|
The Privacy Policy Permission Model: A Unified View of Privacy Policies
Maryam Majedi(a),(*), Ken Barker(b)
Transactions on Data Privacy 14:1 (2021) 1 - 36
Abstract, PDF
(a) Department of Computer Science, University of Toronto, Toronto, ON, M5S 2E4, Canada.
(b) Department of Computer Science, University of Calgary, Calgary, AB, T2N 1N4, Canada.
e-mail:majedi @cs.toronto.edu; kbarker @ucalgary.ca
|
|
Abstract
Organizations use privacy policies to communicate their data collection practices to their clients. A privacy policy is a set of statements that specifies how an organization gathers, uses, discloses, and maintains a client's data. However, most privacy policies lack a clear, complete explanation of how data providers' information is used. We propose a modeling methodology, called the Privacy Policy Permission Model (PPPM), that provides a uniform, easy-to-understand representation of privacy policies, which can accurately and clearly show how data is used within an organization's practice. Using this methodology, a privacy policy is captured as a diagram. The diagram is capable of highlighting inconsistencies and inaccuracies in the privacy policy. The methodology supports privacy officers in properly and clearly articulating an organization's privacy policy.
|
