Towards privacy in personal data management

Abstract

Purpose -In order to enhance privacy protection during electronic transactions, we propose, develop and evaluate a personal data management framework called Polis, which abides by the following principle: Every individual has absolute control over her personal data, which reside only at her own side. Design/methodology/approach -The paper identifies representative electronic transactions that involve personal data and proposes Polis-based protocols for them. The approach is evaluated on a Polis prototype both as a stand-alone application and as part of a commercial database management system. Findings -The results of this work indicate that electronic transactions can remain both feasible and straightforward, while personal data remain only at the owner's side. Research limitations/implications -The paper describes a Polis-approach implementing prototype, which is easy to deploy and friendly to current information management technologies. However, the usability of the prototype has to be enhanced with supporting tools for editing personal data and policies and a more intuitive user interface. Finally, the Polis-platform enables a new class of user-centered distributed applications, which we intend to investigate. Practical implications -Even though the conditions for a personal data management approach like Polis are mature, and Polis can be progressively adopted, it still entails a major change in current business practices. Originality/value -The paper proposes a new paradigm for the management of personal data, which admits individuals to have their personal data stored only at their own side. The new approach can be of mutual benefit to both individuals and companies.

Özel Bir Hukuksal Koruma ve Veri Kategorisi Alanı: Hassas Kişisel Veriler

“…[59] Çeşitli kuruluşlar ve ülkelerce kişisel bilgilerin korunması için gizlilik düzenlemeleri yayınlanması, hassas kişisel verilerin açıklanmasının istisnai durumlara özgülenmesi, verilerin birleştirilmiş veya anonimleştirilmiş formlar kullanılarak sağlanmaya çalışılması, detaylı veri güvenlik politikaları geliştirilmesi, adil bilgi uygulamalarının yaygınlaştırılması (fair information practices-FIP) ve bilgi paylaşım standartlarının saptanması sözü edilen denge arayışına yanıt bulma çabalarının somut birer yasal-kurumsal örnekleri niteliğindedir. [60] Açıklanması halinde ayrımcılık duygularını diğer kişisel verilere göre daha çok kışkırtacak olması ve ortaya çıkaracağı zararın büyüklüğü hassas verileri özellikli ve koruma öncelikli hukuksal varlıklar haline getiren önemli bir etkendir. Ancak hangi verilerin bu kapsamda değer kazanacağını belirginleştirmek bir hayli güçtür.…”

Economics of Personal Data Management: Fair Personal Information Trades

“…A system that satisfies the above requirements for the management of personal information is the Polis platform described in [7]. In Polis, for every individual there is a personal agent, which is constantly accessible over the Internet.…”

“…We use the Bouncycastle library for the cryptographic primitives. The management of the personal data is done with the Polis platform developed in [7]. The Payword micropayments used in the prototype are an adaptation of the Payword implementation in [8].…”