[KeyDiscussion] with #brittanykaiser #Xanditkoff #justinpark #CarolineMalcolmHead at KBW2019

[Applause] [Music] hello everyone I think this year's conference has a great meaning in terms of where most of other conferences was focusing more on the technology or crypto script or part of the agendas but I'm very glad to see that this year's conference is more focus on the specific agenda which is a data privacy and then not only the whistleblower for the for the other matters but also this is a great visible moment for the blockchain industry as a whole so thanks for coming and then I'd like to start with our session with like past of the data matters maybe Britney you can start with our conversation with sharing your experiences what happens in the Canberra shuttle Erika if you can share yeah of course and I think if we're going to talk about data privacy first we need to acknowledge the fact that most of us sitting here today are never going to get our privacy back our personal information has been bought and sold around the world since the first time we touched a digital device and a lot of that data cannot be deleted it is on the servers of so many companies and governments around the world that what we're really talking about is the future of data privacy so all of the data that we produce from now for the rest of our lives how are we going to protect that and how are we going to make sure that our children and grandchildren don't have the same lack of privacy or lack of privacy if you want to consent to it some people would love to share all of their data but it should be their choice it hasn't been our choice so we're talking about legislative frameworks digital intelligence and digital education as well as the technology that's going to allow us to have transparency have can mechanisms and then if we decide to share our data to actually have rights to the monetization of that so that we get rewarded for what we decide to share instead of keep private okay thanks so you know in a previous area of internet that that Tim berners-lee mentioned that his intention was not the way it's now but somehow that data has been centralized with with a few dinosaur companies IT companies and then the monetization of that data is also centralized and then I think next question to Suzanne is like maybe most of the people may not aware of your project or blog stack one of the leading project regarding the data privacy and then web 3.0 movement so you can cover a bit with the starting with a little bit of introduction about your company and then how you approach towards the data privacy matters absolutely block stack is a decentralized network and developer toolkit that makes it very easy to create powerful applications where users own their identity and their data at block stack the user is really at the center of the digital world I love that Britney talks about control of data we are really trying to make the digital world in many ways reflect the physical world in the physical world you have an identity that is yours you can attach assets to that identity you have ownership of these assets there are legal protections over your ownership of these assets and you can take them and do things with them in the real world by contrast the digital world we find ourselves in today is really almost a feudal like structure we have no ownership of our identities let alone our data and that's why we start with identity by allowing user to fundamentally own their identity we can then create ownership over the assets in the digital world which is data you can then go on to have legal protections around those assets and use those assets when and how you want given your choice and that's the world we're trying to create yes that's that's kind of biggest paradigm shift kind of movement where that all the infrastructure as is is based on the like client-server or cloud-based model but when once that this paradigm really works that all the data base is going back to the individual users and then all the service actually access to that data that's the infrastructure of the future and then in that aspect not only the Box tech but just previously we had a Gavin hood he's leading the web 3.0 movement as well as the polka dot itself is building the similar infrastructure as well and then material as well that we are doing the D ID working on the D ID and then it is critical infrastructure for the future web to final generations so going back to Caroline so not only the private sector but also we see these general also encouraging the D IDs and then data privacy matters so what are the activities that you're working on sure so it's very interesting to talk about data privacy because we talked about it obviously in this context in in relation to DLT but the principles that we're talking about date back quite a long time and these are challenges that we've been facing for quite a number of years if I think about the OECD's own work those of you who aren't familiar the OECD is a policy research and international standard setting body we have 36 member countries of which career is one but also work with many other jurisdictions across the world I think back to the OECD's first work in this space our guidelines on privacy and cross-border flows of personal data date from 1980 so this is really something which has been going on and questions we've been asking about how we manage personal data who has rights to access personal data almost you know 30 40 years now obviously times have changed and I think what's really interesting about blockchain is obviously in itself it raises new questions about the updated frameworks on privacy whether it be you know the original 95 European Commission regulations in this space the updated GDP our rules or country specific legislation some of which Britney outlined in her presentation but those are trying to put those same principles into the world that we live in in today and what's so interesting about blockchain is not just well how do you make this technology meet those principles but also the new opportunities for new business models to change our relationship without our data and that's something and I think really that it's the transition from where we are today to where we will be and I think we are going in the direction that the sound and Brittany have outlined but how do we get there and during that period how