Problem
Research questions and friction points this paper is trying to address.
compositional risks
data protection impact assessment
distributed processing
privacy risks
service providers
Identification of Compositional Risks in Data Protection Impact Assessments and Beyond
🤖 AI Summary
本文提出了一种新协议，用于检测和管理在分布式个人数据处理中由于数据处理器组合选择而产生的隐私风险。
📝 Abstract
When personal data is processed in a distributed manner by cooperating service providers, privacy risks may emerge solely from the choice of data processors included in the composition. For instance, different data processors may unknowingly rely on the same cloud provider, allowing for unintended linkability of personal data at that very provider. As such compositional risks to privacy are beyond the scope of each individual risk assessment, they are likely to be overseen when performing a data protection impact assessment. In this paper, we propose a novel protocol to detect and manage such compositional risks to privacy. Following an initial problem definition and requirements elicitation, we elaborate how our protocol identifies candidates for compositional risks and how this information may be used to improve the results of a data protection impact assessment over service compositions including multiple data processors.
Innovation
Methods, ideas, or system contributions that make the work stand out.
compositional risks
privacy
data protection impact assessment
protocol
🔎 Similar Papers
No similar papers found.
