Legal Issues About Metadata Data Privacy vs Information Security

Abstract

For the purposes of our work we use the concept of metadata to implement enterprise digital right management mechanisms in an intelligent document environment. Such metadata allows us to firstly define contextual security rules and secondly to ensure the information traceability. However, its use may have legal implications, especially with regard to metadata that can be stored (see personal data, privacy), how it should be stored (see probative value in case of litigation, digital forensics) or computer processing in which it may be involved. Another topical issue is the storage and the processing of data using a service provider: the cloud. We must ensure, however, that this solution does not lead to a loss of information controllability for the company. This article aims to position our work with respect to these legal issues.

Du contrôle de la collaboration humaine vers des contrats de service sémantiques pour la sécurité de l'information

“…In our work, we agree with the above definition of controllability, as well as its underlying motivation in terms of organizational risks. However, unlike existing works (Lalanne et al, 2013) (Munier et al, 2012) (Munier et al, 2014a) (Munier et al, 2014b) we are not restricted to data, but we consider more general organizational resources, referred to as assets. In our approach it is not only important the result of the service provision, but the way how this result was obtained in terms of the use of assets (behaviors of the service stakeholders) in order to avoid organizational damages.…”