTENTWHICHRESULTSINFIRMSHAVINGVARYINGAMOUNTSOFPERSONALINFORMATION,SOMEOFITHIGHLYSENSITIVEFOREXAMPLE,HEALTHCAREPROVIDERSENGAGEINDIAGNOSTICS,COMPILETESTRESULTS,PROVIDE4TREATMENTSANDPRESCRIPTIONS,ANDSTOREDIAGNOS

20、ISANDTREATMENTINFORMATIONTHEPROTECTIONOFPERSONALHEALTHINFORMATIONFALLSUNDERTHEEUSPRIVACYDIRECTIVEANDCANADASPIPEDALAWS,ANDINTHEUSUNDERHIPAAREGULATIONSLIKEWISE,THEPROCESSINGOFFINANCIALDATAGENERALLYFALLSUNDERTHEGENERALPRIVACYDIRECTIVESINTHEUSANDCANADAANDUNDERTHEGRAMMLEACHBLILEYACTANDTHEFCRAINTHEUSPRIVA

21、CYISNOTREGULATEDINTHEUSFORMANYOTHERSECTORS,HOWEVER,THATCOLLECT,PROCESSANDSTOREPERSONALINFORMATIONACCOUNTANTS,LAWYERS,ISPS,SOCIALNETWORKINGSERVICES,ANDMANYOTHERONLINESERVICES,SUCHASEMAILPROVIDERS,TONAMEAFEWINALLOFTHESECASES,OPERATIONSPROCEDURESMUSTBEDESIGNEDWITHPRIVACYPRACTICESATTHEIRCOREIFNOT,THEORG

22、ANIZATIONWILLBEEXPOSEDTOSECURITYRISKS,AND,ASRESEARCHHASSHOWN,IFTHECUSTOMERNOLONGERTRUSTSTHEPROVIDER,THEYMAYREDUCEORELIMINATEFUTUREPURCHASESFROMTHESUPPLIERAGAIN,REFERRINGBACKTOTHESEVENFOUNDATIONALPRINCIPLES,WEPROPOSESOMEGUIDELINESFORDESIGNINGPRIVACYINTOTHEOPERATIONSPHASEOFTHEVALUECHAINREACTIVESYSTEMS

23、AREONESINWHICHUNNECESSARYPERSONALINFORMATIONISCOLLECTEDAND/ORNOTAPPROPRIATELYPROTECTEDORUSEDTOBEPROACTIVEINTHEOPERATIONSPHASEOFTHEVALUECHAIN,ORGANIZATIONSSHOULDCLEARLYIDENTIFYPRECISELYWHATPERSONALINFORMATIONISABSOLUTELYNECESSARYFORTHEDELIVERYOFTHESERVICEORMANUFACTURINGOFTHEGOODANDONLYCOLLECTTHATDATA

24、AGAIN,THEDATASHOULDADDVALUETOTHEEXPERIENCEOFTHECUSTOMERORPROVIDEEFFICIENCIESTOTHEORGANIZATIONTHATCANRESULTINSAVINGSTHATCANBEPASSEDBACKTOTHECUSTOMERCONSIDERRENTALCARAGENCIESTHATCOLLECTTHEWHEREABOUTSOFTHEIRCUSTOMERSTHROUGHGPSSYSTEMSLIKELY,LITTLEDIRECTBENEFITSPASSTOTHECUSTOMERFROMTHECOLLECTIONOFSUCHDAT

25、A,BUTTHECARRENTALAGENCYCANUSEITTOIDENTIFYCUSTOMERSTHATDRIVETHECARINTOPROHIBITEDLOCATIONS,SUCHASAUSRENTALAGENCYTHATPROHIBITSTAKINGTHECARINTOMEXICOTHEDATACANBEUSEDTOFINESUCHINDIVIDUALSANDPOTENTIALLYCHARGETHEMHIGHERRATESTHENEXTTIMETHEYWISHTORENTACAR,ALLOWINGPOTENTIALLYLOWERRATESTOBECHARGEDTOOTHERCUSTOM

