Privacy in Context / Interactive Glossary
Contextual Integrity

Privacy in Context.

Contextual Integrity (CI) glossary for understanding how privacy depends on social context, appropriate information flows, contextual norms, and the values they support.

Helen Nissenbaum & Yan Shvartzshnaider
Reference guide

Glossary of Terms

No matching terms found.
Protocol

The CI Heuristic

The CI heuristic evaluates whether an information practice is appropriate within a social context. It begins by identifying the relevant context, describing the information flow, and identifying the applicable informational norms. The observed flow is then compared with those norms. Where the flow conforms to the relevant norms, contextual integrity is maintained. Where the flow departs from a norm, or where no applicable norm exists, further evaluation is required.

01 Identify the Context

Begin by identifying the social context in which the information practice occurs. Determine the relevant institution, relationship, activity, or social setting, including any relevant subcontexts. Context establishes the social setting within which information flows acquire their meaning and within which expectations about appropriate information flows arise.

02 Describe the Information Flow

Describe the information practice using the five parameters of a contextual information flow. Together, these parameters specify who is involved, what information is being exchanged, and under what conditions.

01 Data Subject The person the information is about.
02 Sender The contextual actor transmitting the information.
03 Recipient The contextual actor receiving the information.
04 Attribute The semantic type or subject matter of the information.
05 Transmission Principle The condition governing how the flow occurs.

03 Identify the Informational Norms

Identify the contextual informational norms that govern appropriate information flows within the context. These norms specify what information may appropriately flow, between whom, under what conditions, and for what purposes.

Appropriate Actors
Who may appropriately send or receive the information?
Appropriate Attributes
What kinds of information may appropriately flow?
Transmission Conditions
Under what principles may the information flow?
04 · Compare the Flow with the Norms

Compare the information flow described in Step 02 with the informational norms identified in Step 03. The comparison produces one of three outcomes.

CASE 1
Conformance The flow conforms to the relevant informational norms.
✓ END · No evaluation
!
CASE 2
Breach The flow departs from a relevant informational norm. A prima facie violation of contextual integrity may have occurred.
↓ EVALUATION REQUIRED
?
CASE 3
Lacuna No relevant norm covers the observed flow. Existing norms may be incomplete or the practice may be genuinely novel.
↓ EVALUATION REQUIRED
✓ CONFORMANCE
Analysis ends here.
BREACH OR LACUNA
Continue to Section 05
Further evaluation is required.

05 Evaluate the Practice CONDITIONAL

Evaluation is required where the flow departs from an established informational norm or where the relevant norms are unclear or incomplete. The evaluation considers the effects of the practice, broader moral and political principles, and the values and purposes of the relevant context.

Evaluation I Assess impacts, benefits, costs, risks, and shifts in power affecting stakeholders.
Evaluation II Consider autonomy, justice, fairness, liberty, democracy, hierarchy, and political principles.
Evaluation III Consider how the practice affects contextual ends, purposes, and values.