Privacy models and languages: Obligation policies

Abstract

Privacy obligation policies define and describe the expected behaviours and constraints to be satisfied by data receiving entities (e.g. enterprises, service providers, e-commerce sites, etc.) when handling confidential and personal data. In this section we will often refer to data receiving entities as enterprises. They dictate a privacy-aware identity lifecycle management including data retention and deletion aspects, management of notifications and requests for authorization, data processing and transformation workflows. © 2011 Springer-Verlag Berlin Heidelberg.