Short paper: A Framework for the privacy access control model

Abstract

Today privacy is a key issue when securing business processes. It has received increasing attention from consumers, companies, researchers and legislators. Organizations claim to have their own privacy policy as well as guarantee its proper enforcement. In this work we consider privacy features at the early stages of the systems development and specifically focus on modelling and analysis of the system requirements. A framework for modelling privacy access control policies was created through (i) defining access control policies that satisfy privacy requirements (ii) verification of designed privacy access control policy, and (iii) a set of heuristics for defining policy.