do we preserve the control and and move towards the world where we control our own data minute I think that's quite an interesting point that that also myself having a trouble with that this whole idea of data privacy is such important matters but how we Kidon as entrepreneurs deliver the concept to the users that we're disagreeing you and then we're so used to in the central very centralized way of managing the data so what are the things that we can do to boost up this this movement is there any I know you're working on the on your data movement the foundation as the data the the DISA asset what is it association association sorry so can you share your your thoughts on that like how it is educate that the people well I actually some of the most comprehensive educational materials that exist right now come from the OECD I don't know if you guys have ever seen something called the DQ Institute it stands for digital intelligence so DQ like IQ or EQ right and so how are we going to start bringing up children and also bringing up a society where in companies and in government's we are being trained to understand our digital lives I don't think I see a future where kids should be taught how to type and how to send an email without being told every word that you type to send an email to your friend is recorded by the platform that you're using and is being recorded by probably many other companies along the supply chain of you sending that email and are you comfortable with all the words that you're writing actually being held by these companies I mean hopefully a lot of people in this room are creating technologies where that isn't the case where we could actually send an encrypted email and all of that data isn't being collected by all these different platforms we're using but I think we should start telling kids hey and instead of telling your friend who you have a crush on you might want to say say in the email meet me at recess and I have something to tell you so it's just kind of flipping that framework for individuals to understand what it means to lead a digital life what it means to use a platform what it means to use devices and how do you protect yourself so you know both in the legislative and regulatory work that I do or I'm sitting down with legislators and regulators explaining to them what are these technologies and how is data collected and how is it bought and sold around the world and what are the implications that we need to think of in order to put together common-sense legislation at the same time we need to create comprehensive educational materials that are accessible to everybody you don't have to be an engineer in order to understand how you can protect yourself I think that that is of a big kind of lacking space right now we're unless you are nearly a cyber security expert you don't know how to protect yourself and you don't have really easy-to-use accessible tools so next is like once we talk about data privacy leverage blockchain technology that most the latest technology that gets a lot of attention lately is called a deed the ID so Jan you're the member of da di F and then can you share the latest activities on the di di app or the ID standardization movement towards towards this building the data privacy absolutely I was actually just in San Francisco with a number of the other members of the di F including Microsoft and I think we're getting to a point where we have quite quite an incredible standard in terms of this primitive which is decentralized identity and the challenge in front of us now is kind of twofold the first big one is not technological it's it's more social and it's what Brittney is speaking to in terms of Education and legislation because at the end of the day if this isn't enforceable in the real world it only matters to a certain degree the other side of that equation is increasingly allowing users to take control of their data in easier ways giving them more options abstracting the complexity and the friction of a lot of this technology away from that and I think what's important to remember here too is this is important for two reasons and I think to actually have this world come to fruition you need to address both of these one is on the user side educating users providing them with easier solutions that enable them to see value in ways that they've never seen before whether it's monetizing their data are using services with data that they can use across entire eco systems rather than that being siloed the other side of this and Gavin touched on this briefly and in his speech is actually on the companies of the corporate side the enterprise side which is showing these companies that you know data is valuable but it's also increasingly a liability for these entities that are holding it I mean look at Equifax it's it's unfortunately one of thousands of examples these days I think we've become a little numb to the headlines of breaches and it's showing that you know this is not just a model that is creating a more equitable digital world for the end-user this is creating a better security model for the internet and for these companies who whose lifeblood is there you know what we are enabling is a world where rather than to use the analogy of robbing a home you know with Equifax you pick one lock and you now have stolen the assets of hundreds of millions of people in this new world not only can can users have a much more equitable existence but attackers and the nefarious need to rob every single home individually to get the same return and I think it's important to address both of those and that's why organizations like the DI F have a combination of projects like us who are attacking the problem a little bit more bottom-up as well as yeah folks like Microsoft who are really looking at it as new ways to architect white-label solutions exactly so I think that's leads to my second question towards you that whether there is this mutual crown of legacy centralized service providers with to transit to the to the di D based solutions I know like blocks tax one of the core is called kaya that that the big decentralized the data base and then how does it work and then what would be the the Brown of legacy systems and then and then future the ID basis services yeah absolutely so Gaia is our storage layer what's interesting is it's it's not actually a storage Network it's more