Reaching for informed revocation: shutting off the tap on personal data

Abstract. We introduce a revocation model for handling personal data in cyberspace. The model is motivated by a series of workshops undertaken by the EnCoRe project aimed at understanding the control requirements of a variety of data subjects. We observe that there is a lack of understanding of the various technical options available for implementing revocation preferences, and introduce the concept of informed revocation by analogy to Faden and Beauchamp’s informed consent. We argue that we can overcome the limitations associated with informed consent via the implementation of EnCoRe technology solutions. Finally, we apply our model and demonstrate its validity to a number of datahandling scenarios which have arisen in the context of the EnCoRe research project. We have found that users tend to alter their default privacy preferences when they are informed of all the different types of revocation available to them

Supporting Data Privacy in P2P Systems

Abstract. Peer-to-Peer (P2P) systems have been very successful for large-scale data sharing. However, sharing sensitive data, like in online social networks, without appropriate access control, can have undesirable impact on data privacy. Data can be accessed by everyone (by potentially untrusted peers) and used for everything (e.g., for marketing or activities against the owner’s preferences or ethics). Hippocratic databases (HDB) provide an effective solution to this problem, by integrating purposebased access control for privacy protection. However, the use of HDB has been restricted to centralized systems. This chapter gives an overview of current solutions for supporting data privacy in P2P systems, and develops in more details a complete solution based on HDB