The contextual integrity model is a widely accepted way of analyzing the plurality of norms that are colloquially called "privacy norms". Contextual integrity systematically describes such norms by distinguishing the type of data concerned, the three social agents involved (subject, sender, and recipient) and the transmission principle governing the transfer of information. It allows analyzing privacy norms in terms of their impact on the interaction of those agents with one another. This paper places contextual integrity in a strict game theoretic framework. When such description is possible it has three key advantages: Firstly, it allows indisputable utilitarian justification of some privacy norms. Secondly, it better relates privacy to topics which are well understood by stakeholders whose education is predominantly quantitative, such as engineers and economists. Thirdly, it is an absolute necessity when describing ethical constraints to machines such as AI agents. In addition to describing games which capture paradigmatic informational norms, the paper also analyzes cases in which the game, per se, does not encourage normative behavior. The paper discusses two main forms of mechanisms which can be applied to the game in such cases, and shows that they reflect accepted privacy regulation and technologies.
翻译:情境完整性模型是分析被俗称为"隐私规范"的多元规范的一种广泛认可的方法。情境完整性通过区分所涉及的数据类型、三类社会主体(发送者、接收者与数据主体)以及支配信息传输的传输原则,系统地描述了此类规范。该模型允许从规范对这些主体间互动影响的角度分析隐私规范。本文将情境完整性置于严格的博弈论框架中。当这种描述成为可能时,其具有三个关键优势:首先,它能够为某些隐私规范提供无可争议的功利主义辩护;其次,它能使隐私更好地与那些主要接受量化教育(如工程师和经济学家)的利益相关者所熟知的话题建立联系;第三,在向机器(例如AI主体)描述伦理约束时,这绝对是一个必要条件。除了描述能够刻画典型信息规范的博弈模型外,本文还分析了博弈本身不鼓励规范性行为的案例。论文讨论了针对此类情况可应用于博弈的两种主要机制形式,并表明这些机制体现了公认的隐私规制与相关技术。