Reaching for Informed Revocation: Shutting Off the Tap on Personal Data

Ioannis Agrafiotis (1) , Sadie Creese (1) , Michael Goldsmith (1) , Nick Papanikolaou (1)

1 International Digital Laboratory

We introduce a revocation model for handling personal data in cyberspace. The model is motivated by a series of focus groups undertaken by the EnCoRe project aimed at understanding the control requirements of a variety of data subjects. We observe that there is a lack of understanding of the various technical options available for implementing revocation preferences, and introduce the concept of informed revocation by analogy to Faden and Beauchamp's informed consent. We argue that we can overcome the limitations associated with informed consent via the implementation of EnCoRe technology solutions. Finally, we apply our model and demonstrate its validity to a number of data-handling scenarios which have arisen in the context of the EnCoRe research project. We have found that data subjects tend to alter their default privacy preferences when they are informed of all the different types of revocation available to them.

Mots clés: Data Privacy; Consent; Revocation; Requirements

Domaines: Bibliothèque électronique [cs.DL]

Ioannis Agrafiotis, Sadie Creese, Michael Goldsmith, Nick Papanikolaou. Reaching for Informed Revocation: Shutting Off the Tap on Personal Data. 5th IFIP WG 9.2, 9.6/11.4, 11.6, 11.7/PrimeLife International Summer School(PRIMELIFE), Sep 2009, Nice, France. pp.246-258, ⟨10.1007/978-3-642-14282-6_20⟩. ⟨hal-01061066⟩