A roadmap for comprehensive online privacy policy management

ABSTRACT

A framework supporting the privacy policy life cycle helps guide the kind of research to consider before sound privacy answers may be realized.

REFERENCES

• 1: Alessandro Acquisti, Privacy in electronic commerce and the economics of immediate gratification, Proceedings of the 5th ACM conference on Electronic commerce, May 17-20, 2004, New York, NY, USA [doi>10.1145/988772.988777]
• 2: Antón, A.I., Earp, J.B., Bolchini, D., He, Q., Jensen, C., and Stufflebeam, W. The lack of clarity in financial privacy policies and the need for standardization. IEEE Security & Privacy 2, 2 (2004), 36--45.
• 3: Antón, A.I., He, Q., and Baumer, D. The complexity underlying JetBlue's privacy policy violations. IEEE Security & Privacy (to appear).
• 4: Ashley, P. A privacy logging and reporting framework. In Proceedings of the Asia Pacific Information Technology Security Conference (University of Queensland, May 24--27, 2004).
• 5: Bell, D. and LaPadula, L. Secure Computer Systems: Mathematical Foundations. Technical Report MTR-2547 1. MITRE Corporation, Mar. 1973.
• 6: Julia B. Earp , J. C. Poindexter , David L. Baumer, Modeling privacy values with experimental economics, Proceedings of the 2004 ACM workshop on Privacy in the electronic society, October 28-28, 2004, Washington DC, USA [doi>10.1145/1029179.1029185]
• 7: Günter Karjoth , Matthias Schunter , Els Van Herreweghen, Translating Privacy Practices into Privacy Promises—How to Promise What You Can Keep, Proceedings of the 4th IEEE International Workshop on Policies for Distributed Systems and Networks, p.135, June 04-06, 2003
• 8: Karjoth, G., Schunter, M., and Waidner, M. Platform for enterprise privacy practices: Privacy-enabled management of customer data. In Proceedings of the Second International Workshop on Privacy Enhancing Technologies, LNCS 2482, (2003), 69--84.
• 9: Li, N., Yu, T., and Antón, A.I. A semantics-based approach to privacy languages. CERIAS Technical Report TR 2003--28. Purdue University, Nov. 2003.
• 10: Schunter, M., Van Herreweghen, E., and Waidner, M. Expressive privacy promises---How to improve the Platform for Privacy Preferences (P3P). Position paper for W3C Workshop on the Future of P3P (available at www.w3.org/2002/p3p-ws/pp/ibm-zuerich.pdf).
• 11: Schutzer, D.M. Citigroup P3P position paper. Position paper for W3C Workshop on the Future of P3P (available at www.w3.org/2002/p3p-ws/pp/ibm-zuerich.pdf).
• 12: W3C. Platform for Privacy Preferences (P3P) project; www.w3.org/P3P/

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.5 INFORMATION INTERFACES AND PRESENTATION (I.7)
      H.5.2 User Interfaces (D.2.2, H.1.2, I.3.6)

Additional Classification:
  H. Information Systems
  H.5 INFORMATION INTERFACES AND PRESENTATION (I.7)
      H.5.4 Hypertext/Hypermedia

  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.4 Electronic Commerce