Abstract

Nowadays, information systems are evolving towards increasingly interconnected, smart, and self-adaptive models. This transformation has led to the representation of the systems themselves in terms of natural ecosystems. Similar to the natural environment, the virtual world can be threatened by specific forms of pollution, such as illegitimate access to the system, unwanted changes to data, and loss of information, which affect the only resource it possesses, i.e., data. In order to provide proactive protection of data integrity and confidentiality, in this paper we consider the well-known principles of privacy by design and privacy by default in the design phase of system development. To this end, we propose an approach based on axiomatic design, which allows us to implement these two principles through an appropriate reinterpretation of the information axiom, in terms of privacy impact assessment. We illustrate our approach by a case study, which implements the process of managing patients in home care. However, the proposed method can be applied to processing systems that provide services. The main result achieved is to select the most digitally sustainable design solution, i.e., the one that best prevents the threats mentioned above.

Highlights

  • In the1960s, the neoclassical paradigm of economic development came into sharp crisis

  • We propose an approach based on axiomatic design, which allows us to implement these two principles through an appropriate reinterpretation of the information axiom, in terms of a Privacy Impact Assessment (PIA)

  • We propose the adoption of a comparative methodology of the PIA type [15], which allows ordering the set of functionally admissible solutions with respect to three specific categories of risks, which are, attempts of illegitimate access to the system, unwanted changes to data, and loss of information

Read more

Summary

Introduction

In the1960s, the neoclassical paradigm of economic development came into sharp crisis. Information systems can be, voluntarily or involuntarily, subjected to threats that can degrade their resources [5] From this point of view, an information system can be defined sustainable if it is designed in such a way as to preserve the integrity and confidentiality of the data. The application of the proposed approach allows selection of the most appropriate design solution to prevent the three threats previously introduced In this perspective, the concept of digital sustainability is equivalent to the design of a system that does not allow in any way the patient’s information to be altered, disclosed or processed for purposes other than those intended by the specific treatment [15].

Background
Case Study
Privacy Impact Assessment in Axiomatic Design
Application of Privacy Impact Assessment to the Case Study
Consecutive Decompositions
Conclusions

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call

Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.