Privacy contracts incorporated in a privacy protection framework

Computer Systems Science and Engineering

Volumn 21, Issue 1, 2006, Pages 5-16

  Oberholzer, Hendrik J G ^a   Olivier, Martin S ^b  

^a TSHWANE UNIVERSITY OF TECHNOLOGY   (South Africa)

^b UNIVERSITY OF PRETORIA   (South Africa)

Author keywords

Privacy; Privacy contracts; Privacy policy

Indexed keywords

PERSONAL INFORMATION; PRIVACY CONTRACTS; PRIVACY POLICY; PRIVACY PROTECTION FRAMEWORKS;

CONTRACTS; CONTROL SYSTEMS; LAW ENFORCEMENT; PROBLEM SOLVING; PUBLIC POLICY; SECURITY OF DATA; SOFTWARE ENGINEERING;

DATA PRIVACY;

EID: 33646357746     PISSN: 02676192     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Review

References (34)

1. Republic of Argentina (2000) Personal Data Protection Act 25.326 [Online]. Privacy International. Available from: http://www. privacyinternational.org/countries/argentina/argentine-dpa.html [Accessed: 11/11/2004].
2. Kingdom of the Netherlands (2000) Personal Data Protection Act: unofficial translation: Upper House of the Dutch Parliament: session 1999-2000, nr. 92: 25 892 rules for the protection of personal data [Online]. Planet Internet. Available from: http://home.planet.nl/~privacy1/wbp_en_rev.htm [Accessed: 8/8/2004].
3. Republic of South Africa (2002) Electronic Communications and Transactions Act, No. 25 of 2002 [Online]. Available from: http://www.acts.co. za/ect_act/index.htm [Accessed: 27/07/2004].
4. Australian Privacy Charter Council (1994) Australian Privacy Charter [Online]. Available from: http://www.anu.edu.au/people/Roger.Clarke/DV/ PrivacyCharter.html [Accessed: 07/06/2004.
5. Karjoth, G., Schunter, M. and Waidner, M. (2003) Platform for enterprise privacy practices: privacy-enabled management of customer data. In: 2nd Workshop on Privacy Enhancing Technologies (PET 2002), Lecture Notes in Computer Science. S.I.: Springer:69-84.
6. Nykamp, M. and McEachern, C. (2001) Customer relationship report: privacy, CRM and ROI. DM Review[Online], Feb. 2001. Available from: http://www.dmreview.com/editorial/dmreview/ print_action.cfm?articleid=3014 [Accessed: 22/07/2004].
7. Vila, T., Greenstadt, R. and Molnar, D. (2003) Why we can't be bothered to read privacy policies: models of privacy economics as a lemons market. In: Proceedings of the 5th International Conference on Electronic Commerce, held in Pittsburgh, PA, New York, N.Y.: ACM:403-407. (ACM International Conference Proceedings Series, vol. 50).
8. Favilla, E. (2004) Companies and consumers clash on privacy issues. DestinationCRM [Online], Jan. 29. Available from: http://www.destinationcrm.com/ articles/default.asp?articleid=3825. [Accessed: 18/02/2004].
9. Agrawal, R., Kiernan, J., Srikant, R. and Xu, Y. (2002) Hippocratic databases. In: Proceedings of the 28th VLDB Conference, 20-23 August 2002, Hong Kong, China.
10. Lefevre, K., Agrawal, R., Ercegovac, V., Ramakrishnan, R., Xu, Y. and Dewitt, D. (2004) Limiting disclosure in Hippocratic Databases. In: Proceedings of the 30th VLDB Conference, Toronto, Canada.
11. Massacci, F., Mylopoulos, J. and Zannone, N. Minimal disclosure in hierarchical Hippocratic databases with delegation. [Online]. Available from: http://dit.unitn.it/~zannone/publication/abstract/mass-mylo-zann-05-ESORICS. html [Accessed: 14/08/2005].
12. Oberholzer, H.J.G. and Olivier, M.S. (2005a) Privacy contracts as en extension of privacy policies. In: Proceedings of the International Workshop on Privacy Data Management, PDM 2005, April 9 2005, Tokyo, Japan, in conjunction with IEEE ICDE 2005. S.1.:s.n.:11-19.
13. Ishitani, L., Almedia, V. and Meira, W. (2003) Masks: bringing anonymity and personalization together. IEEE Security and Privacy, 1(3), May/June:18-23.
14. Oberholzer, H.J.G. and Olivier, M.S. (2005b) Principles of privacy protection: a revised hippocratic approach supported by an entity relationship diagram. [Pretoria: TUT]. (Technical Report; FRC/29/08/05).
