Milestone 3: Comprehensive Privacy Regulations
For this milestone, your team will review and report on comprehensive privacy regulations. At the moment, there is no comprehensive federal privacy regulation in the United States. However, the European Union has such a regulation in the form of the General Data Protection Regulation (GDPR). Some states also have individual privacy laws, like the California Consumer Privacy Act (CCPA).
Requirements
Your team will conduct research into comprehensive privacy regulations both internationally and at the state level. The resulting milestone report should cover the following:
- The EU General Data Protection Regulation (GDPR).
- The California Consumer Privacy Act (CCPA).
- Additional state-level privacy regulations and laws that have come into place since the CCPA was enacted.
- Limitations of these comprehensive regulations.
To cover this material, begin from the Starting Points section found below. Use Internet and CCU Library search tools to locate additional sources. You MAY use Artificial Intelligence (AI) tools, but you MUST verify the results they provide. Remember that AI tools can and do hallucinate completely incorrect information, and they are programmed to sound extremely confident despite being totally wrong.
Organization
The required organization of the report document is as follows:
- A title page that includes the report title and the names of all team members, with the team leader for this milestone listed first and indicated as such (for example, John Smith (Team Leader)).
- A brief introduction section that provides an overview of your work.
- One or more sections of narrative text that covers the above list of topics.
- A brief conclusion section that summarizes major points.
- A References section that lists all references cited. Please remember that there should be at least 1 inline citation for each work listed in the References section!
- A final page detailing the contributions of each team member (including the leader) to the final report. Contributions should be listed as bullet points under each person’s name.
Formatting
The paper should be formatted as follows:
- Use a 12 point font.
- Double-space the text.
- Use 1 inch margins with a standard US letter (8.5 x 11 inch) page size.
- For the title and section headings, use the formatting tools provided in your word processing software to select “title” or “heading” format. Do NOT manually change the font size or font style/weight to make a heading or title. Using the word processing software’s defined styles for headings and titles helps make the resulting PDF file more accessible to people with disabilities.
The length of the middle part of the paper, excluding the title page, references, and contributions pages, should be:
- 15 pages if your team has 3 people, or
- 22 pages if your team has 4 people.
References
For your references:
- Try to cite at least 1 article published in an academic journal or conference proceedings.
- Do NOT cite Wikipedia articles directly. Instead, look up the references in the Wikipedia articles and cite those references.
- You MAY cite any of the works (including mine) that I provide in the Starting Points section, below.
- You may use ANY citation format you prefer, as long as each cited reference has some kind of inline citation and each reference listed at the end contains enough information to find the original source. Popular citation formats include APA, IEEE, ACM, Springer Lecture Notes in Computer Science, etc. MLA and Turabian (University of Chicago Style) are also acceptable, although they aren’t as widely used in the computing disciplines. The important things with citation styles are to be consistent and to ensure that each source listed in the References section has at least one inline citation somewhere in the text.
- If you use Artificial Intelligence (AI) tools as part of your research, cite the AI tools used. These citations are in addition to the required number of references for the paper.
- If you use AI tools to assist with the writing, include additional references for the AI tool(s) used. You can simply include a sentence at the end of the paper stating which AI tools were used and include inline citations to those tools. Note that AI tool citations are in addition to the minimum number of required references.
The minimum number of required references (exclusive of AI tools) is:
- 10, if your team has 3 people, or
- 15, if your team has 4 people.
IMPORTANT: If you use AI tools to facilitate your work, please remember that you (the humans) are ultimately responsible for the content of the paper. Verify the output of all AI algorithms!
Team Leader
One person should be designated as the team leader for this milestone. Team leaders must rotate between milestones so that each person serves as team leader at least one time. It is up to each team to determine who will serve as leader for each individual milestone.
In general, the Team Leader should NOT be doing most of the research for the milestone. Instead, the team leader should:
- Manage the team, ensuring that everyone is communicating and is on track. Report any issues to the professor immediately. Convey any questions or requests for clarification to the professor in a timely manner.
- Compile and join the narrative text written by the team members, ensuring that it flows together in a single document.
- Write the introduction and conclusion sections.
- Combine the references found by the other team members and format them into the chosen reference style in the References section. (Again, any citation style as fine – just be consistent.)
- Ensure that each reference in the References section has at least one inline citation elsewhere in the paper.
- Check that all inline citations are using the same format (it doesn’t matter which format, as long as they are consistent).
- Proofread the paper and fix spelling and grammar issues.
- Export the completed report into PDF format.
- Share the completed document with the team and communicate to be sure no additional changes are needed.
- Submit the final PDF document before the milestone submission closes. Note that I have set Moodle to allow updating your submission, so you can share the document by submitting it. Each team member should be able to download the submission to complete the previous step. If changes are needed, simply resubmit an updated PDF.
Other Team Members
Non-leader team members should:
- Conduct the research to obtain the required number of sources.
- Write a substantial portion of the narrative section of the paper, citing the sources found.
- Communicate with each other and with the team leader to ensure that the work is completed in a timely manner. Remember that the team leader needs time to compile the final document.
- Record and document individual contributions to the team effort.
- Read the final report before the assignment submission closes.
- Verify that the milestone report has been submitted.
I have based the length requirements for the paper on the assumption of 7 pages of writing and 5 sources per regular team member, plus a half-page introduction and a half-page conclusion written by the Team Leader. That said, teams are free to divide the workload differently, as long as each person is making a substantial and roughly equal contribution according to the above guidelines.
Starting Points
Several years ago, I created a series of video lectures about the GDPR and CCPA. Note that details of the regulations may have changed since the time of recording! You still need to review the text of the regulations themselves.
- The General Data Protection Regulation
- The GDPR: Personal Data and Data Subjects
- The GDPR: Collecting, Processing, And Storing Data
- The California Consumer Privacy Act
The EUR-Lex website has the original text of the GDPR and the consolidated regulation. Note that in European lawmaking, the preambles (“whereas” clauses) at the beginning of the GDPR text are legally binding and therefore important. Reading these documents is almost as much fun as watching paint dry, so be prepared.
For the California Consumer Privacy Act, see also the CCPA information from the California Department of Justice. Several other states have enacted their own privacy regulations, which can be found using Internet searches. Wikipedia has tried to collect state privacy laws in the State privacy laws of the United States article, but many of the table entries refer to targeted regulations (which form the subject of the next milestone) instead of comprehensive regulations (this milestone).
Submission
Once the report is complete, the Team Leader should export it into PDF format and upload it as the submission for this milestone. Only the Team Leader needs to submit the final report, although another team member can submit in the event of an emergency involving the Team Leader. That said, everyone in the team should read the final report and double-check that their individual contributions are listed correctly at the end. Also, each team member should verify that the Team Leader has uploaded the final PDF before the assignment closing date in Moodle.
ABET Assessment
This activity supports the following ABET program SLOs:
- SLO 2. Design, implement, and evaluate a computing-based solution to meet a given set of requirements in the context of the program’s discipline.
- SLO 3. Communicate effectively in a variety of professional contexts.
- SLO 4. Recognize professional responsibilities and make informed judgments in computing practice based on legal and ethical principles.
- SLO 5. Function effectively as a member and leader of a team engaged in activities appropriate to the program’s discipline.