Why privacy is important, and having “nothing to hide” is irrelevant

As Schneier puts it: two proverbs sum it up: "Who watches the watchers?" and "Absolute power corrupts absolutely."

We expect professionals to behave ethically. Doctors and companies working on genetics and cloning for instance are expected to behave ethically and have constraints placed on their work. And with consequences for those behaving unethically.

Yet we have millions of software engineers working on building a surveillance society with no sense of ethics, constraints or consequences.

What we have instead are anachronistic discussions on things like privacy that seem oddly disconnected from 300 years of accumulated wisdom on surveillance, privacy, free speech and liberty to pretend the obvious is not obvious, and delay the need for ethical behavior and introspection. And this from a group of people who have routinely postured extreme zeal for freedom and liberty since the early 90's and produced one Snowden.

That's a pretty bad record by any standards, and indicates the urgent need for self reflection, industry bodies, standards, whistle blower protection and for a wider discussion to insert context, ethics and history into the debate.

The point about privacy is not you, no one cares what you are doing so an individual perspective here has zero value, but building the infrastructure and ability to track what everyone in a society is doing, and preempt any threat to entrenched interests and status quo. An individual may not need or value privacy but a healthy society definitely needs it.

You might think that, but it's just a matter of time really before someone asks you a question you don't want to answer. The users of Ashley Madison certainly had something to hide. They weren't doing anything illegal, so why should there have been any concern about privacy?

It's somewhat humorous when politicians use the "nothing to hide" argument. The governments and politicians seems to have the most to hide. It should be any problem for any government to release all information about any decision ever made, at least not after the fact.

It is just a shame that we have to go through the whole cycle given that we just know it should happen. But in a way, the more extensive the surveillance is, the quicker this cycle will happen. And right now we are in a pretty bad place already. So let's be optimistic!

However, I'd also like to see general software development think more closely about the role it has in normalising these things. Next time you start to create an account system for your project, ask yourself whether you really need it. Could you engineer around it, perhaps by letting the user store their data, or using a stored key to identify them? Let's go beyond don't store what you can't protect, and aim for don't store what you don't strictly need.