Anonymity, Consent, And Other Noble Lies Jun e15

[Arts Communications]

Dear friends and colleagues,

The Cybersecurity and Privacy Institute (CPI), led by Dr. Adam Molnar, Interim Executive Director, at the University of Waterloo invites you to our next talk in their public outreach lecture series, CPI Talks.

Anonymity, Consent, And Other Noble Lies: An Empirical Study of The Data Economy

Speaker: Dr. Joel Reardon, Associate Professor, Department of Computer Science, University of Calgary

Date: Monday, June 15, 2026

Time: 2:30 – 4:00 p.m. EDT

Location: Enterprise Theatre, East Campus 5 (Room EC5-1101/1111), 305 Phillip St., University of Waterloo

Register <https://uwaterloo.ca/cybersecurity-privacy-institute/events/cpi-talk-anonymity-consent-and-other-noble-lies-empirical>

Abstract

While legal scholars have cited decades of computer science research that demonstrates why anonymity is hard (and that datasets should not be labelled as "anonymous" cavalierly), industry and legal practitioners have not heeded those warnings: many organizations trafficking in consumer data continue to assert to customers, courts, and regulators, that their data is anonymous or "deidentified." We acquired datasets from multiple data brokers to demonstrate empirically why this is false. Using publicly available email addresses found in data breaches posted on the Internet, we trivially reidentified 88% of the hashed email addresses that we obtained.

Relatedly, organizations trafficking in this data make another assertion, that this data was collected from consumers with their consent. To evaluate this claim, we performed a survey (n=369), in which we emailed a subset of the reidentified individuals in our datasets to recruit them to participate. This survey asked participants about their recollections of having provided consent (99% had no recollection) and their feelings about the sale of their information (94% were opposed, while 77% said they planned to submit deletion requests). Overall, our study shows that hashed email addresses and device identifiers do not come close to meeting commonly understood definitions of "anonymous" or "deidentified" data, and that any notion of "consent" must also involve a similarly tortured definition. We argue that this industry and its defenders are not simply misinformed or indifferent to the veracity of their statements, but that this is an example of Plato's "noble lie": their entire social order relies on these demonstrably untrue statements being believed by courts, regulators, policymakers, and the public.

About the speaker

Joel Reardon is an Associate Professor in the Department of Computer Science at the University of Calgary who researches mobile security and privacy issues and data collection done through those devices. He has also co-founded the privacy analytics company AppCensus. He received his Bachelor's and Master's at the University of Waterloo and his Doctor of Sciences at ETH Zurich. His work has uncovered widespread privacy violations in mobile apps, including studies on how apps circumvent Android's permissions system and fail to comply with children's privacy laws, and has been covered by the CBC, the BBC, the Washington Post, and the Wall Street Journal, among other places. His research has received the Emilio Aced Research and Personal Data Protection Award, the CNIL–Inria Data Protection Award, and the Caspar Bowden Award for Outstanding Research in Privacy Enhancing Technologies. He has advised regulators and policymakers on digital privacy and works to translate technical findings into changes that protect everyday users. He likes bicycling and snowboarding.

About CPI Talks

CPI Talks feature experts speaking on cybersecurity and privacy topics that concern the general public as a whole. The talks are intended for people from all walks of life, and are designed to be accessible to members of the general public without any pre-requisite background or knowledge in cybersecurity and privacy. In our increasingly digital world, cybersecurity and privacy concerns affect everyone — everyone is therefore welcome to attend.


________________________________________________________________________________________________

You are receiving this email because you are part of the Arts Announce email list from the Faculty of Arts.
About Arts Announce<https://uwaterloo.ca/arts-faculty-staff-resources/communication/artsannounce-email-list> | Unsubscribe<mailto:artsannounce-leave at artslist.uwaterloo.ca?subject=Please%20unscubscribe%20me%20from%20artsannounce> from Arts Announce.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://artsservices.uwaterloo.ca/pipermail/artsannounce/attachments/20260601/725af897/attachment.htm>