of a routing protocol for how data is stored the thing I really like about Gaia is it's all about user choice we don't really believe there's a need to throw away all the incredible infrastructure that's been built up over the last decade or so we enable users companies entities who may be using our technology for their own enterprise solutions to choose exactly where their data is stored it's encrypted on their end that they can choose to repurpose any of the major cloud storage providers we use today to store that data they can also use more distributed services like ipfs and others they can sell post they can replicate throughout and what it does is it creates a data layer that is attached to a fundamental identity that a user can own a company can own and anyone can really own and then they can go and permission that across the entire internet as kind of one whole space versus within these silos yeah okay thanks for explanation next question to Caroline that I know that the OECD perspective also working on the DI DES what would be the use cases that you see in the future first I guess there's a couple of interesting things about decentralized identity one is to look at the new business models that they will be created and what sort of economic implications we'll see from that obviously we've just gone through up here and we've done a lot of work looking for example at platform based models as that moves into into this new area what does that mean both for corporations but also for individuals to type of work they were doing will be all we'd be able to stop working just monetize our data and that's how will will live so looking at some of those more macroeconomic questions about the future business models but also looking at questions like well what's the role of government in decentralized identity you know for a very long time a governments have been a source of truth as it were would issue of passports for example driver's license things that people rely on an everyday level to prove who they are which must necessarily have a link with this idea of you know decentralized identity personal data and storage will that still be the case in the future we'll be looking more at indicators of you know being able to identify yourself through your patterns of your phone use for example will there be something biometric data what how do all these fit and what's the role of government in that process now not just in creating a policy infrastructure in terms of you know appropriate ways and requirements for managing personal data but also thinking about government's own role ok so I guess the next question is - for the Brittany that the couple days ago greater the discussion about these like the character blockchain itself as I has both privacy and the transparent this is quite quite oxymoron cases and that what sort of the data has to be protected and what others can be shared so can leverage the value for this old social good so any opinions you can say well some of the most exciting solutions that we're talking about here first start with digital identity and those are your personally identifiable information called PII that's data that can be used to create your identity and that's why something like the Equifax hack is such a big deal because that includes PII data where somebody can now pretend to be you they can start taking out loans again buy a house they can open up credit cards they can really if there are new digital identity solutions available soon pretend to be you digitally or even in person I think probably there's quite a handful of people including myself that have been syn hacked lately because someone took your social security number and another piece of personal information about you and went and bought a SIM card with your phone number on it so this is why there are certain types of data your personal information that always needs to be protected and any other data that you are producing from your location data to your behavioral data to your healthcare data these are data sets that can be shared fully anonymously or pseudo anonymously so that you know some of it can really be traced back to you so that we can start to solve problems it makes a lot of sense for everyone in this room to think about that there are some datasets that you would choose to keep private and that should be your complete choice that full consent should be left to you and if you want to share other datasets you should understand who you are sharing it with for how long they're going to keep it what they're gonna use it for and you need to be rewarded for that that's where a lot of very interesting different types of blockchain technology you know from simple smart contracting all the way through you know platforms that allow fractionalized ownership of datasets so that you can start to produce data with platforms that are going to provide added value I think that as I said earlier if you think about it some of the biggest problems in this world could be solved if there were more data surrounding that right now most medicines don't work as well on women and minorities because we are not the people that go to medical trials in college its young white men 18 to 35 years old and so all of the pharma companies actually just have data on those guys and so medicines are designed for 18 to 35 year old young young white men and that's the those are the types of issues that we're going to encounter if the entire world just decides to encrypt everything and become private so while we're at this critical point where there's so much momentum around the conversation between transparency and privacy we need to understand what is important to keep private what if secured and regulated we could share in order to make a better future for ourselves thank you so next question sir Jam is more of relating to the slight PAC matters so one of the other obstacles about the tid is the key management issues so actually that it's a it's a such fantastic idea that all my own data but also people has to bear the responsibility of that data of own data so but but if they lose their keys and then they cannot recover it so what's the black stacks approach towards the this key management and then recoveries on the D IDs it's a great question I think going forward it goes back to we see an increasing world of user choice hmm it depends you know first I think