Legal Issues about Metadata: Data Privacy vs Information Security

Manuel Munier (1) , Vincent Lalanne (1) , Pierre-Yves Ardoy (2) , Magali Ricarde

1 LIUPPA - Laboratoire Informatique de l'Université de Pau et des Pays de l'Adour
2 CRAJ - Centre de Recherche et d'Analyse Juridiques

For the purposes of our work we use the concept of metadata to implement enterprise digital right management mechanisms in an intelligent document environment. Such metadata allow us to firstly define contextual security rules and secondly to ensure the information traceability. However, its use may have legal implications, especially with regard to metadata that can be stored (see personal data, privacy), how it should be stored (see probative value in case of litigation, digital forensics) or computer processing in which it may be involved. Another topical issue is the storage and the processing of data using a service provider: the cloud. We must ensure, however, that this solution does not lead to a loss of information controllability for the company. This article aims to position our work with respect to these legal issues.

Mots clés: privacy; metadata; information security; socio-economic issues

Domaines: Cryptographie et sécurité [cs.CR]; Génie logiciel [cs.SE]

Manuel Munier, Vincent Lalanne, Pierre-Yves Ardoy, Magali Ricarde. Legal Issues about Metadata: Data Privacy vs Information Security. 8th International Workshop on Data Privacy Management (DPM'2013), Sep 2013, Egham, United Kingdom. pp.162-177. ⟨hal-01082056⟩