Privacy models and languages: Access control and data handling policies

Abstract

The huge amount of personal information available on the Web has led to growing concerns about the privacy of its users, which has been recognized as one of the main reasons that prevents users from using the Internet for accessing online services. Users in fact prefer not to be under the control of anyone at anytime. In this context, the concept of privacy control is introduced, and it should encompass three main aspects: to guarantee the desired level of privacy of information by controlling the access to services/resources; to control secondary use of information disclosed for the purpose of access control enforcement; to deal with the specific management of related privacy obligations [Cas04b] (e.g., data retention, data deletion, notifications). © 2011 Springer-Verlag Berlin Heidelberg.