26、ERSTHEPOSITIVESUMAPPROACHCONSIDERSSUCHVALUEADDEDACTIVITIES,WHILEATTHESAMETIMEPROTECTINGTHEPRIVACYOFTHEINDIVIDUALINTHECASEOFTHESAFERETURNOFTHEVEHICLEWITHNOPROHIBITEDACTIVITIESHAVINGOCCURRED,THEPERSONALINFORMATIONREGARDINGTHE5WHEREABOUTSOFTHATCUSTOMERSHOULDBEDESTROYEDBECAUSEATTHATPOINTTHEYSERVENOBUSIN

27、ESSPURPOSEANDTHEDATALIFECYCLESHOULDCOMETOANENDFORTHOSESPECIFICPIECESOFDATARETAININGDATAJUSTBECAUSE“YOUCAN”WITHOUTANASSOCIATEDBUSINESSNEED,CANRESULTINTHEORGANIZATIONFACINGUNDESIRABLESITUATIONS,SUCHASALAWENFORCEMENTAGENCYTHATSUBPOENASTHERECORDSALATERTIMEIFTHEORGANIZATIONDOESNOTRETAINSUCHDATA,THENITDOE

28、SNOTHAVETODEALWITHTHEADMINISTRATIVECOSTSOFCOMPLYINGWITHTHESUBPOENAANDANYPOTENTIALPRESS/MEDIAISSUESASWELLINORDERTORESPECTUSERPRIVACY,THEUSERSHOULDBEGIVENNOTICEABOUTALLUSESOFTHEIRPERSONALINFORMATIONBEFOREORATTHEPOINTOFCOLLECTIONANDTHEYSHOULDBEGIVENCHOICESABOUTHOWTHATDATAWILLBESHAREDINTHECASEOFTHECARRE

29、NTALAGENCY,THECUSTOMERSSHOULDBEMADEAWARETHATTHEIRLOCATIONWHEREABOUTSWILLBETRACKEDONEOPTIONMAYBETOGIVETHEMTHEOPTIONTOHAVEFUTURERATESLOWEREDIFTHEORGANIZATIONISALLOWED,WITHTHEIRPERMISSION,TOKEEPTHEIRLOCATIONBASEDDATAFORASPECIFICPERIODOFTIMEIFDATAISKEPTONIMPROPERUSEOFTHECAR,SUCHASSPEEDINGORTRAVELINGTOFO

30、RBIDDENDESTINATIONS,THENTHECUSTOMERNEEDSTOBENOTIFIEDPRIORTORENTINGTHECARAGAIN,PERSONALINFORMATIONTHATISCOLLECTEDDURINGTHEOPERATIONSPROCESSSHOULDONLYBEKEPTASLONGASABUSINESSPURPOSEEXISTSANDAPPROPRIATEDESTRUCTIONPROCESSESSHOULDBEDESIGNEDINTOTHESYSTEMADDITIONALLY,USESOFPERSONALDATAIDENTIFIEDAFTERTHEINIT

31、IALDATACOLLECTIONANDNOTICEMUSTBEVERYCAUTIOUSLYCONSIDEREDFOREXAMPLE,SELLINGCUSTOMERDATAWITHOUTNOTICEANDCONSENTCANRESULTINLOSSOFTRUSTATAMINIMUM,AND,INSOMEJURISDICTIONS,MAYRESULTINLEGALACTIONORREGULATORYSANCTIONSEMPLOYEEMONITORINGDATAMAYBECOLLECTEDDURINGTHEOPERATIONSPHASEANDTHELEGALITYOFSUCHMONITORINGV

32、ARIESWIDELYINTERNATIONALLYSUCHDATAMIGHTBETHROUGHPUTRATES,BILLABLEHOURS,WASTEDRAWMATERIALS,ANDEVENMOUSETECHNOLOGYTHATRECORDSPULSERATESANDBODYTEMPERATURESOFCOMPUTERUSERSFIRST,THELOCALLAWMUSTBERESEARCHEDANDUNDERSTOODSECONDLY,THEREALBUSINESSNEEDOFSUCHDATASHOULDBEIDENTIFIEDANDTHEEFFECTSONTHEMORALEOFTHEEM

