Conflict and combination in privacy policy languages

ABSTRACT

Many modern enterprises require methods for guaranteeing compliance with privacy legislation and announced privacy policies. IBM has proposed a formal language, the Enterprise Privacy Authorization Language (EPAL), for describing privacy policies rigorously. In this paper, we identify four desirable properties of a privacy policy language: guaranteed consistency, guaranteed safety, admitting local reasoning, and closure under combination. While EPAL achieves only one of these four goals, an extended language framework allows us to achieve three out of four, while retaining the basic EPAL framework of restricting access and imposing obligations on users of confidential information.

References

1. A. Antón, Q. He, and D. Baumer. The complexity underlying JetBlue's privacy policy violations. IEEE Security & Privacy, 2004. To appear.
2. G. Karjoth and M. Schunter. A privacy policy model for enterprises. In 15th IEEE Computer Security Foundations Workshop. IEEE Computer Society Press, 2002.

Index Terms

• Hardware

  • Communication hardware, interfaces and storage

• Networks

• Security and privacy

  • Human and societal aspects of security and privacy

• Social and professional topics

  • Computing / technology policy

    • Privacy policies