Security Without Obscurity: Managing Personally Identifiable Information in Born-Digital Archives

Abstract

This article examines current archival thinking and practice surrounding the identification and management of personally identifiable information (PII) found in born-digital collections in an academic repository context. Data from recent surveys and reports, along with examples of how several different repositories have attempted to balance management of born-digital records that require access control, inform the recommendations of the authors.

KEYWORDS:

• personally identifiable information
• archives
• born-digital records
• academic repositories

Notes

SPEC Kit 329: Managing Born-Digital Special Collections and Archival Material (Washington, DC: Association of Research Libraries, August 2012). 18.

Information technology staff interview with Seth Shaw and Tim Pyatt, Duke University Library, March 2010.

SAA Core Values and Code of Ethics for Archivists, rev. January 2012. http://www2.archivists.org/statements/saa-core-values-statement-and-code-of-ethics, (accessed February 2, 2014).

Danielson, E. S. The Ethical Archivist (Chicago: Society of American Archivists, 2010). 309.

Danielson, p. 319.

Danielson, p. 329.

Walk This Way: Detailed Steps for Transferring Born-Digital Content from Media You Can Read In-House (OCLC Research, June 2013). 28. http://www.oclc.org/content/dam/research/publications/library/2013/2013-02.pdf (accessed January 5, 2014).

Lee, C. A., and K. Woods. “Automated Redaction of Private and Personal Data in Collections.” Conference Proceedings of The Memory of the World in the Digital Age: Digitization and Preservation UNESCO (Vancouver, British Columbia, Canada, 2012). 299. http://www.ils.unc.edu/callee/p298-lee.pdf, (accessed February 10, 2014).

Behrnd-Klodt, M. Navigating Legal Issues in Archives (Chicago: Society of American Archivists, 2008). 114–123.

Greene, M. A., and D. Meissner. ”More Product, Less Process: Revamping Traditional Archival Processing.” American Archivist 68, 2 (2005): 208–263.

Pyatt, T. D. “Balancing Issues of Privacy and Confidentiality in College and University Archives.” In College and University Archives: Readings in Theory and Practice (Chicago: Society of American Archivists, 2008). 224–225.

Dooley, J. M., and K. Luce. Taking Our Pulse: The OCLC Research Survey of Special Collections and Archives (Dublin, OH: OCLC Research, 2010).

Jump In Initiative 2013. Results. http://www2.archivists.org/groups/manuscript-repositories-section/jump-in-initiative-2013-results (accessed February 10, 2014).

Kirschenbaum, M. G., R. Ovenden, and G. Redwine. Digital Forensics and Born-Digital Content in Cultural Heritage Collections (Washington, DC: Council on Library and Information Resources, 2010). 14.

McElhearn, K. “Apple and the Incredible Vanishing CD Drive.” Macworld October 30, 2012. http://www.macworld.com/article/2013146/apple-and-the-incredible-vanishing-cd-drive.html, (accessed February 10, 2014).

Mayer, J., and P. Mulder. “MetaPhone: The Sensitivity of Telephone Metadata.” Web Policy March 12, 2014. http://webpolicy.org/2014/03/12/metaphone-the-sensitivity-of-telephone-metadata/ (accessed March 29, 2014)).

Lee and Woods, 301.

Garfinkel, S. L., and A. Shelat. “Remembrance of Data Passed: A Study of Disk Sanitization Practices” IEEE Security and Privacy Magazine January/February (2003): 25–27 http://simson.net/clips/academic/2003.IEEE.DiskDriveForensics.pdf, (accessed March 20, 2014).

Carroll, L., et al. “A Comprehensive Approach to Born-Digital Archives.” Archivaria 72 (fall 2011): 68.

BitCurator: Tools for Digital Forensics Methods and Workflows in Real-World Collecting Institutions. http://www.bitcurator.net/ (accessed February 10, 2014).

For more information, see the AccessData website http://www.accessdata.com/products/digital-forensics/ftk, (accessed March 29, 2014).

Wilsey, L., et al. “Capturing and Processing Born-Digital Files in the STOP AIDS Project Records: A Case Study.” Journal of Western Archives 4, 1 (2013): 21.

Gartner Says Worldwide Security Market to Grow 8.7 Percent in 2013 (June 11, 2013), http://www.gartner.com/newsroom/id/2512215 (accessed February 10, 2014).

Musil, S. “Data breach at University of Maryland Exposes 300K Records.” CNET February 20, 2014. http://www.cnet.com/news/data-breach-at-university-of-maryland-exposes-300k-records/ (accessed March 29, 2014).

Policy AD71 Data Categorization. Penn State Policy Manual October 12, 2012. https://guru.psu.edu/policies/AD71.html, (accessed February 10, 2014).

SPEC Kit 329, 18.

Carroll, L., et al., 68.

Redwine, G., et al. Born Digital: Guidance for Donors, Dealers, and Archival Repositories (Washington, DC: Council on Library and Information Resources, 2013). 9.

Redwine, G., et al. 10.

AIMS Born-Digital Collections: An Inter-Institutional Model for Stewardship. http://www.digitalcurationservices.org/aims/ (accessed February 10, 2014).

For more information, see the IndentityFinder Website, http://www.identityfinder.com/ (accessed March 28, 2014).

Bantin, P. “Strategies for Managing Electronic Records: A New Archival Paradigm? An Affirmation of our Archival Traditions?” Archival Issues 23, 1 (1998): 30.

Hedstrom, M. Electronic Records Program Strategies (Pittsburgh: Archives & Museums Informatics, 1993). 4.

Walk This Way: Detailed Steps for Transferring Born-Digital Content from Media You Can Read In-House (OCLC Research, June 2013). 28. http://www.oclc.org/content/dam/research/publications/library/2013/2013-02.pdf, (accessed January 5, 2014).

Goldman, Ben. “ArchiveSphere FAQs,” Digital Stewardship, July 20, 2013, http://stewardship.psu.edu/2013/07/30/archivesphere-faqs/ (accessed March 29, 2014).

Moser, B. “In the Sontag Archives.” The New Yorker, January 30, 2014. http://www.newyorker.com/online/blogs/books/2014/01/in-the-sontag-archives.html, (accessed February 2, 2014).

Carroll, L., et al. “A Comprehensive Approach to Born-Digital Archives.” Archivaria 72 (fall 2011): 68.

Redwine, G., et al. 10.