A system for controlled outsourcing of personal data.

In this paper, we demonstrate how a third-party architecture can be used to efficiently manage personal data over the web. Main benefits of the proposed system are its scalability, in terms of number of users and amount of data, the compliance with emerging web standards, and the enforcement of privacy requirements of data owners. Privacy requirements are enforced by making use of encryption techniques, and by relying on a Trusted Privacy Manager in charge of data encryption and key delivering. In the paper, besides providing an overview of the proposed architecture we focus on the functioning of the Trusted Privacy Manager and on query processing. [ABSTRACT FROM AUTHOR]