Search

Addressing privacy and data protection systematically throughout the process of engineering information systems is a daunting task. Although the research community has made significant progress in theory and in labs, meltdowns in recent years suggest that we're still struggling to address systemic privacy issues. Privacy engineering, an emerging field, responds to this gap between research and practice. It's concerned with systematizing and evaluating approaches to capture and address privacy issues with engineering information systems. This article serves to illuminate this nascent field. The authors provide a definition of privacy engineering and describe encompassing activities. They expand on these with findings from the First International Workshop on Privacy Engineering (IWPE), and conclude with future challenges. [ABSTRACT FROM PUBLISHER]

Cloud computing provides well-known economic and technical advantages. However, the absence of knowledge on the privacy capabilities of service providers remains as one of the barriers for the adoption of cloud services. In this paper we describe a mechanism for the quantitative assessment of the privacy practices of different cloud service providers, so that their potential clients can compare among them and choose the one that better meets their requirements. We have validated our contributions in three different scenarios. [ABSTRACT FROM PUBLISHER]

User models generated from personal data are becoming a powerful tool used by service providers to personalize their supply, or introduce new features by means of recommendations or prediction of user behavior, among other applications. However, traditional user modelling requires each service provider to acquire and manage their users' personal information and carry out complex modelling processes. In this paper, we present a comprehensive personal data framework that distributes the user modelling process so that the personal data scattered in heterogeneous sources is used to generate on-demand, dynamic user models that can be retrieved by service providers to meet their business needs. Our proposal has been validated in a financial services scenario. [ABSTRACT FROM PUBLISHER]