Three privacy harms taxonomies
Last reviewed:
Match the name to the structure. MITRE PANOPTIC combines contextual domains and privacy activities; the Ryan Calo taxonomy splits harm into subjective vs objective; and Citron & Solove taxonomy lists seven harm types.
Match the name to the structure. MITRE PANOPTIC combines contextual domains and privacy activities; the Ryan Calo taxonomy splits harm into subjective vs objective. MITRE PANOPTIC combines contextual domains and privacy activities; the Ryan Calo taxonomy splits harm into subjective vs objective. These three appear as straight recall questions.
| Taxonomy | Structure |
|---|---|
| 🛰️ MITRE PANOPTIC | Two taxonomies combined → contextual domains (context of a privacy attack) + privacy activities (activities constituting an attack). Data-driven → supports threat assessment, risk modelling and red teaming |
| ⚖️ Ryan Calo | Two broad categories → subjective (internal sense of being harmed) vs objective (external to the person, e.g. personal data used for an adverse action like refusing a loan) |
| 📚 Citron & Solove | Seven harm types → physical, reputational, relationship, economic, discrimination, psychological, autonomy |
People Rarely Recall Every Detail, Psychology Aside → Citron & Solove → Physical · Reputational · Relationship · Economic · Discrimination · Psychological · Autonomy.
Key terms - quick answers
What is “MITRE PANOPTIC”?
What is “Ryan Calo taxonomy”?
What is “Citron & Solove taxonomy”?
Keep going - free
Every study note on this site is free. So are these: