Privacy Policy Specification and Audit in a Fixed-Point Logic - How to Enforce HIPAA, GLBA and All That

The growth of the Internet has been accompanied by a proliferation of e-services, especially in the area of e-commerce (e.g., Amazon.com, eBay.com). However, consumers of these e-services are becoming more and more sensitive to the fact that they are giving up private information every time they use them. At the same time, legislative bodies in many jurisdictions have enacted legislation to protect the privacy of individuals when they need to interact with organizations. As a result, e-services can only be successful if there is adequate protection for user privacy. The use of personal privacy policies to express an individual’s privacy preferences appears best-suited to manage privacy for e-commerce. We first motivate the reader with our e-service privacy policy model that explains how personal privacy policies can be used for e-services. We then derive the minimum content of a personal privacy policy by examining some key privacy legislation selected from Canada, the European Union, and the United States.

Download Full-text

Towards Generalization of Privacy Policy Specification and Property-Based Information Leakage

Information Systems Security - Lecture Notes in Computer Science ◽

10.1007/978-3-319-72598-7_5 ◽

2017 ◽

pp. 68-87 ◽

Cited By ~ 1

Author(s):

Dileep Kumar Koshley ◽

Sapana Rani ◽

Raju Halder

Keyword(s):

Information Leakage ◽

Privacy Policy ◽

Policy Specification

Download Full-text

Legislative Based for Personal Privacy Policy Specification

Electronic Government ◽

10.4018/978-1-59904-947-2.ch194 ◽

2011 ◽

pp. 2622-2633

Author(s):

George Yee ◽

Larry Korba ◽

Ronggong Song

Keyword(s):

Private Information ◽

The United States ◽

Privacy Policy ◽

The European Union ◽

Personal Privacy ◽

User Privacy ◽

Privacy Policies ◽

Policy Model ◽

Privacy Preferences ◽

Policy Specification

The growth of the Internet has been accompanied by a proliferation of e-services, especially in the area of e-commerce (e.g., Amazon.com, eBay.com). However, consumers of these e-services are becoming more and more sensitive to the fact that they are giving up private information every time they use them. At the same time, legislative bodies in many jurisdictions have enacted legislation to protect the privacy of individuals when they need to interact with organizations. As a result, e-services can only be successful if there is adequate protection for user privacy. The use of personal privacy policies to express an individual’s privacy preferences appears best-suited to manage privacy for e-commerce. We first motivate the reader with our e-service privacy policy model that explains how personal privacy policies can be used for e-services. We then derive the minimum content of a personal privacy policy by examining some key privacy legislation selected from Canada, the European Union, and the United States.

Download Full-text