15. Lau, T., Etzioni, O. and Weld, D.S. (1999) Privacy interfaces for information management. Communications of the ACM, 42(10), Oct.:89-94.
16. IBM Almaden Research Center (2004) Intelligent information systems: Hippocratic database [Online]. IBM Almaden Research Center. Available from: http://www.almaden.ibm.com/software/quest/Projects/hippodb/activeenf/ [Accessed: 19/01/2004].
17. Ashley, P., Powers, C. and Schunter, M. (2002) From privacy promises to privacy management: a new approach for enforcing privacy throughout an enterprise. In: New Security Paradigms Workshop '02, 23-26 September, Virginia Beach, Virginia. New York, NY: ACM Press:43-50.
18. Westin, A.F. (1991) Harris-Equifax consumer privacy survey 1991. GA:Equifax Inc, Atlanta.
19. Hill, K. (2004) Online privacy policies misleading. CRMDaily [Online], Jan. 21. Available from: http://www.crm-daily.news-factor.com/perl/story/23036. html [Accessed: 22/01/2004].
20. Irvine, U.C. (2004) Clear privacy practices boost trust and online sales.ScienceBlog [Online], Aug. 30. Available from: http://www.scienceblog.com/ community/article-print-3871.html [Accessed: 03/09/2004].
21. Alexander, Z. (2004) A closer look at the fine print in privacy statements. InformIT [Online], Jun. 11. Available from: http://www.informit.com/ articles/printerfriendly.asp?p=174302 [Accessed: 08/06/2004].
22. Date, C.J. (2000) An introduction to database systems. 7th ed. Reading, Mass: Addison Wesley Longman.
23. Garfinkel, S. and Spafford, G. (2001) Web security, privacy and commerce. 2nd ed. Cambridge, Mass.: O'Reilly.
24. Miller, M. (2002) Absolute PC security and privacy: defend your computer against outside intruders. San Francisco, Calif.: Sybex.
25. Buecker, A. and Watanabe, Y. (2003) Design considerations for privacy-preserving database access [Online]. Austin, Tex.: IBM:1-30. Available from: http://www.redbooks.ibm.com/redpapers/pdfs/redp3720.pdf [Accessed: 21/01/2004].
26. Nevins, S.C. (2003) Database security: protecting sensitive and critical information. DM Direct Newsletter [Online], Jan. 3. Available from: http://www.dmreview.com/editorial/newsletter_article.cfm?nl= dmdirectandarticleId=6310andissue=351 [Accessed: 7/8/2004].
27. Bowers, F. (2004) Dept admits privacy breach. IrishHealth [Online], Jun. 6. Available from: http://www.irishhealth.com/?level=4andid=5992. [Accessed: 27/10/2004].
28. Jahnke, A. (2003) Three things you don't want to know about your personal information. Darwin, [Online], July 9. Available from: http://www.darwinmag. com/connect/opinion/column.html ?ArticleID=831 [Accessed: 27/10/2004].
29. Stolen data: yet another financial privacy breach. 2004. SignOn SanDiego [Online], Apr. 17. Available from: http://www.signonsandiego.com/uniontrib/ 20040417/news_lz1e d17middle.html [Accessed: 27/10/2004].
30. Senators want to investigate privacy breach by jetblue airlines. 2004. NewsTargetNetwork, [Online], Oct. 26. Available from: http://www.NewsTarget.com/ 000251.html [Accessed: 27/10/2004].
31. Clayburn, T. (2004) Report: people don't trust government to protect privacy. InformationWeek [Online], Feb. 13. Available from:http://www. informationweek.com/story/showArticle.jhtml ?articleID=17700220. [Accessed: 24/02/2004].
32. Groszkruger, Z. Patient privacy: practical tips to avoid being caught in a legal crossfire [Online]. CAPPMT. Available from: http://www.cap-mpt.com/ riskmanagement/patient-privacy.html. [Accessed: 19/07/2004].
33. Cazier, J.A., Shao, B.B.M. and St. Louis, R.D. (2003) Addressing e-business privacy concerns: the roles of trust and value compatibility. In: Proceedings of the 2003 ACM Symposium on Applied Accounting, held in Melbourne, Florida, USA. New York, N.Y.: ACM: 617-622.
34. Sinha, A.K. (2003) Mixing privacy and business intelligence. DMReview [Online]. Available from: http://www.dmreview.com/ editorial/dmreview/ print_action.cfm?articleld=7268. [Accessed: 22/07/2004].