A Reactive Approach for Use-Based Privacy

Abstract

Use-based privacy views privacy in terms of authorized uses, a philosophy well-suited for data collection and data analysis applications that arise in networked information systems. This work takes a first step toward investigating the technical feasibility of use-based privacy. We identify requirements for a feasible, expressive, use-based privacy regime. A user-study with 100 Amazon Turkers gives evidence for the validity of these requirements. And the approach is instantiated through avenance policies, whose expressiveness is assessed by formulating HIPAA and the Facebook privacy policies.