Developed contextual integrity as a way to assess the appropriateness of information flows.
What informs this conversation?
Source-linked EthicAtlas explanations and critical context. Original texts are not bundled for this thinker.
Helen NissenbaumEthicAtlas explanation · paraphrase
Developed contextual integrity as a way to assess the appropriateness of information flows.
Nissenbaum’s contextual integrity reframes informational privacy around appropriate flows within social contexts. It asks who sends information, who receives it, whom it concerns, what kind it is, and what conditions govern transmission. The framework explains why voluntary sharing in one setting need not authorize use in every other setting.
Nissenbaum’s contextual-integrity framework makes privacy questions precise by describing information flows within social contexts. Who sends the information, whom it concerns, who receives it, and under which conditions all matter. The same fact can be appropriate in a care relationship and inappropriate in an unrelated commercial use. This explains why disclosure is not necessarily surrender of all privacy interests. It also connects the judgment to the purposes and values of the institutions involved.
A framework based on norms must also evaluate those norms. Familiar data practices can be harmful, and beneficial innovations may require changing expectations. The central question is whether a flow fits the context’s legitimate purposes and values, rather than whether a notice happened to mention it or the information was already accessible.
Describe a fictional student’s request for learning support as a flow to a tutor under an expectation of assistance. Compare passing relevant information to an agreed accessibility team with transferring the record to an advertiser. The changes in recipient and purpose explain the complaint more clearly than calling the fact private in isolation. Established norms still need moral evaluation, because familiar practices may be unfair. The framework can support criticism of both surprising transfers and inadequate existing arrangements.
Editorial connection: Nissenbaum’s framework assesses information flows in their social contexts.
The privacy bargainEthicAtlas explanation · paraphrase
Does clicking agree make every use of personal information acceptable?
A privacy bargain offers a useful service in exchange for information. Its ethics cannot be assessed solely by checking whether someone clicked agree. Relevant questions include the necessity of collection, the person’s understanding, available alternatives, later recipients, and whether the purpose of use can change.
The bargain may offer an immediate convenience in exchange for information whose future uses are hard to see. Sharing a detail for navigation, health support, or conversation does not by itself settle whether it can be combined into a profile for another purpose. Meaningful choice requires understanding the recipient, the use, and the possibility of withdrawal. It also depends on alternatives: a person needing an essential service may have little practical freedom to reject its information terms.
Consent matters, but lengthy notices and dependence on a service can weaken its significance. A contextual approach also asks whether a data flow fits the setting’s legitimate norms. Those norms themselves need evaluation: familiar or widely accepted information practices can still treat people unfairly or undermine their agency.
In an invented app, compare collecting location only during a requested journey with storing a continuous history for unrelated analysis. Both designs could offer the same useful directions. Ask which additional information is necessary, who benefits from retaining it, and what happens if it is wrong. The example shows how a privacy assessment can examine the structure of a service, rather than reducing the entire question to whether a user clicked an acceptance button.
Editorial connection: The reuse of information invites assessment through contextual integrity.
Contextual integrityEthicAtlas explanation · paraphrase
Evaluate whether personal information moves in ways appropriate to the social context in which it was shared.
Contextual integrity evaluates whether information flows appropriately within social contexts. It considers the people sending, receiving, and described by information, the type of information, and the conditions governing transmission. A doctor’s office, a classroom, and a commercial platform may involve different legitimate expectations.
The framework analyzes a flow by identifying the subject, sender, recipient, information type, and transmission condition. A disclosure with permission differs from one made under confidentiality or for emergency support, even if the information is identical. This vocabulary helps make an otherwise vague privacy complaint precise. It also ties the assessment to the legitimate purposes of a context, so that a classroom’s information norms need not match those of a public debate or a commercial marketplace.
Established norms are evidence about a context, not an automatic moral endorsement. They may need revision when they preserve exclusion or fail a context’s legitimate purposes. The framework therefore asks both whether a flow departs from expectations and whether those expectations deserve to govern the practice.
In a fictional school, an accessibility team receives relevant support information under agreed confidentiality conditions. Moving the same record to a marketing partner changes the recipient and purpose. Describe both flows before judging them. Then ask whether the original norms themselves were fair: familiar practices can exclude students or demand unnecessary disclosures. Contextual integrity supports that critical question as well as the identification of surprising transfers, rather than treating every established expectation as morally authoritative.
Editorial connection: Nissenbaum’s framework assesses information flows in their social contexts.