Revoking Personal Data in the Digital World

Kounga, Gina ; Bramhall, Pete

HP Development Company

关键词: Privacy;    Security and Privacy Protection;   

RP-ID  :  HPL-2009-362

学科分类：计算机科学（综合）

美国|英语

来源: HP Labs

【 摘 要 】

Requiring data subjects to authorise organisations, from which they request some services, to use their personal data in order for these services be provided has become common practice. This, partly because in order to provide a service to the right individual, an organization needs to know who that individual is. But also, because personal data are an asset that organisations have an interest in keeping. In this context, individuals are in situations where they are constrained to give away their personal data without being capable of stopping these data to be used for operations that are not necessary profitable to them. In this paper, we discuss the revocation of the consent to use or access personal data. We study the technical challenges that need to be overcome in order to allow data subjects to revoke their consent as well as the requirements that should be fulfilled to provide such a revocation.