33、PLOYEESSHOULDBECAREFULLYWEIGHED,CONSIDEREDANDDOCUMENTEDIFEMPLOYEEMONITORINGISCOLLECTEDDURINGTHEOPERATIONSPHASE,ITSHOULDBEPROTECTEDANDPERIODICALLYREVIEWEDFOR6APPROPRIATENESSTABLE2SUMMARIZESPRIVACYCONSIDERATIONSACROSSTHESEVENFOUNDATIONALPRINCIPLESFORTHEOPERATIONSACTIVITIESOFTHEVALUECHAINOUTBOUNDLOGIST

34、ICSPORTER1985DEFINEDOUTBOUNDLOGISTICSAS“ACTIVITIESASSOCIATEDWITHCOLLECTING,STORING,ANDPHYSICALLYDISTRIBUTINGTHEPRODUCTTOBUYERS”FORMOSTORGANIZATIONS,LITTLEADDITIONALCUSTOMERINFORMATIONISCOLLECTEDDURINGTHISPHASERELATIVETOOTHERPRIMARYACTIVITIESTHEEXTENTOFPRIVACYEXPOSURE,THEREFORE,ISGENERALLYLIMITEDTOTH

35、ECUSTOMERDATATHATISUSEDDURINGTHISPROCESS,BUTMANYOFTHESAMECONCERNSREGARDINGTHEPERSONALINFORMATIONOFEMPLOYEES/CUSTOMERSARETHESAMEASDURINGTHEINBOUNDLOGISTICSANDOPERATIONSFOREXAMPLE,ASGOODSAREPACKEDANDSHIPPED,CUSTOMERADDRESSESANDBUYINGBEHAVIORSAREVISIBLETOWAREHOUSEANDDISTRIBUTIONEMPLOYEESREFERRINGBACKTO

36、THEFOUNDATIONALPRINCIPLES,WEPROPOSESOMEGUIDELINESFORDESIGNINGPRIVACYINTOTHEOUTBOUNDLOGISTICSPHASEOFTHEVALUECHAINORGANIZATIONSMUSTPROACTIVELYIDENTIFYPOTENTIALPRIVACYRISKSINTHEOUTBOUNDLOGISTICSACTIVITIESANDTRAINEMPLOYEESABOUTTHEAPPROPRIATEANDINAPPROPRIATEUSEOFPERSONALINFORMATIONUSEDDURINGTHEPACKAGINGA

37、NDDELIVERYOFGOODSANDSERVICESCONSIDERTHEDELIVERYFUNCTIONFORAFLORIST,THEPROCESSESINPLACESHOULDENSURETHATTHEDELIVERYSTAFFCANNOTREADMESSAGESSEALTHEENVELOPENORSHOULDTHEYTALKABOUTTHECONTENTSOFTHEIRDELIVERIESTOOTHERSOFTENTIMES,WHENPACKAGESAREDELIVEREDTOHOMES,WHENANINDIVIDUALISNOTAVAILABLE,THEDELIVERYPERSON

38、NELWILLATTEMPTTOLEAVEITWITHANEIGHBOR,WHOSENAMEGETSADDEDTOTHEDATABASEFORTRACKINGPURPOSESTHEPOSITIVESUMAPPROACHTOTHISSITUATIONWOULDCAUSETHEORGANIZATIONTOCONSIDERHOWITCANPROVIDETRACKINGDETAILSOFTHEDELIVERYWITHOUTINFRINGINGUPONTHEPRIVACYOFTHENEIGHBORTHEDELIVERYPERSONSHOULDINFORMTHENEIGHBORTHATTHEIRADDRE

39、SSANDNAMEWILLBESTOREDFORTRACKINGPURPOSESANDTHEYSHOULDBEGIVENACHOICEWHETHERTOACCEPTTHEDELIVERYUNDERTHOSETERMSTRACKINGNUMBERSTHATCANBEUSEDTOGAINACCESSTOTHECONTENTSOFPACKAGESSHOULDNOTBEEXTERNALLYVIEWABLEFURTHER,PACKAGING,TOTHEEXTENTPOSSIBLE,SHOULDNOTREVEALTHECONTENTSOFTHEPACKAGEAREASONABLETIMEPERIODFOR