what's interesting is where we're talking about identity in kind of the singular I I will have one online identity and and I don't necessarily know if that's true I might I do agree with the type of identity Britney's talking about I you know provably unique it is linked to my real world PII that that will be singular but I may have you know other identities for different uses linked to different data that can be pseudonymous or anonymous and each of those is going to come with different requirements for the level of control I'm willing to give up you know at a high level someone like myself with my you know background in in this space and then studying this I probably will always be okay with that added friction of wanting to control my C phrase my public/private key pair people like my parents you know my dad's a doctor he retired doctor in his 80s I think he knows the phrase cede phrasing and that's about it he's never going to manage that but that's okay we're already seeing different solutions and services' being created especially a the Argent wallet is one I can think of with this concept of guardians where they allow the user to maintain custody but they also allow somewhat fractional custody among a number of different entities that can help with that recovery and abstract away the need to manage some of that friction and I think we're just going to see that increase and so it'll depend I could see myself having identities that I do maintain that friction for and others where I'm more than fine giving up a little bit of the control at the end of the day it's it's just contextual I think okay so I guess I'll already spend like 25 minutes and then actually these are I think you can I have a time for last comments and the data privacy in the D ID if you have and then we can get some questions from the audience so is there any comment or things about the privacy yeah I would definitely say that this space is moving so quickly that it's really important for everyone here to care about so many things at once one you should be educating yourself on all of your privacy protocols on your own cyber security protocols how can you take care and protect yourself secondly if you are building a company you should start to think about what are the ethical choices that you can make in your transparent and consensual relationship with your customers are you're going to tell them how they can take care of themselves what type of data you're collecting from them and what are their opportunities to get rewarded for more that they are producing in your platform and on the legal side if you have a relationship with your legislators regulators or lobbyists even if you don't it's quite easy to go online and find their contact information tell them that you care tell them that new data protection regulations are important to you and that you also support technology entrepreneurs in having their right to develop these types of technologies right now it's a really key point in time for us to support the blockchain industry and make sure that government doesn't over legislate and over regulate us so we don't have the ability to build these solutions what makes me really excited especially with the past you know - so years I've been at block SEC is the rate at which i-i've seen this social shift towards people increasingly having knowledge about these issues and caring about them I think certainly in the US have we've heard forever that you know users don't care about owning their own data they don't care about data privacy and I've been a big believer for the longest time that that's not really the case the cases they feel helpless with no alternatives to actually take control of this we've seen an incredible amount of progress to actually start providing those alternatives and I think where we're seeing that play out where it's showing people do care about this they just need common-sense alternatives that they can use and so I think continuing to educate yourself continuing to support these projects is very important but what what makes me very excited around these concepts of digital identity and data privacy is I think we've reached already a tipping point where you almost can't really say that people don't care about this anymore this this is the fact that it's more just making sure that the way this plays out is in a way such that people can take control of this in the best possible way and of the best possible options available to them and I'm just first just become something on zan was saying there is I had fully agree that people do want solutions and the question I think as well as you know this sense of helplessness but also we also see people do want a smooth user experience so what is that balance and is the technology at the point you know yet when you can have a user experience which is comparable because we do already have some solutions and we've seen the market shows the people still highly value a quality user experience and I think until we get to that point where more data privacy conscious products have an equivalent user experience you know the market will show where where the demand actually is that's just then more holistically as I mentioned yesterday the OECD is working on a framework of blockchain policy principles at the moment this issue around our privacy is very important part of that as well as some of the issues that the Gavin spoke about before Trust and governance and as well as that to let the audience you know that we're also doing some work specifically on the OECD standards which get adopted by our our member countries and often by additional countries across the world as well around data privacy and management to take into account the sort of emerging technology sort of the environment that we live in so keep abreast of that stay in touch and please we seek everybody's input we really need the the industry to be very much involved in in those in those works lastly I just want to mention that a decade ago this crew at Jeremy Rifkin wrote a book about the age of access so where the access means to the centralized way where the resources are limited but now that I'd like to redefine the access the meaning of the access 2.0 that access is all the services that access to individual is the next generation ok I think we have a time so thank you very much everybody thanks really thank you thank you [Music]