Semi-Automatic Derivation and Application of Personal Privacy Policies

Abstract

The recent fast growth of the Internet has been accompanied by a similarly fast growth in the availability of Internet e-business services (e.g., electronic book seller service, electronic stock transaction service). This proliferation of e-business services has in turn fueled the need to protect the personal privacy of e-business users or consumers. We propose a privacy policy approach to protecting personal privacy. However, it is evident that the derivation of a personal privacy policy must be as easy as possible for the consumer. In this chapter, we define the content of personal privacy policies using privacy principles that have been enacted into legislation. We then present two semi-automated approaches for the derivation of personal privacy policies. The first approach makes use of accepted privacy rules obtained through community consensus (from research and/or surveys). The second approach makes use of privacy policies already existing in a peer-to-peer community. We conclude the chapter by explaining how personal privacy policies can be applied in e-business to protect consumer privacy.