A hippocratic privacy protection framework for relational databases

Abstract

Individuals are not comfortable when disclosing their personal information to corporate organisations and are becoming increasingly concerned. Decision criteria needed for privacy protection are more complex than those that apply to access control when managing security. A typical problem in this context concerns giving individuals better control over their personal information, while at the same time allowing the organisation to process its transactions on the same personalised information. To address this difficulty, we consider extending the Hippocratic principles and model them in our Hippocratic Privacy Protection (HPP) framework that is based on the concept of privacy contracting. A prototype of the proposed HPP framework was constructed to serve as a proof of concept in order to demonstrate the developed HPP framework as an applicable and efficacious model for solving privacy problems. Based on this prototype, we afford individuals more control over their personal information. The prototype that we developed is validated against a proposed PET evaluation framework.