40、RETENTIONOFSUCHDATASHOULDBEIDENTIFIEDANDCOMMUNICATEDTOTHEINDIVIDUAL7SOURCEJULIESMITHDAVIDMARILYNPROSCHEXTENDINGTHEVALUECHAINTOINCORPORATEPRIVACYBYDESIGNPRINCIPLESIDENTITYINTHEINFORMATIONSOCIETY,2010,VOLUME3,NUMBER2P2953188译文设计企业隐私权原则来扩展价值链原材料物流管理原材料物流管理涵盖了原材料进入一个组织或企业并达到签收入库的一连贯的活动。对生产型企业来说，这些原材料还处于

41、“原始”形式，但对不同的商品交易对象来说，这些输入的材料可能有多重形式。随便举个例子，在医学界，这些“材料”就是病人；而对法律专家来说，则是客户。对生产型企业来说，这些活动都是通过中介公司招聘员工、在卖方单位如何分配销量和员工来实现的。考虑到个人隐私一般都是不受控制的或不当使用的个人资料，所以，凡因合同引起的收集有关员工或消费者的，且没有明显的个人隐私的个人资料都被确认为在制造业方面的典型的入境物流功能。在服务行业，生产资料输入过程会涉及大量个人信息的收集，比如个人病史、过敏反应，法律记录以及财务信息。在服务行业，在收集客户个人信息时加入个人的隐私设计是非常有必要的。为了确保所有输入的信息都是

42、必要有价值的，服务机构在资料收集过程中必须准确、全面、强制地运用相关政策，程序和控制手段。对于能进一步合作的客户，必须给予及时并恰当的通知以征求他们的同意（这个步骤只有在特殊情况下才能省略）。回头看那七个基本原则，我们可以为如何在入境物流阶段进行价值链分析隐私设计提出一些指导方针。为了使工作能积极主动，企业应该在清楚识别建立企业系统数据库的过程中哪些个人信息是绝对必须的，那么只需收集那些有用数据就可以了。如果一个企业确实有商业需要去收集一些其他的个人信息，那么这些信息也必须具有为该客户的经验和经历产生价值增值的作用。积极的方法总结需要就是，这些信息的价值正是进行正确地确定、考虑并收集和支配的这

43、些数据的结果。收集数据就是因为“你能收集”且无需考虑这些数据是否会引起一个潜在的赔偿责任而产生的商业需要（普罗其,2009）。为了把隐私信息设置为默认信息，系统必须成立这样一个假设个人并不希望他的个人信息被公开，即这些信息都是隐私。为了尊重用户隐私权，必须在信息收集之时就告知用户他们个人信息的所有用处，并且由他们自己选择怎样对他们的信息进行共享。所有的输入目录和形式，包括访问这些数据，都必须在系统数据保护的同时进行设计。举个例子，用以收藏新病人病历的电子剪切板必须加密嵌入电子设备来进行数据交换传输，9所以这些数据除了加密不能采用其他方法进行传输。那些在资料输入过程中收集的数据在有用性消失后也不

44、会奇妙地进行自我毁灭（尽管技术手段下，那是一个不错的设计性隐私）。表1通过七个基本原则对输入物流活动的价值链进行分析和考察，总结了隐私设计。业务营运业务营运活动就是一个公司为了向它的顾客生产和提供有价值的产品和服务而进行的“生产”活动。起初，运筹学关注于的存货生产的物理生产过程。在这一原始情况下，没有任何明显的隐私问题产生。然而，随着组织的生产经营活动向大规模定制的生产流程转型，交付服务在经济结构中越来越重要，隐私进程必须纳入这些经济活动。当组织采用大量的定制过程，他们就创造新的产品来满足顾客的特定消费欲望。公司会选择定制已经加工好的物理产品（或者由顾客来定制产品），或者是定制销售过程及改变包

45、装。研究发现，采用大批量定制化的组织通常能够增加销量，并且无论何时，只要组织采用了定制手段，公司必须收集有关顾客偏好的信息，并使它对运营团队来说必然有效达希尔福等人，2001。研究表明，如果做得成功，组织将通过采用大量定制实践和产品差异化来增加收益，同时顾客也将更愿意去分享信息并成为产品的“共同服务者”当然，在顾客喜欢这项共同服务者的“经历”并且能够收到令他们满意的产品的前提之下。自然定制要求顾客对自己的，已经转移到运营团队的偏好进行分享。这项实践活动，通常在支持大量交易的信息技术的前提下才能够得到有效运作，同时也揭示了组织的潜在的隐私风险。比如说，互联网使得组织能够简单快速地收集有关顾客的偏

