A roadmap for comprehensive online privacy policy management

Communications of the ACM

Volumn 50, Issue 7, 2007, Pages 109-116

  Antón, Annie I ^a   Bertino, Elisa ^b   Li, Ninghui ^c   Yu, Ting ^a  

^a North Carolina State University   (United States)

^b PURDUE UNIVERSITY   (United States)

^c Purdue University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ONLINE PRIVACY POLICY MANAGEMENT; PRIVACY POLICY LIFE CYCLES;

INFORMATION MANAGEMENT; LIFE CYCLE; ONLINE SYSTEMS;

DATA PRIVACY;

EID: 34547332566     PISSN: 00010782     EISSN: 15577317     Source Type: Journal    
DOI: 10.1145/1272516.1272522     Document Type: Article

References (12)

1. Acquisti, A. Privacy in electronic commerce and the economics of immediate gratification. In Proceedings of the ACM Electronic Commerce Conference. ACM Press, NY, 2004, 21-29.
2. Antón, A.I., Earp, J.B., Bolchini, D., He, Q., Jensen, C, and Stufflebcam, W. The lack of clarity in financial privacy policies and the need for standardization. IEEE Security & Privacy 2, 2 (2004), 36-45.
3. Antón, A.I., He, Q., and Baumer, D. The complexity underlying Jet-Blue's privacy policy violations. IEEE Security & Privacy (to appear).
4. Ashley, P. A privacy logging and reporting framework. In Proceeding of the Asia Pacific Information Technology Security Conference (University of Queensland, May 24-27, 2004).
5. Bell, D. and LaPadula, L. Secure Computer Systems: Mathematical Foundations. Technical Report MTR-2547 1. MITRE Corporation, Mar. 1973.
6. Earp, J.B., Baumer, D.L., and Poindexter, J.C. Modeling privacy values with experimental economics. Workshop on Privacy in the Electronic Society (Washington, D.C., Oct. 28, 2004).
7. Karjoth, G., Schunter, M., and Van Herreweghe, E. Translating privacy practices into privacy promises-How to promise what you can keep. In Proceeding of the 4th IEEE International Workshop on Policies fir Distributed Systems and Networks. June 2003, 135-146.
8. Karjoth, G., Schunter, M., and Waidner, M. Platform for enterprise privacy practices: Privacy-enabled management of customer data. In Proceedings of the Second International Workshop on Privacy Enhancing Technologies, LNCS 2482, (2003), 69-84.
9. Li, N., Yu, T., and Antón, A.I. A semantics-based approach to privacy languages. CERIAS Technical Report TR 2003-28. Purdue University, Nov. 2003.
10. Schunter, M., Van Herreweghen, E., and Waidner, M. Expressive privacy promises - How to improve the Platform for Privacy Preferences (P3P). Position paper for W3C Workshop on the Future of P3P (available at www.w3.org/2002/p3p- ws/pp/ibm-zuerich.pdf).
11. Schutzer, D.M. Citigroup P3P position paper. Position paper for W3C Workshop on the Future of P3P (available at www.w3.org/2002/p3pws/pp/ibm- zuerich.pdf).
12. W3C. Platform for Privacy Preferences (P3P) project; www.w3.org/P3P/