Purpose Control: Did You Process the Data for the Intended Purpose?

Download Now
Provided by: Eindhoven University of Technology
Topic: Data Management
Format: PDF
Data protection legislation requires personal data to be collected and processed only for lawful and legitimate purposes. Unfortunately, existing protection mechanisms are not appropriate for purpose control: they only prevent unauthorized actions from occurring and do not guarantee that the data are actually used for the intended purpose. In this paper, the authors present a flexible framework for purpose control, which connects the intended purpose of data to the business model of an organization and detects privacy infringements by determining whether the data have been processed only for the intended purpose.
Download Now

Find By Topic