46、好和类似身体尺寸等个人信息，用以设计定制里维斯的牛仔裤或者存在客户个性化的个人信息费尔罗等人，2004。为了使最少的员工数量就能在操作过程中获得顾客的个人信息，必须采用工艺设计。进一步讲，如此获得的原始材料必须遵守隐私政策和程序，并得到有效地保持和检测。正如前面提到的原材料物流管理部分，隐私问题同样存在于服务供应商的过程中。类似大规模定制生产，在大多数服务机构内，顾客的要求都被收集起来以便定制和提供正确的服务。此外，许多服务机构都有重要的信息内容，这些信息由专门的公司从大量的个人信息中分类提炼出来，其中很大一部分都具有高度敏10感性。例如，医护人员从事诊断，编写测试结果，提供治疗和处方，以及存

47、储诊断和治疗的信息等活动。个人健康信息的保护条款在欧盟的隐私指导和加拿大的PIPEDA法律，以及美国的法案中都有相关的规定。同样，关于财务数据的处理问题，美国和加拿大都采用一般的隐私指示来规范，如美国的金融服务现代化法案（1999）和公正信用报告法案（2007）。在美国，很多部门都不涉及隐私问题；但是，除了以下这些专门从事收集、整理和储存个人信息的部门会计师，律师，ISPS协会，社会网络服务机构，及一些其他的在线服务机构，如电子邮件提供商。在所有这些例子中，都必须把隐私设计放在运作管理办法的核心位置。如果不这样，组织内部就会暴露安全风险，而且，也有研究表明，如果顾客不再信任供应商，他们就会减少

48、甚至消除未来向供应商的继续购买。同时，回过头来看这七个基本原则，我们为隐私设计有效纳入价值链运作阶段提出了一些指导方针。反应系统是指那些收集不必要的个人信息或者对这些信息没有妥善保管和使用的系统。为了使价值链运作富有前瞻性，组织必须清楚准确地识别哪些个人信息对交付服务或者产品的生产制造是绝对重要的，那么就收集这些数据。并且这些数据必须能够为顾客的经历或者提高组织的效率增加价值，从而节约企业生产成本并反过来为顾客节约成本。细想一下出租汽车公司利用GPS系统收集他们的顾客行踪，很可能几乎没有直接的好处会因为这些信息而传递到顾客身上，但是出租汽车公司却能用它来识别顾客的位置并多走一些路，例如一家美国

49、的出租汽车公司让它的出租车开到墨西哥去。这些数据被巧妙地用来使这些个体可以暗中向他们的顾客下次租车时索要更高的价钱，并用较低的价钱向其他顾客开价。这种方法从积极方面来概括，就是考虑了增加活动区的意义，同时保护了个人隐私。从车辆安全返回而没有发生意外事故的角度来说，用个人信息来确认顾客下落的行为模式必须被破除，因为在这一点上他们提供了没有商业目的的服务，并且这些数据的生命周期也应该为这些特殊数据而结束了。保留数据仅仅是因为“你能”而无需考虑有关商业需要，也可能会使企业面临不良情况，例如稍后收到一个法律的执法机构传票记录。如果企业不保存这些数据，那它就不需要处理这些为遵守传票及任何潜在的新闻或媒体问题而支付的行政成本。为了尊重用户的隐私，所有的用户都必须被告知他们的个人信息的所有用途，或者在信息收集时就给予他们对自己信息如何被使用和分享的自主选择11权。在出租车公司的例子中，必须告知消费者们他们的地理位置是被跟踪的。如果企业得到允许，也许有一个选择可以使他们将来能选择更低的价格就是在顾客的允许之下，将他们的定位数据保持在一个特定的时期。如果这些数据是保存在不正当使用的汽车上的，比如在限速地段或者限制行驶的地区，那么顾客就需要在租车前就被提前通知。同时，在作业过程中收集的个人信息应该一直保存到相应的商业活动结束，且应该在系统中设计一些适当的破坏程序。此外，这些个人信息的使用必须在