Reaching for Informed Revocation: Shutting Off the Tap on Personal Data

by Ioannis Agrafiotis, Sadie Creese, Michael Goldsmith, Nikolaos Papanikolaou
Abstract:
We introduce a revocation model for handling personal data in cyberspace. The model is motivated by a series of workshops undertaken by the EnCoRe project aimed at understanding the control requirements of a variety of data subjects. We observe that there is a lack of understanding of the various technical options available for implementing revocation preferences, and introduce the concept of informed revocation by analogy to Faden and Beauchamp’s informed consent. We argue that we can overcome the limitations associated with informed consent via the implementation of EnCoRe technology solutions. Finally, we apply our model and demonstrate its validity to a number of data-handling scenarios which have arisen in the context of the EnCoRe research project. We have found that users tend to alter their default privacy preferences when they are informed of all the different types of revocation available to them.
Reference:
Reaching for Informed Revocation: Shutting Off the Tap on Personal Data (Ioannis Agrafiotis, Sadie Creese, Michael Goldsmith, Nikolaos Papanikolaou), In Proceedings of Fifth International Summer School on Privacy and Identity Management for Life, 2009.
Bibtex Entry:
@INPROCEEDINGS{Agrafiotis2009,
  author = {Ioannis Agrafiotis and Sadie Creese and Michael Goldsmith and Nikolaos
	Papanikolaou},
  title = {Reaching for Informed Revocation: Shutting Off the Tap on Personal
	Data},
  booktitle = {Proceedings of Fifth International Summer School on Privacy and Identity
	Management for Life},
  year = {2009},
  address = {Nice, France},
  month = sep,
  abstract = {We introduce a revocation model for handling personal data in cyberspace.
	The model is motivated by a series of workshops undertaken by the
	EnCoRe project aimed at understanding the control requirements of
	a variety of data subjects. We observe that there is a lack of understanding
	of the various technical options available for implementing revocation
	preferences, and introduce the concept of informed revocation by
	analogy to Faden and Beauchamp's informed consent. We argue that
	we can overcome the limitations associated with informed consent
	via the implementation of EnCoRe technology solutions. Finally, we
	apply our model and demonstrate its validity to a number of data-handling
	scenarios which have arisen in the context of the EnCoRe research
	project. We have found that users tend to alter their default privacy
	preferences when they are informed of all the different types of
	revocation available to them.},
  keywords = {privacy, consent, revocation, requirements},
  owner = {Nick},
  timestamp = {2010.06.20},
  url = {../files/primelife-revo.pdf}
}